Search Job Listings   Submit Resume   Job Details     Apply for This Position Click here to Apply for this position Job Ref # EBSY-1161035818 No. of Openings 1 Category SAP / Perm Job Title SAP Info Security Analyst II Location Houston, TX Status Full Time Description Overview: Assists in design, development, and implementation of enterprise security roles, controls, solutions, processes, and policies. Responsibilities: - Work with business process teams to gather system access and restriction requirements for SAP and non-SAP systems and applications in order to address job creation / change requirements - Prepare and conduct training sessions for internal team members, providing team members with the information required to perform support activities within assigned SAP applications - Singlehandedly troubleshoot and resolve security relevant issues for assigned systems and applications, ensuring compliance with policies, processes, and standards approved by management - Design and build SAP security roles for both interactive and non-interactive users across the enterprise based on complex business requirements, company policies and standards, and regulatory requirements - Work with business process teams to ensure that all new / modified security roles are effectively tested and validated as meeting necessary requirements prior to being made available for use within the production environment - Contribute to the definition and implementation of SAP and non-SAP secure configuration parameters, monitoring the system to ensure that the parameters - Contribute to the development and implementation of overall enterprise-wide security policies, processes, standards and guidelines - Maintain SAP GRC rule sets based on rules defined by the internal audit group - Utilize SAP GRC in order to effectively identify potential SOX segregation of duties issues with security roles, working with business process teams to effectively address roles as required to ensure compliance - Contribute to the design and implementation of effective system and application security controls to mitigate indentified risks, monitoring existing controls for effectiveness, and recommending changes in controls where required - Configure and utilize company licensed tools as well as widely available security tools in order to effectively identify SAP and non-SAP security vulnerabilities, associated risk levels, and recommend resolutions based on the findings and associated environment - Contribute to the execution and documentation of enterprise-wide risk assessments - Work with Legal, HR, and Treasury to identify the impact of new or modified regulations on the company's current environment, and recommend appropriate changes to ensure compliance - Support security monitoring activities through the execution and analysis of defined reports, and based on the results, following internal processes and work with appropriate teams to ensure that the appropriate actions are taken - Create and maintain SIEM (Security Information & Event Management) tool rules to ensure the appropriate notification of Security and support teams of security related incidents - Contribute to the development and maintenance of the enterprise-wide security awareness program - Coordinate and lead information gathering and issue resolution sessions with internal team members, as well as other IT and business teams - Contribute to the design, implementation and maintenance of an enterprise-wide information classification and protection program - Assist with the development and documentation of internal team processes - Evaluate and recommend software solutions that would be of value to the organization - Participate in a 24x7 support rotation - Perform other Information Security tasks as required and assigned Qualifications: Educational requirements: - High School Diploma required, Bachelors degree or greater preferred Special requirements: - 1+ years SAP Basis experience - 3+ years SAP Security experience - SSCP, Security+ or comparable certification - Subject matter expert in a broad range of security concepts - Wintel, AIX, and DB/2 experience - Knowledge of a broad range of security concepts - Broad IT knowledge and experience, including an understanding of network devices and their role in a secure environment - Able to work directly with team members and end-users in stressful situations - Ability to work in a dynamic environment - Ability to solve complex problems through research and technical detective work - Ability to learn new technologies and processes quickly - Ability to quickly adapt to changes in timelines and sequences - Ability to lead information gathering and issue resolution sessions, both internal to the team, and with other IT and business teams - Able to work off hours when required - Excellent communication and interpersonal skills - Collaboration skills Recruiter Robb Ebel Last Updated 12/15/2011