Senior Information Security Analyst
Apply on
Title- Sr Information Security Analyst
Location- Irving, TX
This position is for a Senior Information Security Analyst supporting JD Edwards and SAP Security & Compliance. Primary responsibility is to provide security administration, security design, and security improvement initiatives.
This individual is responsible for the security design supporting Client business processes, and organizational structure in the most effective and efficient manner while ensuring compliance with all security and architectural mandates. This individual will work very closely with other teams including those within Client Shared Services, Cybersecurity, and the compliance and audit teams. Leadership and technical competence are a must.
Areas of Responsibilities include:
- Act as a subject matter expert for security and compliance on JD Edwards E1 and SAP systems (ECC, S4, GRC, Access Control, Process Control, ETD and others)
- Identifying gaps and improvements in the current security implementation
- Expansion of security capabilities to take full advantage of the JDE and SAP security tools available
- Updates and implementation of Master Data such as Roles/Entitlements, Role Owners, SOD rules changes, Security Configuration, threat patterns etc.
- Provide subject matter expertise and oversight as needed for projects requiring security access and compliance support
- Provide training to other security team members on security services activities and domain knowledge, so that service delivery and support can be shared
Support the ongoing security service for JDE and SAP and JDE Security
Minimum Requirements
7+ years relevant security administration experience
Critical Skills
- At least 2 full implementations of security on SAP and JD Edwards systems
- Experience with different scripting / programming languages to expand automation and capabilities
- Expertise in:
- OWM security and menu
- JDE E1 security design and user maintenance
- At least 3 years experience in SAP GRC Access Control & Process Control
- At least 3 years experience with SAP ETD administration and maintenance; implementation of Threat Patterns including design, alerts, fraud detection and user Behavioral analysis, and response planning
- Cloud applications and Bus. Objects
- Emergency Access and Firefighter management
- SOD Risk Management & Configuration
- Proficient in IT general controls, SOC and SOX requirements as they relate to security administration
- Proficient in ERP security principles, technologies and solutions, delivering functionality and
services on time, on budget and to meet business needs - Audit testing & evidence collection
- HANA DB Security
- SAP NextGen S4 Hana
- Progressively responsible experience in designing, implementing, and maintaining application Security
- Deep knowledge of application security, capabilities, and limitations
- Proficient in reducing the attack surface and hardening ERP system security
- Proficient in ERP security principles, technologies, and solutions, delivering functionality or services on time, on budget and to meet business needs
- Technical knowledge of security architecture and role-based authorization models
- Proven success on multiple, enterprise-scale implementation projects or services