Senior SAP Security Manager at Graphic Packaging International, Inc

Senior SAP Security Manager job at Graphic Packaging International, Inc.. Atlanta, GA.

Working under the direction of the Director, IT Risk Management and Application Security, this position is responsible for the overall security and controls within the global SAP landscape and keeping it aligned with GPI’s security and SOX compliance policies. The Senior SAP Security Manager will partner with the Business Teams to meet business needs while providing a secure and auditable SAP environment.

The senior manager will work to achieve audit compliance and will provide input to all SAP Security related policies, procedures, control sets, and best practices. The senior manager will also be responsible for coordinating the delivery of security work tasks on ongoing projects and implementations and ensure adherence to security methodology and design requirements. The senior manager will supervise the overall quality and timeliness of deliverables by the global security team comprising of GPI employees and/or contractors.

Principal Duties and Responsibilities:

five to eight key responsibilities/activities for which the position is accountable.

• Guide and advise on global SAP security and compliance matters during and after M&As.
• Own the global SAP security design template and ensure adherence to the same.
• Establish controls and ensure that they are implemented and followed.
• Be the point of contact with the Compliance and Audit teams.
• Responsible for ensuring that SAP Security and GRC processes comply with security methodology and design requirements.
• Control owner for SAP security related ITGC items such as emergency access, user provisioning, etc.
• Primary point of contact for defining the SAP security design and approach for new interfaces, applications, projects and other initiatives.
• Works closely with functional, business and audit teams to gather security requirements, design and implement security solutions, in compliance with Security, regulatory, organizational and SOX controls.
• Manage and resolve audit related inquiries and address remediation of any findings pertaining to SAP security.
• Global consultant on SAP Security and Compliance and GRC processes.
• Engage and work closely with IT and business stakeholders to provide guidance and strategy on SAP and Compliance related activities.
• Responsible for design, documentation, and enhancement of SAP Security administration, policies, processes, and procedures.
• Manage projects by working with business partners to gather security requirements to design and build appropriate role-based security for the SAP environment. Ability to manage multiple projects, lead teams, make design decisions using SAP Security best practices.
• Lead the Sarbanes-Oxley related remediation efforts in SAP.
• Technical Owner and Subject Matter Expert for SAP Security and trusted advisor for all SAP project initiatives on Segregation of Duties (SOD) and Sarbanes Oxley (SOX) best practices.
• Acts as an advisor to Finance Compliance department on SAP Security.
• Serves as an advisor to Compliance, Internal and External auditors in all aspects of SAP Security and Sarbanes-Oxley.
• Work with Business teams, Audit teams to conduct periodic SOX audit reviews and manage remediation effort.
• Coordinates with Cyber Security, Internal and External audit teams to ensure proper functionality, controls maintenance, and compliance of SAP environments.
• Monitors control design and operating effectiveness and assists management in developing remediation plans to address deficiencies.
• Responsible for User Licensing measurement and reporting.
• Ensure that proper change control around SAP security activities is followed.
• Define Risks, conduct risk analysis and monitor for continuous improvements and compliance.
• Support business, audit, and IT teams to define mitigation controls and support on-going maintenance.
• Manages communications with Corp IT and Business community during SAP security related changes.

• Excellent written and verbal communication skills
• Strong analytical skills
• Ability to handle highly confidential information in a strictly professional manner
• Ability to work well under pressure
• Ability to manage and lead a team of highly technical resources
• Proven ability to self-manage and work with minimal supervision
• Ability to introduce industry relevant best practices and act as trusted advisor regarding enterprise value improvement opportunities
• Ability to plan and…