Specialist, SAP Security

20600 Emerald Parkway, Cleveland, Ohio 44135 United States of America

Why Oatey?

Since 1916, Oatey has provided reliable, high-quality products for the residential and commercial plumbing industries, with a commitment to delivering quality, building trust and improving lives. Today, Oatey operates a comprehensive manufacturing and distribution network comprised of industry leading family of companies:
Oatey, Cherne, Keeney, Quick Drain, Hercules, Dearborn, Oatey Canada, William H. Harvey, Masters, Contact, Belanger, Lansas, and Durgo.

At Oatey, we're doing big things - and by joining us, you'll have the chance to do big things too. You can build a strong career in an innovative, inclusive, high-performance environment, with the confidence that your company cares - about you, our customers and our world. Ready to make an impact in a place where you matter?

* Position Summary:

The SAP Security Specialist is responsible for the design, governance, and ongoing management of SAP security and access controls within Oatey's SAP S/4

HANA environment. This role serves as an individual contributor, owning Business Role Management, SAP GRC Access Control, and user access governance to ensure secure, compliant, and business-aligned SAP solutions. The position partners closely with business, functional, and technical teams to translate job responsibilities into least-privilege role designs, support audit and compliance requirements, and continuously improve SAP security maturity.

Position Responsibilities:

* Responsible for maintaining business blueprint and design documents that support Security and GRC activities.

* Administer SAP GRC Access Control suite of programs, including user provisioning, segregation of duty management, emergency access, role management and reporting.

* Design, implement, and govern business roles aligned to job functions and business processes, including role lifecycle management, ownership, and periodic review.

* Partner with business and functional stakeholders to translate job responsibilities into compliant, least-privilege SAP role designs.

* Administer GRC User Access Management Process to monitor key business processes.

* Responsible for leading SAP GRC maintenance, user role/account management maturity and evolution.

* Develop Info Sec capabilities while developing and maintaining security standards, policies, procedures and processes while ensuring that company systems are fully compliant with all applicable regulatory requirements and privacy laws.

* Maintain SAP S/4

HANA & FIORI Security based solutions.

* Coordinating with various teams for administration of Security and GRC tasks.

* Assist functional and technical team with solving critical issues, as it relates to Security or GRC.

* Assist team in administering heterogenous security tool landscape.

* Integrate SAP security and GRC systems with other security tools and platforms to orchestrate end-to-end security processes and improve interoperability.

Knowledge and

Experience:

* 5+ Years SAP Security and GRC experience.

* Good understanding of the SAP authorization concept and the role-based access control model.

* Ability to set up roles and administer them to users (including derived and composite roles).

* Hands-on experience with Business Role Management in SAP, including job-based role modeling and role lifecycle governance.

* Experience in SAP GRC Access Controls Suite / Process Controls Suite.

* Experience with SAP GRC 12 - including reporting capabilities and S4 HANA.

* Experience with implementation of mitigation controls for SOD violations and remediation.

* Multiple years' experience in SAP system audit and risk management and able to effectively strategize control testing and implementation.

* 5 years in relevant security governance, risk and compliance roles focused on executing SAP security and associated identity and access management function.

* Experience in risk assessments and audits related to all products and functions e.g., HANA, Basis, Fiori etc. implemented as part of the SAP technology portfolio.

* Strong skills in SAP Security Design Configuration and Administration.

* Experience with automation technologies such as…