Define & update VCEAA Application Security policies for both, SAP & Non-SAP applications such as System Access policy, Change Management policy, etc.
Manage SAP GRC Access module to ensure alignment with VCEAA Application policies.
Design, implement & maintain controls set up in SAP GRC Process Control, to monitor the actions performed by the users in SAP, and automatize the reporting of exceptions to the related Control Owners.
Analyse new customized TCodes (Zs) according VCEAA Security policy to identify any potential impact over SAP GRC ruleset and ensure they are properly documented according VCEAA Customized policy.
Extract data from SAP GRC and Non-SAP Applications in order to prepare ad-hoc reports & facilitate execution of regular SOX control related to SAP access such as SAP Security report (monthly), SAP access review (annual), access removal to terminated employees (monthly), 3rd party access review (quarterly), and any other ad-hoc request.
Together with related SAP Consultant and Non-SAP Consultants, investigate options to optimize & automatize SOX controls in the different processes: Order to Cash (SD), Purchase to Pay (MM), Plan to Manufacture (CO), Fixed Assets (AA), Payroll (HR), Record to Report (FI), etc.
Follow up status of Action Plans reported by Internal Audit that required an action from VCEAA IT team.
Project management related to Application Security & Internal Control area, and monitor the project progress, risks, change control as well as the quality of deliverables.
Prepare periodic reports on security project status and report it to stakeholders.
Interact with other IT areas or 3rd party providing service on Application Security area.
Compartir esta oferta
Crear alerta
Recibe en tu email nuevas ofertas de trabajo similares.
Entrevista Virtual
Completar candidatura
Para completar tu candidatura, Michael Page necesita completar tu registro en su web.
