Sr Analyst SAP Governance (GRC)

We are seeking a highly skilled Sr. SAP Governance Analyst. This person will play a critical role in ensuring SAP compliance with regulatory requirements (e.g., SOX), company policies, and industry best practices. This position is responsible for supporting the development of SAP standards and operating procedures, designing, executing, and enforcing SAP IT internal controls (e.g., user access reviews, change reviews), training stakeholders on SAP compliance requirements, developing SAP governance strategies, managing risks, and improving operational efficiencies.
The ideal candidate will be proactive, hands-on, and results oriented.

MAJOR RESPONSIBILITIES
• Develop and implement SAP policies, procedures, and guidelines, review exception requests, and oversee enforcement.
• Design and govern role-based access control strategies for SAP systems; provide clear guidance for the SAP Security team. Define and propose data protection and privacy protocols such as encryption and masking.
• Develop and maintain SAP internal controls environment documentation (e.g., process flows, narratives, control matrices, segregation of duties rulesets, role security matrices, etc.).
• Monitor compliance to the end-to-end SAP user access lifecycle, including role assignment, segregation of duties conflict management, approvals, periodic access reviews, and deprovisioning as well as the elevated access management process. Propose process improvements and security enhancements. Execute controls.
• Design, implement, and monitor SAP system adherence to software development lifecycle, job monitoring, and other applicable SAP controls. Ensure secure system parameters are defined and configured.
• Assist with the development of corrective action plans to address SAP internal control deficiencies and the timely remediation of the deficiencies.
• Define and enforce SAP role design and maintenance, including role and authorization object creation, revision, testing, and disablement.
• Respond to SAP Security-related incidents.
• Maintain segregation of duties ruleset in accordance with business process requirements and enforce rules that prevent conflicts of interest.
• Mature the overall SAP controls environment; drive towards automation and continuous monitoring practices.
• Prepare for and facilitate internal and external audits, gathering and providing required documentation and evidence of compliance.
• Provide training and guidance regarding SAP policies, control procedures, and tools to control owners, role owners/access approvers, and system end users.
• Collaborate with cross-functional teams to develop, implement, and remediate SAP processes and controls. Develop and manage relationships with IT and cross-functional stakeholders. Work with cross-functional teams and SAP architects to embed security into all SAP projects.
• Track and manage key performance indicators; generate dashboards and reports needed to effectively communicate SAP security risks, segregation of duties conflicts, and other compliance metrics.
• Take ownership of projects, ensuring their successful planning, budgeting, execution, and completion.
MINIMUM JOB REQUIREMENTS

Education
• Bachelor's degree in Computer Science, Information Technology, Information Security, Engineering, Accounting, or related field, or equivalent work experience.
Certification / Licensure


Work Experience:
• Total 5 + Years and 3+ or more years of experience in Internal Controls, SAP Security, SAP Administration, IT Internal Audit, and/or Information Security
• Must have experience working in a large and complex SAP environment
• Must have experience with Sarbanes-Oxley compliance
Knowledge / Skills / Abilities

• Familiarity with using modern GRC or other workflow tools to effectively manage SAP controls execution
• In-depth understanding of IT internal controls (i.e., Change Management, Access, IT Operations, segregation of duties rulesets, SDLC)
• Experience developing and maintaining internal controls documentation (e.g., risk control matrices, narratives, process flows, etc.)
• Strong written and verbal skills, including a demonstrated ability to translate complex or technical information into concepts that are easily understood
• Strong analytical, problem solving, and critical thinking skills, including the ability to anticipate issues and to design appropriate solutions
• Excellent teamwork skills
• Detail and deadline oriented, with the ability to manage multiple tasks and priorities simultaneously with limited supervision
• Proficient with Microsoft Office Suite (Word, Excel, PowerPoint, SharePoint, Visio)

Click here to learn more about a career in IT at Medline!

Our benefit package includes health insurance, life and disability, 401(k) contributions, paid time off, etc., for employees working 30 or more hours per week on average. For a more comprehensive list of our benefits please click here. For roles where employees work less than 30 hours per week, benefits include 401(k) contributions as well as access to the Employee Assistance Program, Employee Resource Groups and the Employee Service Corp.

We’re dedicated to creating a Medline where everyone feels they belong and can grow their career. We strive to do this by seeking diversity in all forms, acting inclusively, and ensuring that people have tools and resources to perform at their best. Explore our Belonging page here.

Medline Industries, LP is an equal opportunity employer. Medline evaluates qualified individuals without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, age, disability, neurodivergence, protected veteran status, marital or family status, caregiver responsibilities, genetic information, or any other characteristic protected by applicable federal, state, or local laws.