About the role
Protective is seeking a dedicated SAP Role Administrator to take charge of security, governance, and user access management within our IT framework. This role involves overseeing the complete lifecycle of SAP roles and ensuring our systems comply with rigorous audit and compliance standards. The ideal candidate will possess the ability to manage technical security responsibilities while effectively coordinating with external vendor resources.
Key facts
Location: Birmingham, AL
Engagement: Full Time
Team: IT Operations Strategic Platform Administration
What you'll do
- Administer user access by provisioning, modifying, and removing access rights across all SAP environments to ensure proper security measures are in place.
- Design, test, implement, and decommission SAP roles while facilitating system upgrades and applying necessary patches.
- Manage SAP Governance, Risk, and Compliance (GRC) processes, which include conducting emergency access reviews, performing risk assessments, and maintaining workflows.
- Collaborate with internal audit and risk management teams to address audit findings and enhance access control measures.
- Supervise daily operations carried out by external vendors, ensuring that their work meets quality standards and complies with service level agreements.
- Diagnose and troubleshoot authorization errors, resolving access-related issues for business users effectively.
- Create and maintain documentation for governance standards, role administration processes, and training resources for team members.
- Engage in continuous improvement initiatives to streamline role administration processes and enhance overall security posture.
Requirements
- A Bachelor's degree in a technical discipline or equivalent relevant experience is required.
- At least 3 years of practical experience in SAP Security and Role Administration is essential.
- Demonstrated expertise with SAP GRC, Segregation of Duties (SoD) controls, and user provisioning processes.
- Experience in supporting audit, compliance, and access review functions is necessary.
- Proven ability to troubleshoot and resolve complex SAP authorization and security challenges.
- Familiarity with working in a production-level enterprise SAP environment is required.
- Note: General functional or end-user experience will not be considered sufficient for this role.
Nice to have
- Familiarity with SAP Financial modules such as FI and FSCD is advantageous.
- Skills in conducting User Access Reviews would be beneficial.
- Possession of SAP GRC certification or specialized training in SAP security is a plus.
- Experience with ServiceNow or similar request management systems would be helpful.
- A background in managing vendor resources is desirable.
- Knowledge of Single Sign-On (SSO), LDAP, Active Directory, and Azure Entra ID is a plus.
- Experience in industries that are heavily regulated or compliance-focused would be beneficial.
Skills & tools
- Proficient in SAP Security and Role Administration
- Knowledgeable in SAP GRC
- Understanding of Segregation of Duties (SoD) principles
- Expertise in Access Governance
- Competent in Vendor Management
- Experienced in Audit and Compliance Support
Practical notes
- Candidates must possess authorization to work in the United States without the need for current or future visa sponsorship.
- The benefits package includes health, dental, and vision insurance, mental health support, paid time off, parental leave, short-term disability, and a cultural observance day.
- Financial benefits encompass a pension plan, a 401(k) with company matching, and contributions to healthcare accounts.
- Employees have the opportunity to participate in ProHealth Rewards, which allows them to earn cash incentives for engaging in wellness activities.
- Applicants who require accommodations related to disabilities during the recruitment process are encouraged to reach out to eric.hess@protective.com.
Join Protective
Join Protective and contribute to our mission of providing exceptional service while ensuring the integrity and security of our SAP systems.
