Senior Consultant:SAP Application Security

Deloitte & Touche USA LLP is the U.S. member firm of Deloitte Touche Tohmatsu and services are provided by its subsidiaries, including Deloitte & Touche LLP, Deloitte Consulting LLP, Deloitte Financial Advisory Services LLP and Deloitte Tax LLP. Deloitte & Touche USA LLP’s subsidiaries are among the nation’s leading professional services firms, providing audit, tax, consulting, and financial advisory services through nearly 30,000 people in more than 80 cities. Known as employers of choice for innovative human resources programs, they are dedicated to helping their clients and people excel.Enterprise Risk Services
Senior Consultant: SAP Application Security Specialist
San Francisco Bay Area
 
Our Enterprise Risk Services (ERS) practice is a global leader in helping clients manage risk and uncertainty, from the boardroom to the network. We provide a broad array of services that allow clients around the world to better measure, manage and control risk to enhance the reliability of
systems and processes throughout the enterprise. With core competencies encompassing capital markets, control assurance, internal audit, regulatory consulting, and security services, our ERS professionals offer a wealth of experience across a wide spectrum of industries.
 
Deloitte & Touche LLP's Security Services Group was specifically created to address our clients' needs for information protection. Our practitioners have hands-on experience not only in assessing complex networks and systems, but also in the design and configuration of complex security controls. We have developed, tested, and refined our methodologies to efficiently provide high-quality and cost-effective services that help clients develop an enterprise approach to information security. As part of our Appliction Integrity team we are currently looking for an SAP Application Security Specialist.
Demonstrated Abilities:
- SAP R3 security implementation with all modules
- Business Warehouse application security
implementation
- Understanding segregation of duty concerns with respect to application security implementations
- Knowledge and understanding of SAP administration and maintenance
- Building SAP application security
- Preferred security experience with any of the following:
- SAP version 4.5 and above (4.7 preferred)
- Knowledge of SAP security from SAP 3.0 a plus
- Business Warehouse 2.0 and above
- Human Resources (HR)
- Customer Relationship Management (CRM)
- Supplier Relationship Management (SRM)
- Supply Chain Management (SCM)
- Enterprise Portal (EP)
General Responsibilities:
- Assess clients' security and control readiness and provide appropriate security assistance
- Contribute to a strong client relationship through interactions with client personnel
- Understand engagement as it relates to client's business
- Demonstrate knowledge in
some areas of industry or functional specialty
- Contribute to engagement planning and ensuring that products/deliverables meet contract/work plan
- Issue reports that address: level of business risks, effectiveness of controls, and consultative business solutions
- Meets client needs by acting with a sense of urgency, practicality and integrity
- Deliver services that meet D&T task leader specifications
- Recognize and communicate opportunities to sell "add-on" work to client
- Contribute to a positive team attitude
Qualifications: 
- 4+ years experience in information systems audit, assurance, and/or implementation
- 2+ years security control implementation experience in SAP applications
- Strong background in the following:
- Business process controls design or re-engineering
- Application security design and implementation
- Security auditing techniques
- General computing controls Ability to play a lead role in designated tasks of the project team in gathering, organizing and analyzing data
- Open to travel requirements
- Prior Big 4 or consulting experience preferred
- BA/BS Degree in Business Administration, Computer Science,  Finance, Accounting, or Information Systems
- Experience with Sarbanes Oxley 404 internal control attest and readiness requirements
- CISA, CISSP and/or Packaged Application Certification preferredDeloitte & Touche USA LLP and its subsidiaries ("the Deloitte US Firms") are equal opportunity employers.Deloitte refers to one or more of Deloitte Touche Tohmatsu, a Swiss Verein, its member firms and their respective subsidiaries and affiliates. As a Swiss Verein (association), neither Deloitte Touche Tohmatsu nor any of its member firms has any liability for each other’s acts or omissions. Each of the member firms is a separate and independent legal entity operating under the names “Deloitte,” “Deloitte &
Touche,” “Deloitte Touche Tohmatsu,” or other related names. Services are provided by the member firms or their subsidiaries or affiliates and not by the Deloitte Touche Tohmatsu Verein.
Deloitte & Touche USA LLP is the U.S. member firm of Deloitte Touche Tohmatsu. In the U.S., services are provided by the subsidiaries of Deloitte & Touche USA LLP (Deloitte & Touche LLP, Deloitte Consulting LLP, Deloitte Financial Advisory Services LLP, Deloitte Tax LLP and their subsidiaries), and not by Deloitte & Touche USA LLP.
REQUIREMENTS
Please see Job Description