SAP Security Engineer

Position Title: SAP Security Engineer
Position Type: Regular - Full-Time
Position Location: New Delhi
Requisition ID: 32277
JD - SAP Security Engineer
Work with the IAM team to support the SAP-GRC, Security and other IAM related areas.
ARA: Access Risk Analysis

• Creation and Maintenance of Rule Sets, Functions & Risks pertaining to:
  • SODs - Segregation of Duty violations (single system and cross system)
  • Critical Actions
  • Critical Permissions
• Creation and Maintenance of Mitigating Controls
• Evaluation of access risks at User and Role levels
• Transportation of Rule Set changes into production

ARM: Access Request Management

• Understanding of connections and connections groups within GRC-ARM
• Creation and Maintenance of Workflows for SAP environments
• Creation and Maintenance of Workflow for non-SAP environments
• Creation of ARM requests:
  • Access Request
  • Model User
  • Templated Based Request
  • Copy Request
• Troubleshoot requests in the Error Queue
• Creation of new users in SAP
• Expiry of leavers in SAP
• UAR: Perform reviews of users' access, risk violations and role assignments

BRM: Business Role Management

• Import new roles into GRC
• Maintenance of Role Owners
• Maintenance of Critical level assigned to roles

EAM: Emergency Access Management (Firefighter)

• Creation of new FF IDs
• Maintenance of FF Owners and their responsibilities
• Maintenance of FF Controllers and their responsibilities

Master Data Setup

• Setup of master data in Process Controls:
  • Organizations
  • Regulations
  • Business Processes
  • Existing Mitigating Controls

Semi-Automated Controls (Internal Controls)

• Creation and Maintenance of Data Sources
• Creation and Maintenance of Business Role Parameters
• Creation and Maintenance of Business Rules
• Creation and Maintenance of Business Rule Assignments
• Creation and Maintenance of Automated Monitoring of Controls
• Change Control Process: transport new controls from Dev to Production

Control Design Assessment

• Creation and Maintenance of Mitigation Control Assessments
• Assessment Survey Results / monitor to see open / overdue issues

Creation and maintenance of security roles

• Change process for security roles:
  • Security Role design (Composite vs Single roles)
  • Role naming conventions
  • Note: Functional owners responsible for approving all changes to roles
• Reviewing all security role changes for workflow approval control compliance, avoidance of SOD violations, tracking of custom tcode creation, updating ruleset
• Troubleshooting security authorization errors
• Understanding of basic security t-code (PFCG, SUIM, SU01, SU3, SU53, ...)
• Understanding of basic security tables (USR02, AGR_1251, AGR_1252, AGR-AGRS, ...)

S4 Hana Transformation
Lead Security team efforts on S4Hana project

• Represent security team in meeting, activities, requests of the S4Hana transformation project at McCain
• Existing SAP Roles and SOD Risk Ruleset modification for revised S4Hana tcodes/authorizations - understand purpose and activities that can be done by the new tcodes & update accordingly
• Review any changes to McCain custom (Z) tcodes in regard to SOD violations
• Review of the installation of new connectors from GRC ARM to the S4 environment
• Improve GRC User Experience (e.g. Role based access provided, additional information for approvers) - if not only 'lift and shift'

User Support and Audit Coordination

• Respond to requests from users for SAP GRC information
• Troubleshoot requests on issues with ARM requests or ARM workflow
• Queries on SAP Security

Coordinate with audit teams on SAP audit requests

• Provide SAP information requests for both Internal and External audit

Cross-training on responsibilities with the wider IAM team

• Support and assist on other IAM responsibilities

McCain Foods is an equal opportunity employer. We see value in ensuring we have a diverse, antiracist, inclusive, merit-based, and equitable workplace. As a global family-owned company we are proud to reflect the diverse communities around the world in which we live and work. We recognize that diversity drives our creativity, resilience, and success and makes our business stronger.
McCain is an accessible employer. If you require an accommodation throughout the recruitment process (including alternate formats of materials or accessible meeting rooms), please let us know and we will work with you to meet your needs.
Your privacy is important to us. By submitting personal data or information to us, you agree this will be handled in accordance with the Global Employee Privacy Policy
Job Family: Information Technology
Division: Global Technology
Department: Identity and Access Management
Location(s): IN - India : Haryana : Gurgaon
Company: McCain Foods(India) P Ltd