Major accountabilities:

• Responsible for global access management/ operation, ensure process are effectively operated and in compliance manner.
• Responsible for the overall continuous improvement, security control implementation, life cycle of security document and training.
• Responsible for audit facing and support include walkthrough, collection of evidence and governance of audit deliverable and resolve if any audit issues.
• Serve as the subject matter expert (SME) for security enhancement, providing expert advice and guidance to business and compliance stakeholder.
• Advises peers and management on complex issues, provides complex, contextual advice to influence the management for any new implementation and risk across business domains.
• Support vendor service performance, ensuring quality standards are met.

Key performance indicators:

• Ensure adherence of operation / vendor are meeting the control objective and agreed SLA/KPI.
• Ensure appropriateness of implementation of security control and ensure no gap in the design and operation.
• Ensure improvement/ enhancement initiative are implemented on time.
• Ensure regular successful audit related to user access management and all gaps are addressed on time.

Minimum Requirements:

Work Experience:

• Bachelor’s degree in engineering, Computer Science/Information Technology,
• Extensive experience in SAP / Application Security and Identity Management.
• Proven track records, preferable with more than 3 end-to-end project experiences in SAP S&A implementation and support large scale of global operation.
• Experience in audit and control design.
• Experience in managing vendor services and ensuring alignment with security standards
• Good exposure to one or more technology landscapes - SAP GRC, IAG, ECC, S4/HANA, SAP BTP, HANA/BW/BO, SRM, MDM, SAP SaaS (ARIBA, Concur) & other SAP endorsed apps.
• Experience with risk / governance management and CISA/ CISM certification is a strong plus.

Skills:

• Excellent level of functional and technical knowledge of SAP security & authorization.
• Excellent level of audit and control of Identity access management.
• Strong knowledge in identity lifecycle management concept including role design, RBAC, SoD, Least Privilege principle and good understanding on IAM IT general controls/regulatory compliance requirements
• Good exposure to one or more technology landscapes -  SAP GRC, IAG, ECC, S4/HANA, SAP BTP, HANA/BW/BO, SRM, MDM, SAP SaaS (ARIBA, Concur) & other SAP endorsed apps.
• Experience with other identity lifecycle management products is a strong plus.
• Possess great analytical and consulting skills to provide recommendations and solutions for user access design gaps and remediation

Skills (summary)

• SAP Security & Authorization design
• Audit & Risk management
• Analytical & problem-solving
• Collaboration & Stakeholder management
• Project management
• Vendor service management

Languages :

English.