SAP Security Analyst

Requisition Number: 79167

About the role

The SAP Security Analyst is responsible for administering and maintaining user access within Corning's SAP ECC 6.0 environment. This role serves as a critical control point for ensuring that user access is provisioned, modified, and removed in accordance with Corning security policies, Segregation of Duties (SoD) requirements, internal controls, and Sarbanes-Oxley (SOX) compliance obligations. The analyst works closely with business users, managers, auditors, IT support teams, and security administrators to ensure appropriate access is granted based on business need while protecting Corning systems and data assets.

Responsibilities

SAP User Account Administration

• Create, modify, lock, unlock, and delete SAP user accounts across ECC environments
• Process access requests, transfers, and terminations in accordance with defined approval workflows
• Ensure all user access is supported by appropriate approvals (e.g., supervisor and role owner approvals)
• Maintain accuracy and completeness of user master data
• Support manual and automated provisioning processes (e.g., ZCAT, SU01)

SAP Role Assignment & Maintenance

• Assign, modify, and remove SAP roles based on approved business requirements
• Validate all access requests against approved SAP role design and authorization concept
• Ensure access aligns to job function and business necessity
• Support role rationalization and cleanup efforts to reduce unnecessary access
• Enforce least-privilege access principles across all assignments

Security Controls & Compliance

• Execute Segregation of Duties (SoD) checks during role assignment and user provisioning
• Utilize tools such as SecurityWeaver to identify, monitor, and mitigate SoD conflicts
• Support periodic access reviews, including quarterly and annual certification activities
• Ensure compliance with SAP security policies, internal controls, and audit requirements
• Maintain documentation and audit evidence for access provisioning and changes

Access Governance & Risk Management

• Ensure all access requests follow defined processes and require appropriate approvals
• Support management of critical (Cat3) roles, including approvals and monitoring
• Assist in enforcing restrictions on high-risk transactions and system-wide access
• Participate in enforcing policies governing privileged access and emergency access use

Incident Support & Troubleshooting

• Investigate and resolve user access issues and authorization errors
• Support business users with access-related inquiries
• Coordinate with functional teams to resolve role-related issues

Operational Support

• Process ServiceNow SAP security tickets within defined SLAs
• Support onboarding, offboarding, and organizational changes impacting access
• Participate in system refreshes, migrations, and project cutover support

Documentation & Continuous Improvement

• Maintain and update SAP security work instructions, procedures, and documentation
• Identify opportunities to improve efficiency, automation, and control effectiveness
• Support continuous improvement initiatives within SAP security processes

Requirements

• Bachelor’s degree in information systems, Computer Science, Business, Accounting, Cybersecurity, or a related discipline desired; equivalent combination of education and experience will be considered
• 2–5 years of experience supporting SAP security administration (or related system) preferred
• Experience with SAP ECC 6.0 user and role management (or related system) desired
• Experience working with IT service management tools such as ServiceNow desired
• Experience supporting compliance-driven environments
• Understanding of SAP authorization concepts
• Knowledge of user provisioning and deprovisioning processes
• Knowledge of Segregation of Duties (SoD) concepts
• Understanding of internal controls and audit requirements
• Strong analytical and problem-solving skills
• Strong attention to detail and commitment to data accuracy
• Ability to manage multiple priorities and meet deadlines
• Strong written and verbal communication skills
• Ability to work effectively with business and technical stakeholders globally

Preferred Qualifications

• Experience with Security Weaver or comparable SAP security governance tools
• Experience supporting SOX-regulated environments
• Experience with SAP GRC Access Control
• Familiarity with Identity and Access Management (IAM) solutions
• Experience supporting global SAP environments
• Knowledge of SAP S/4HANA security concepts
• Security-related certifications such as SAP Security, CISSP, CISM, or comparable credentials

Pay

The range for this position is $63,456.00 - $87,252.00 assuming full time status. Starting pay for the successful applicant is dependent on a variety of job-related factors, including but not limited to geographic location, market demands, experience, training, and education.

Benefits

• Company-wide bonuses and long-term incentives aligned with key business results
• 100% company-paid pension benefit with fixed contributions that grow throughout your career
• Matching contributions to 401(k) savings plan; total company contributions to retirement accounts can reach between 7% and 12% of pay, depending on age and years of service
• Health and well-being benefits: medical, dental, vision, paid parental leave, family building support, fitness, company-paid life insurance, disability, disease management programs, paid time off, and Employee Assistance Program (EAP)
• Recognition program to celebrate successes and reward exceptional contributions