SAP Security Analyst

Costco • Seattle, WA

439d • $150,000 - $195,000

About The Position

The SAP Security Analyst at Costco Wholesale is responsible for ensuring the security and compliance of various SAP applications and modules. This role involves developing and executing security controls, managing user access, and maintaining a secure technology environment. The analyst will work closely with application owners to establish security priorities and ensure compliance with legal and regulatory obligations, while also providing expertise in SAP security best practices.

Requirements

• 5-8 years' hands-on SAP security expertise.
• Minimum of 5 years' experience with SAP Security across various applications including S/4, BTP, Signavio, ECC, HCM, FICO, HANA DB, GRC, BODS, BOBJ, BW, Fiori, PI/PO, eWM, ETD, and Solution Manager.
• Experience with SAP's role-based security concepts and the Profile Generator.
• Understanding of SAP security best practices.
• Ability to work with ServiceNow Ticketing Tool.
• Proficiency in Excel, Access DB, and Google Spreadsheets.
• Ability to assess business role requirements and design authorization roles.
• Experience with Enterprise portals authorizations.
• Strong understanding of SAP GRC Ruleset for Security Analysis.
• Experience testing authorizations for multiple environments.
• Strong understanding of Sarbanes-Oxley (SOX) compliance requirements.
• Knowledge of transaction auditing and ability to support audit teams.
• Knowledge of SAP NetWeaver security and infrastructure level security concerns.
• Self-motivated with a strong focus on customer needs.
• Ability to mentor less experienced team members.
• Strong conceptual, analytical, problem-solving, and troubleshooting skills.

Nice To Haves

• Bachelor's degree in Accounting, Business, Information Technology, or Computer Science preferred.
• Experience in SailPoint IGA is preferred.
• Proficient in Google Workspace applications, including Sheets, Docs, Slides, and Gmail.

Responsibilities

• Provide security and technical expertise to support the development of security objects to satisfy business requirements.
• Analyze and administer security policies to control physical and virtual system access.
• Identify and investigate security issues and develop security solutions that address compliance requirements.
• Develop and implement mechanisms to detect security incidents to enhance compliance and support security standards.
• Assess business role requirements, review authorization roles, and support authorizations.
• Demonstrate a comprehensive skill set with testing authorizations for multiple environments and coordinate testing with business/technical users.
• Validate system configurations to ensure the safety of information systems assets.
• Implement best practices in information systems security standards/practices.
• Design and coordinate activities with other departments such as loss prevention and legal.
• Identify security gaps and develop remediation strategies.
• Develop and execute security controls to prevent data infiltrations.
• Determine strategy and protocol for network behavior and analysis techniques.
• Identify and resolve problems, anticipating issues before they occur.
• Provide subject matter expertise in systems security policies and technologies.
• Configure, deploy, maintain, and support security tools.
• Protect confidentiality, integrity, and availability of information.
• Create dashboards, configure alerts, and monitor security tools/apps.
• Identify opportunities for process improvement and streamlining.
• Document security events and incident handling procedures.
• Triage, prioritize, investigate, and coordinate security events and incident handling activities.
• Gather requirements from internal clients to support the development of security objects.
• Prepare and maintain documentation as needed.
• Work with business areas to troubleshoot issues with security objects.

Benefits

• AD&D insurance
• Employee stock purchase plan
• Disability insurance
• Dependent care reimbursement
• Health insurance
• Dental insurance
• 401(k)
• Paid time off
• Vision insurance
• Life insurance

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Industry: General Merchandise Retailers
• Education Level: Bachelor's degree