senior it security analyst

Qiddiya Investment Company

<div><p>Qiddiya Investment Company is in search of an experienced <b>Senior Specialist - IT Security Design</b> to join our forward-thinking team. This position is integral to creating and maintaining robust security architectures that protect our information assets and support our dynamic operations. As a Senior Specialist in IT Security Design, you will focus on designing security frameworks, integrating security solutions, and ensuring that security best practices are embedded in all technological initiatives.</p><p>
In this role, you will collaborate closely with cross-functional teams to assess security needs and develop comprehensive designs that align with organizational goals, regulatory requirements, and industry standards.</p>
Key Responsibilities<ul><li>Architect technical solutions to facilitate security initiatives, detect, evaluate, and track security vulnerabilities, create, and implement regulations, standards, frameworks, and procedures to reduce and prevent risks to the computing system.</li><li>Support procurement and vendor relations and ensure that requests for proposals/requests for proposals are prepared in accordance with established procedures.</li><li>Enhances security team accomplishments and competencies by planning the delivery of solutions and answering technical questions.</li><li>Plans, researches, and designs security architecture for IT systems.</li><li>Develops installation requirements for LANs, WANs, VPNs, firewalls, routers, and related network devices.</li><li>Determines security protocols by evaluating business strategies and requirements.</li><li>Responds to, and investigates, security incidents and provides thorough post-event analyses.</li><li>Develops project timelines for ongoing system upgrades.</li><li>Reviews system security measures and implements necessary enhancements.</li><li>Conducts regular tests and monitoring of network security.</li><li>Verifies security systems by developing and implementing test scripts.</li></ul><b><br>
Requirements</b><br>
<ul><li><ul><li>Bachelor's Degree in Information Systems, Computer Science, Security, or related field.</li><li>3+ years of experience configuring, maintaining, and troubleshooting Firewalls, Mail and Web Gateways, etc.</li><li>CompTIA Cybersecurity Analyst (CySA+), or equivalent certifications.</li></ul></li></ul><br>
<b>
Benefits</b><p><br>
Comprehensive benefits package</p></div>

Senior Specialist - IT Security Design

Florida State Board of Administration

<div><div><div><h2 class="jobSectionHeader"><b>Responsibilities</b></h2>
<div>
<div><div><p>The Senior IT Audit Analyst is primarily responsible for performing information technology (IT), information security (IS), operational assurance, and advisory engagements, including the assessment of risks and internal controls, development of engagement objectives and programs, drafting formal reports, and presenting results to the Audit Committee. This position requires effective communication both verbally and in writing to obtain and document reliable and relevant evidence for the engagements. The Senior IT Audit Analyst reports to the IT Audit Manager. <b>This role is located in Tallahassee, FL and requires on-site, in-office work.</b><br>
<br>
<b>75% - Leads Assurance and Advisory Projects, Follow-up Audits, and Special Projects, according to the comprehensive internal audit plan, or as assigned</b></p><ul><li>
Conducts engagements in accordance with The Global Internal Audit Standards issued by the Institute of Internal Auditors, Inc. (IIA) and other IT and IS standards<br>
 o Defines appropriate engagement scope based on an assessment of inherent and residual risks of business unit core activities, and adequacy and effectiveness of internal controls<br>
 o Develops engagement programs to ensure that the engagement objectives are achieved<br>
 o Conducts interviews with client and obtains reliable and relevant evidence/documentation<br>
 o Drafts flowchart and conducts walkthrough, and completes Internal Controls &amp; Risk Assessment to update engagement scope, and prepares test plan<br>
 o Determines where data analytics may be used on projects</li><li>
Conducts fieldwork<br>
 o Performs tests of controls, substantive testing and/or research depending on the type of project<br>
 o Interprets and evaluates internal controls, policies and procedures<br>
 o Participates and/or conducts IT general control reviews, application reviews, and security reviews<br>
 o Ensures that procedures and findings are documented with sufficient detail in working papers and use of data analytics<br>
 o Communicates effectively with the client in writing and verbally during the project<br>
 o Escalates any issues relating to the project or with meeting deadlines to the manager in a timely manner<br>
 o Ensures all review notes are addressed in a thorough and timely manner and reviews other Analysts work when needed<br>
 o Prepares reports that document methodology and results, and present clear and concise conclusions and recommendations to improve SBA operations<br>
 o Coordinates and oversees engagement activities performed by the external auditors by monitoring timeliness, and the receipt of agreed deliverables<br>
 o Demonstrates and reinforces fundamental value of quality, service, respect, integrity, and dependability in interaction with coworkers, supervisors, client; in personal contributions to work assignments and projects; and when representing SBA</li></ul><p><b><br>
10% - Assists with Annual Risk Assessment</b></p><ul><li>
Participates in the annual risk assessment and in the development of a risk-based annual audit plan and conducts information technology risk assessments in accordance with the National Institute of Standards and Technology (NIST) <i>Guide for Conducting Information Security Risk Assessments</i></li></ul><p><b><br>
05% - Assists with the coordination of Quarterly Audit Committee Meetings</b></p><ul><li>
Coordinates logistics</li><li>
Assists with the preparation of meeting materials, including quarterly report to the Audit Committee</li><li>
Attends meeting and takes notes for the minutes of the meeting</li></ul><p><b><br>
10% - Performs other duties as assigned</b></p><ul><li>
To include but not limited to: recording time on at least a weekly basis; attending SBA and The Office of Internal Audit &amp; Inspector General (OIA&amp;IG) meetings; conducting research over areas that are impactful to the SBA or to the audit profession and sharing knowledge with the Department; updating OIA&amp;IG guiding documents; and completing mandatory training and other trainings as deemed necessary by OIA&amp;IG management</li></ul></div>
</div></div></div></div><div><div><h2 class="jobSectionHeader"><b>Qualifications</b></h2>
<div>
<div><div><p>Three years of related experience. A postsecondary degree may be used as an alternative for years of direct experience.<br>
<br>
<b>Preferences:</b></p><ul><li>
A bachelor's degree from an accredited college or university in computer science, management information systems, finance, accounting, statistics, business or a related field</li><li>
Master of Business Administration or master&rsquo;s degree from an accredited college or university in computer science, management information systems, finance, accounting, statistics, or a related field</li><li>
Possession of a Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), Certified Investments and Derivatives Auditor (CIDA), Certified Public Accountant (CPA), or Certified Fraud Examiner (CFE) credential</li><li>
Experience in public accounting or auditing, and the financial services industry</li></ul><p><b><br>
Knowledge, Skills, and Abilities:</b></p><ul><li>
Knowledge of relevant industry standards, including the IIA Standards, NIST security Standards, the Center for Internet Security&rsquo;s Critical Security Controls (CIS CSC framework), and Committee of Sponsoring Organizations (COSO) framework, IT Security and Compliance standards, and related principles</li><li>
Thorough knowledge of governance, risk and control appropriate to the organization</li><li>
Strong data analytics skills</li><li>
Proficient in preparing visual analytics, dashboard using Tableau and/or other software</li><li>
Extensive Microsoft Office skills (Excel, Word, Visio, Access and Project)</li><li>
Excellent written and verbal communication and presentation skills</li><li>
Solid organizational and leadership skills</li><li>
Ability to perform at a high level in a team environment</li><li>
Ability to work independently, exercise independent judgment, and prioritize work assignments to meet deadlines</li><li>
Ability to research and summarize key points effectively</li><li>
Advanced knowledge and experience of industry related IT infrastructure, solutions, and platforms for defending against the threat landscape, including firewalls, security incident and event monitoring, vulnerability and penetration management</li></ul><p></p><p><b><br>
Hiring Range: $74,445 - $93,450</b></p><p><b>
The State Board of Administration is an Equal Opportunity Employer</b></p><p><b>
Successful completion of a pre-employment background check is a condition of employment with the State Board of Administration</b></p></div></div></div></div></div></div>

Senior IT Audit Analyst

Berkshire Hathaway Specialty Insurance

<div><div><b>Who are we?</b></div><div></div><div><br>
A strategic and trusted insurance partner, Berkshire Hathaway Specialty Insurance (BHSI), provides a broad range of commercial property, casualty and specialty insurance coverages and outstanding service to customers and brokers around the world. Part of Berkshire Hathaway&rsquo;s insurance operations, we bring our solutions to market with our stellar brand name, top-rated balance sheet, and the expertise of our global team of professionals, who exude excellent capabilities and strong character.</div><div></div><div><br>
We are a values-based organization where respect, integrity, excellence, collaboration, and passion define who we are and how we do business. We value diversity of backgrounds, experience, and perspectives and strive to foster an inclusive environment that enables all our team members to bring their best selves to work. We are one team committed to building a culture where every teammate has the opportunity to contribute and be recognized. Want to be part of the team building the finest property, casualty and specialty lines insurance company in the world?</div><div></div><div><br>
Learn more about our unique culture and history.</div><div></div><div><b><br>
Job Opportunity:</b></div><div></div><div><br>
Berkshire Hathaway Specialty Insurance (BHSI) has an exciting opportunity for a new team member to join our Boston-based IT Governance Risk Audit and Compliance (GRAC) team as a Senior IT Compliance Analyst. In this role, the IT Senior Compliance Analyst will take an active role in the execution of our IT audit and compliance framework, while collaborating closely with both internal and external partners. This position offers the chance to make a significant impact, working with external global regulators and collaborating with internal regional legal and compliance leaders across regions from an enterprise-wide vantage point. If you're passionate about driving meaningful change, growing your career, and helping lead an evolving global IT audit and compliance program, we&rsquo;re interested in speaking with you.</div><div></div><div><b><br>
Duties &amp; Responsibilities:</b></div><div></div><div><br>
<ul><li>
Lead in executing IT audit/compliance activities, and follow up with responsible parties regarding outstanding requests, and/or questions.</li><li>
Maintain, organize, and store audit evidence in preparation for upcoming scheduled audits.</li><li>
Conduct audit readiness assessments (i.e., health checks) and assess the effectiveness of current controls and processes in place.</li><li>
Lead in developing, implementing, and executing additional internal IT audit/compliance activities.</li><li>
Coordinate with team members regarding the remediation status of closing out identified audit gaps and ensuring compensating controls are implemented.</li><li>
Review third-party service providers/vendors as part of IT due diligence, including assessing vendor control environment, reviewing SOC reports (i.e., SOC 2 type 2 reports), validating security certifications, identifying control gaps, and ensuring required remediation or compensating controls.</li><li>
Analyze and support compliance with global IT regulatory authorities (i.e., GDPR, CBI, DORA, MAS, APRA, BAFIN, etc.) and coordinate with individuals to ensure controls are in place to meet requirements.</li><li>
Provide support to our offices from both a U.S. and global perspective (i.e., Asia, Middle East, UK, Europe, Australasia, etc.) regarding the fulfillment of external audit requests and obligations.</li><li>
Attend/participate in e-learning training sessions to increase background knowledge of the ever-evolving IT regulatory landscape.</li><li>
Support in AI risk and governance oversight to ensure responsible and compliant use of AI technologies.</li></ul></div><div></div><div><b><br>
Qualifications, Skills and Experience:</b></div><div></div><div><br>
<ul><li>
6+ years of experience working in an IT audit/compliance function with a general understanding (at minimum) in several of the IT audit/compliance topics listed below:</li><li>
Active Directory, password standards, user access provisioning/deprovisioning, user access reviews, change management, batch jobs/backups, disaster recovery, service accounts, patch management, risk assessment.</li><li>
Software development and IT operations knowledge to assess the planning and ongoing maintenance of DevSecOps practices and Application security.</li><li>
Knowledge of cloud governance, cloud technology and cloud security is a plus.</li></ul></div><div><ul><li>
Solid background knowledge of US domestic IT regulations (i.e., SOX, CCPA, PCI, NY-DFS etc.) is recommended.</li><li>
Familiarity with global regulatory frameworks (e.g., GDPR, CBI, DORA, MAS, APRA, BaFin) is preferred but not required.</li><li>
Ability to work in a team-based environment and communicate effectively and efficiently with others domestically and globally.</li><li>
Experience with GRC tools such as Workiva, AuditBoard, ServiceNow, Drata, Vanta, or similar platforms is a plus.</li><li>
AI experience is a plus, including an understanding of AI risks, responsible AI concepts, or emerging AI regulatory requirements.</li><li>
Professional certifications such as CRISC, CISA, CISM, CISSP, or ISO/IEC 27001 Lead Implementer/Lead Auditor (or equivalent) are a plus.</li></ul></div><div></div><div><b><br>
BHSI Offers:</b></div><br>
<div></div><ul><li>
A competitive package and exciting growth opportunities for career-oriented teammates.</li><li>
A dynamic, action oriented, and thoughtful environment centered on always doing the right thing for our customers, teammates and our other stakeholders.</li><li>
A purposely non-bureaucratic organization that embraces simplicity over complexity and emphasizes individual excellence in a team framework.</li><li>
Benefits that support your life and well-being, which include:<ul><li>
Comprehensive Health, Dental and Vision benefits.</li><li>
Disability Insurance (both short-term and long-term).</li><li>
Life Insurance (for you and your family).</li><li>
Accidental Death &amp; Dismemberment Insurance (for you and your family).</li><li>
Flexible Spending Accounts.</li><li>
Health Reimbursement Account.</li><li>
Employee Assistance Program.</li><li>
Retirement Savings 401(k) Plan with Company Match.</li><li>
Generous holiday and Paid Time Off.</li><li>
Tuition Reimbursement.</li><li>
Paid Parental Leave.</li></ul></li></ul><div></div><div><i><br>
The base salary range for this position in Boston is $95,000.00 to $125,000.00, along with annual bonus eligibility. Total compensation for a candidate is determined by their relevant skills, location, and experience. We value our teammates &ndash; both their capabilities and character &ndash; as demonstrated by our amazing culture.</i></div><div></div><div><br>
NOTE: Compensation will be commensurate with experience. This job description is not intended to be all-inclusive. Team Member may perform other related duties as negotiated to meet the ongoing needs of the organization.</div></div>

Senior IT Compliance Analyst

Madre Integrated Engineering

<div>
 <p>
  We are seeking a highly experienced IT professional to lead and manage IT projects while ensuring strong cybersecurity governance and secure system implementation. The role combines project management expertise with technical oversight and security compliance responsibilities.
  <br/>
 </p>
 <p>
  The successful candidate will oversee end-to-end IT initiatives, manage stakeholders, ensure timely delivery, and maintain high security and risk management standards across enterprise systems.
  <br/>
 </p>
 <p>
  <strong>
   Key Responsibilities
   <br/>
  </strong>
 </p>
 <p>
  <strong>
   Project Management &amp; Delivery
   <br/>
  </strong>
 </p>
 <ul>
  <li>
   Lead end-to-end IT projects from initiation to closure.
   <br/>
  </li>
  <li>
   Define project scope, objectives, timelines, and resource allocation.
   <br/>
  </li>
  <li>
   Develop project plans, budgets, risk registers, and status reports.
   <br/>
  </li>
  <li>
   Ensure projects are delivered on time, within scope, and within budget.
   <br/>
  </li>
  <li>
   Coordinate with internal teams, vendors, and external stakeholders.
   <br/>
  </li>
  <li>
   Manage change requests and ensure proper governance procedures.
   <br/>
  </li>
  <li>
   Provide regular updates to senior management and executive leadership.
   <br/>
  </li>
 </ul>
 <p>
  <strong>
   IT Governance &amp; Strategy
   <br/>
  </strong>
 </p>
 <ul>
  <li>
   Align IT initiatives with business strategy and digital transformation goals.
   <br/>
  </li>
  <li>
   Implement project management best practices (Agile/Waterfall/Hybrid).
   <br/>
  </li>
  <li>
   Ensure compliance with corporate IT policies and regulatory requirements.
   <br/>
  </li>
  <li>
   Drive process improvement and operational efficiency initiatives.
   <br/>
  </li>
 </ul>
 <p>
  <strong>
   IT Security &amp; Risk Management
   <br/>
  </strong>
 </p>
 <ul>
  <li>
   Oversee implementation of IT security controls and policies.
   <br/>
  </li>
  <li>
   Conduct risk assessments and vulnerability analysis.
   <br/>
  </li>
  <li>
   Ensure compliance with cybersecurity frameworks and standards.
   <br/>
  </li>
  <li>
   Monitor security incidents and coordinate remediation actions.
   <br/>
  </li>
  <li>
   Work closely with infrastructure and application teams to secure systems.
   <br/>
  </li>
  <li>
   Ensure data protection, access control, and network security compliance.
   <br/>
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 Requirements
 <br/>
 <br/>
 <br/>
 <ul>
  <li>
   Bachelor&rsquo;s Degree in Computer Science, Information Technology, Engineering, or related field.
   <br/>
  </li>
  <li>
   8&ndash;15+ years of experience in IT project management and/or IT security roles.
   <br/>
  </li>
  <li>
   Strong experience managing enterprise-level IT projects.
   <br/>
  </li>
  <li>
   Solid understanding of cybersecurity principles, risk management, and compliance standards.
   <br/>
  </li>
  <li>
   Experience with infrastructure, applications, cloud platforms, and system integrations.
   <br/>
  </li>
  <li>
   Familiarity with IT governance frameworks and best practices.
   <br/>
  </li>
  <li>
   Strong stakeholder management and leadership skills.
   <br/>
  </li>
  <li>
   Excellent analytical, organizational, and problem-solving abilities.
   <br/>
  </li>
 </ul>
 <p>
  <strong>
   Preferred Certifications
   <br/>
  </strong>
 </p>
 <ul>
  <li>
   PMP / PRINCE2 (Project Management)
   <br/>
  </li>
  <li>
   ITIL Certification
   <br/>
  </li>
  <li>
   CISSP, CISM, CEH, or other relevant security certifications
   <br/>
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
</div>


Senior IT Project & Security Specialist

ibex

<div>
 To protect IBEX infrastructure from emerging threats and help organization in achieving business objectives. This position acts as senior level IS resource having strong background of Network and Cyber Security functions. This position will coordinate &amp; will help implementing IT Security Roadmap and security processes for the protection of IBEX Global assets.
 <br/>
 <br/>
 <strong>
  Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Information Security Risk Management &amp; Assessments (Hands-On)
  </li>
  <li>
   Lead and perform end-to-end IT Risk Assessments, including inherent risk identification, control design and evaluation of operating effectivness, residual risk rating and risk treament recommendations.
  </li>
  <li>
   Assess risks across Infrastructure (on-prem, cloud, hybrid), Applications and Systems, data security and privacy, identity and access management, change and configuration management etc.
  </li>
  <li>
   Develop and maintain risk registers, risk heatmaps, and executive-level risk reporting.
  </li>
  <li>
   Support internal and external audits by providing risk documentation and remediation evidence.
  </li>
  <li>
   Supply Chain &amp; Third-Party Risk Management
  </li>
  <li>
   Conduct Supply Chain / Third-Party IT Risk Assessments for vendors, partners, and service providers.
  </li>
  <li>
   Evaluate vendor risks related to Information Security, Data Protection &amp; Privacy, Business Continuity and resilience, sub-contractor and fourth party risks.
  </li>
  <li>
   Review and assess Vendor security questionnaires, independent audit reports such as SOC2, ISO 27001, PCI DSS, Penetration Test Summaries, ISO 42001 for AI Service Providers etc.
  </li>
  <li>
   Collaborate with Procurement, Legal, and Compliance teams to define risk-based onboarding criteria, support contract security clauses, track vendor risk remediation activities etc.
  </li>
  <li>
   AI Risk Assessments &amp; AI System Impact Assessments
  </li>
  <li>
   Lead and perform AI Risk Assessments across AI/ML systems, including but not limited to model risks, data quality and bias risks, secuirty and adversarial risks, privacy and data protection risks, ethical and responsible AI risks etc.
  </li>
  <li>
   Conduct AI System Impact Assessments (AISIAs) to evaluate impact on individuals and customers, regulatory and compliance implications, business and reputational risks etc.
  </li>
  <li>
   Align AI risk activities with relevant frameworks and regulations, such as ISO/IEC 42001 (AI Management Systems), NIST AI Risk Management Framework, Applicable data protection and AI regulations etc.
  </li>
  <li>
   Partner with AI, Data Science, Legal, and Product teams to embed risk controls into AI system lifecycles.
  </li>
  <li>
   Team Leadership &amp; Management
  </li>
  <li>
   Manage, coach, and mentor team members.
  </li>
  <li>
   Review and approve risk assessment deliverables to ensure quality and consistency.
  </li>
  <li>
   Allocate work, set priorities, and track progress against agreed timelines.
  </li>
  <li>
   Provide performance feedback, skill development guidance, and technical direction.
  </li>
  <li>
   Promote standardization of risk assessment methodologies, templates, and reporting.
  </li>
  <li>
   Stakeholder Engagement &amp; Reporting
  </li>
  <li>
   Act as a trusted risk advisor to technology, business, and senior leadership stakeholders.
  </li>
  <li>
   Present risk findings and recommendations to IT leadership, Risk committee, Senior management etc.
  </li>
  <li>
   Support the development of risk policies, standards, and procedures.
  </li>
  <li>
   Drive a culture of risk awareness and accountability across the organization.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Qualifications
  <br/>
  <br/>
 </strong>
 EducationBachelors/Masters Degree in IT/CS/Software Eng./TelecomExperience8 - 12 yearsSkills and Abilities5+ years of hands on experience in IT/Information Security Risk Management
 <br/>
 <br/>
 Strong understanding of ITRM concepts, methodologies, controls and architectures. Cloud.
 <br/>
 <br/>
 Hands-on experience with Third-Party/Supply Chain Risk Assessments
 <br/>
 <br/>
 Knowledge of risk frameworks such as ISO 27005, NIST CSF etc.
 <br/>
 <br/>
 Strong presentation and communication skillsReporting Time5pm to 2am (PKST)
</div>


Principal, IT Security & Compliance, IT

Mars

<div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><p><b>Job Description:</b></p></div></div></div></div></div></div></div></div></div></div></div></div></div></div><p><b>
What are we looking for?</b></p><ul><li><p>
8+ years of SAP security project experience, preferably on large-scale S/4HANA transformation programs</p></li><li><p>
Technical experience in the areas of SAP application security, IT controls, role-based access control (RBAC) strategies, segregation of duties, and SAP user access management processes (user provisioning, user access reviews, user terminations, single sign-on),</p></li><li><p>
Hands-on experience working with security in SAP cloud solutions is desired, particularly SAP BTP and BTP applications (Datasphere, Integration Suite, Cloud ALM), SAP Cloud Identity Services (CIS), and SAP Cloud Identity and Access Governance (IAG)</p></li><li><p>
Experience integrating SAP IAS with corporate identity tools such as Active Directory and Okta</p></li><li><p>
Ability to learn new technologies and apply RBAC concepts into the design, build, and deployment of these solutions to achieve efficiency and compliance</p></li><li><p>
Strong written and verbal communication skills; must be able to discuss and present security topics tailored to technical and business users</p></li></ul><p></p><p><b>
What will the role&rsquo;s key responsibilities be?</b></p><ul><li><p>
Execute the design and implementation of security roles and processes in the SAP cloud systems</p></li><li><p>
Create test plans, set up testing environments, and ensure that cloud security roles are tested by the project technical, enabling, and business process teams</p></li><li><p>
Assist the SAP Security Senior Leads and Senior Manager with planning and incorporating security tasks for cloud systems into the S4 implementation timelines, plans, and program status reports</p></li><li><p>
Document cloud security design, configuration, and access procedures</p></li><li><p>
Facilitate knowledge transfer sessions of cloud security concepts and procedures to the Mars SAP Security AMS support team</p></li><li><p>
Ensure security solutions are implemented consistently and aligned with centrally defined standards and requirements for the new S/4HANA model.</p></li><li><p>
Collaborate with SAP and external consulting partners; oversee contractors and review project deliverables to ensure project objectives are met</p></li></ul></div><p></p>

SAP Cloud Security Senior Lead

Performance Food Group

<div><p><b>Job Description:</b></p><b>
We Deliver the Goods:</b><ul><li>
Competitive pay and benefits, including Day 1 Health &amp; Wellness Benefits, Employee Stock Purchase Plan, 401K Employer Matching, Education Assistance, Paid Time Off, and much more</li><li>
Growth opportunities performing essential work to support America&rsquo;s food distribution system</li><li>
Safe and inclusive working environment, including culture of rewards, recognition, and respect</li></ul><b>
Position Summary</b><br>
The SAP Security Analyst is responsible for managing and maintaining the security architecture, role design and maintenance of SAP and associated systems. This role ensures that access to SAP systems is properly controlled, monitored, and aligned with organizational policies and SOX compliance requirements. This role will serve as a subject matter expert in SAP security and GRC, driving strategic initiatives to ensure compliance, mitigate risk, and support business transformation across all SAP technologies and systems. This also includes S/4 HANA, ECC, Fiori and cloud systems. In depth knowledge and solid experience of SAP authorization concepts and Fiori maintenance and provisioning, in a production landscape, is a requirement.<br>
<br>
<b>Position Responsibilities:</b><ul><li>
Lead the design and maintenance of SAP user roles, authorizations, Fiori design and security architecture across S4 Development, QA, Production environments and cloud systems, such as BTP.</li><li>
Maintain Fiori catalogs, spaces and pages by adding, changing, and removing objects as needed.</li><li>
Manage and optimize GRC Access Control components, including rule sets, risk analysis, EAM workflows, and mitigation strategies.</li><li>
Define and enforce Segregation of Duties (SoD) policies in collaboration with business and IT stakeholders.</li><li>
Provide strategic guidance on security best practices, risk mitigation, and compliance with SOX and audit requirements.</li><li>
Monitor and oversee security testing, user provisioning, and access reviews during system implementations, upgrades, and patching.</li><li>
Partner with solution architects, development teams and user communities to design secure custom solutions and ensure alignment with business needs.</li><li>
Mentor team members and the user community and contribute to the development of security standards, documentation, and training materials.</li><li>
Conduct periodic audits and compliance checks (e.g., SOX, GDPR).</li><li>
Provide training and support to end users and internal teams on SAP security best practices.</li><li>
Monitor and enforce the standard process such as provisioning, deprovisioning, role and/or job function changes.</li><li>
Monitor and enforce license usage in relation to entitlements.</li><li>
Document security policies, procedures, and role designs.</li><li>
Perform other duties as assigned.</li></ul><b>
This is a full-time position, and applicants must be located nearby to a PFG facility. Richmond, VA applicants are preferred.</b><p><b>
Qualifications:</b></p><ul><li>Required Education: Bachelors - Information Technology, Computer Science, or a related field.</li></ul><br>
<ul><li>Required Experience: 5 - 7 Years</li></ul><br>
<ul><li>SAP Security, with a focus on S/4HANA</li></ul><br>
<ul><li>Experience with SAP GRC Access Control, EAM, role design, and FIORI security.</li></ul><br>
<ul><li>Responsibility for SAP and SOX user audits and remediation.
</li></ul><br>
<ul><li>Confidence in troubleshooting skills.</li></ul><br>
<ul><li>Soft skills in working and collaborating with users, internal/external auditors and members of other teams.
</li></ul><br>
<ul><li>Clear and concise verbal and written communications skills.</li></ul><br>
<ul><li>Must live in Richmond, VA or near a PFG facility.</li></ul><p><b>
Company description</b></p><b><br>
Performance Food Group is a customer-centric foodservice distribution leader headquartered in Richmond, Va. Grounded by roots that date back to a grocery peddler in 1885, PFG has a nationwide network of approximately 150 distribution centers, 35,000-plus talented associates, and thousands of valued suppliers across the country. With the goal of helping customers thrive, PFG markets and delivers quality food and related products to independent and chain restaurants, schools, business and industry locations, convenience operations, healthcare facilities, vending distributors, office coffee service distributors, big box retailers, and theaters across the U.S.</b><p><b>
Awards and Accolades</b></p>
Performance Food Group and/or its subsidiaries (individually or collectively, the &quot;Company&quot;) provides equal employment opportunity (EEO) to all applicants and employees, regardless of race, color, national origin, sex, marital status, pregnancy, sexual orientation, gender identity, religion, age, disability, genetic information, veteran status, and any other characteristic protected by applicable local, state and federal laws and regulations. Please click on the following links to review: (1) our EEO Policy; (2) the &quot;EEO is the Law&quot; poster and supplement; and (3) the Pay Transparency Policy Statement.</div>

Senior SAP Security Analyst

Search 10000+ Senior it security analyst jobs near you this March. New roles added regularly across leading industries. Apply today.