audit and compliance analyst

Position Purpose

Provide monitoring and oversight of SAP controls related to the following areas:
Monitor compliance of SAP controls assigned to the IT Audit and Compliance team (Emergency User log audits, SAP configuration settings, Virsa reports, etc.)
Coordinate with control owners to ensure that active management of the controls occurs throughout the year (Role development, User Assignment/Creation, Role hierarchy organization/architecture, and Emergency Access provisioning).
Manage escalation of issues that arise from monitoring/oversight of controls – added verbiage
Coordinate with responsible parties
Determine proper resolution
Confirm issue resolution
Participate in the review process for application, database, operating system, and operational process changes/modifications in the SAP environment to ensure that controls remain valid and/or to coordinate the creation of new controls.
Provide coordination with internal and external auditors to support audit activity within IT
Work with impacted organizations to remediate non-compliance conditions.


Secondary Duties and Responsibilities:

• Attend staff meetings and or any other required meetings.
• Provide progress reports to direct line of management.
REQUIREMENTS
Minimum Required Skills / Competencies:
Functional/Technical Skills:
• Strong written and verbal communication skills
• Ability to work independently, and take ownership of issues and work products
• Experience with utilization of SAP Best practices
• Understanding of SAP BASIS activities including transport processes and procedures
• Intermediate/advanced experience with the following monitoring applications:
o Virsa Access Controls Suite (e.g. Firefighter, Risk Terminator, Role Expert, Access Enforcer, Compliance Calibrator)
o Approva’s BizRights Platform and Enterprise Controls Suite with advance knowledge in monitoring for SOD violations / conflicts across the entire SAP landscape i.e. R3, CRM, HR, BW, EBP, IDOO, Portal etc.
• Basic operating system (HP/UX and Windows) knowledge
• Basic relational database (Oracle and SQL Server) knowledge
• Understanding of multi-tier application architecture
• Understanding of networking technology
• Competence with Microsoft products - Office (Word, Excel), Visio, Project


Experience:

• 5 years experience in SAP security/application support
• Working in a cross-organizational environment, with an overview of multiple functional areas
• Creating and maintaining monitoring plans and schedules.
• Providing clear, concise information to support the creation of senior management reports
• Reviewing technical documentation (functional specifications, design documents, etc.).
•Significant experience with standard business practices and their relationships to IT controls“

Education/Vocational Training:

• Bachelor degree in CS, Engineering, MIS or equivalent field

This candidate must have strong skills and experience working with monitoring tools e.g. Virsa Compliance Calibrator / Approva BizRights Suite in role assuring compliance. Must have good understanding SOX 404 and how it relates to the SAP landscape across all plateforms i.e. CRM, HR, BW, EBP, R3.