Sr. Information Security Analyst ERP Systems (SAP and JD Edwards)

$83,000 - $141,000/Yr

McKesson - Irving, TX

Full-time - Senior

Onsite - Irving, TX

1-10 employees

Merchant Wholesalers, Nondurable Goods

About the position

The Senior Information Security Analyst at McKesson is responsible for supporting JD Edwards and SAP Security & Compliance. This role focuses on security administration, design, and improvement initiatives to ensure compliance with security mandates while collaborating with various teams within the organization. The analyst will act as a subject matter expert, identifying gaps in security implementation and expanding security capabilities, while also providing training and oversight for security projects.

Responsibilities

• Act as a subject matter expert for security and compliance on JD Edwards E1 and SAP systems.
• Identify gaps and improvements in the current security implementation.
• Expand security capabilities to utilize JDE and SAP security tools effectively.
• Update and implement Master Data such as Roles/Entitlements and Security Configuration.
• Provide oversight for projects requiring security access and compliance support.
• Train other security team members on security services activities and domain knowledge.
• Support ongoing security service for JDE and SAP, meeting defined service levels and performance objectives.
• Develop and manage security strategy, role design, and access provisioning.
• Serve as a leader for implementing security architecture and convey strategic vision for security processes.
• Coordinate security designs with various Business Units and Cybersecurity teams.
• Analyze and implement security requirements and recommend security measures.
• Collaborate with technical and functional teams to ensure successful security solutions.
• Support SOX Compliance through adherence to controls and procedures.
• Provide ideas for improvement initiatives and manage improvement projects.

Requirements

• 7+ years relevant security administration experience.
• At least 2 full implementations of security on SAP and JD Edwards systems.
• Experience with different scripting/programming languages for automation.
• Expertise in OWM security and menu, JDE E1 security design, and user maintenance.
• At least 3 years experience in SAP GRC Access Control & Process Control.
• At least 3 years experience with SAP ETD administration and maintenance.
• Proficient in IT general controls, SOC and SOX requirements related to security administration.
• Deep knowledge of application security, capabilities, and limitations.
• Proficient in reducing the attack surface and hardening ERP system security.

Nice-to-haves

• Experience with integration of SAP and JD Edwards security administration with Identity Management platforms.

Benefits

• Competitive compensation package including base pay and potential bonuses.
• Annual bonus or long-term incentive opportunities.