Senior Analyst, SAP Security and Controls

We’re looking for a passionate Senior Analyst, SAP Security and Controlsto join our US ERP Security Team! Reporting to the Manager, Finance Technology Enablement, Business Operations Systems Support User Access & Controls, this position is responsible for creating and maintaining valued partnerships with the business by supporting the business’ User Access & Controls needs and processes. This role will coordinate day to day business user support for GRC access request processing and SOX audit responsibilities. This position will also coordinate the day-to-day interface with key business users in the provisions of services; analyze data and activities to provide relevant and up-to-date information to support decision-making and the effective working of National Grid.

This role is based out of our Brooklyn, Waltham or Syracuse office, and we’d hope to see you at least two days per week but you’re welcome to be in the office more often if that would work best for you. We’re happy to discuss any additional flexibility in working patterns or requirements that you feel could help to make this job work for you!

What You'll Get

• Support the SAP security and authorisation environment, including user administration, roles, profiles, authorisation objects, Fiori or portal access and related security configuration.
• Administer SAP GRC or equivalent access processes, including access requests, provisioning, amendments, removals, privileged or emergency access and periodic reviews.
• Investigate and resolve access issues, role defects and security incidents, and assess Segregation of Duties and critical access risks, supporting remediation through role redesign, access removal or mitigating controls.
• Execute and quality-check SOX, IT General Controls, business and financial controls for SAP and other in-scope applications, maintaining complete, accurate and auditable evidence.
• Support control testing, walkthroughs and internal or external audit requests, identify control or evidence weaknesses and track sustainable remediation through to completion.
• Analyse access, control and system data to identify exceptions, anomalies, trends and risks, and produce clear management information and reporting.
• Administer access and security for selected non-SAP finance and business applications, maintaining appropriate records, documentation, evidence and least-privilege access.
• Represent SAP Security and Controls on projects, enhancements and transformation programmes, contributing to requirements, role and control design, testing, issue resolution, go-live readiness and transition into business as usual.
• Work collaboratively with global Finance, Technology, Risk and Controls, Digital Risk and Security, auditors, business teams and third-party providers to resolve issues and deliver consistent outcomes.
• Identify opportunities to simplify, standardise and automate security and control processes while maintaining governance, auditability and control effectiveness.

What You'll Have

• Practical controls experience gained through control operation, risk and controls, internal or external audit, compliance or a comparable assurance role, with a sound understanding of control design, evidence, testing, issue management, remediation and audit readiness.
• Practical SAP experience gained through SAP security or authorisation maintenance, SAP controls, SAP audit, access management, application support, system maintenance or a comparable role.
• Minimum of 5 + years Sarbanes Oxley controls (SOx) experience
• Strong leadership, meticulous attention to detail, excellent verbal and written skills and excellent interpersonal skills
• Working knowledge of SAP roles and authorisations, user administration, access management, Segregation of Duties, critical or privileged access and risk mitigation.
• Experience administering or supporting access for non-SAP enterprise applications, with the ability to learn new systems and apply consistent security and control principles.
• Experience supporting projects, system changes or transformation activity, including requirements analysis, testing, documentation, risk assessment, go-live and transition to business as usual.
• Strong analytical skills and confidence working with large datasets, including Excel formulas, lookups, pivot tables, filters and data-quality checks.
• Ability to investigate complex issues, understand business and end-user needs and recommend practical, proportionate and risk-based solutions.
• Clear communication and stakeholder-management skills, with the ability to work effectively across global teams, auditors, technical specialists and third-party providers while managing competing priorities across time zones.

Don’t meet every single requirement? Studies have shown that women and people of colour are less likely to apply for jobs unless they meet every single qualification. At National Grid, we are committed to building a diverse, inclusive, and authentic workplace for everyone. So, if you’re excited about this role but your experience or qualifications don’t match the job description exactly, we encourage you to apply anyway. You might just be the right person for our growing business in this role or another one.

Further Information

This is a hybrid working role from our Warwick office with circa 2 days in the office. The closing date for this vacancy is Midnight 20 October 26, with interviews due to take place w/c 26 October 26 onwards. We encourage candidates to submit their applications as early as possible and not to wait until the published closing date. National Grid’s recruitment periods can and may vary. We reserve the right to remove this advert or close it to further applications at any point during the recruitment process.

About us

Every day we deliver safe and secure energy to homes, communities, and businesses. We are there when people need us the most. We connect people to the energy they need for the lives they live. The pace of change in society and our industry is accelerating and our expertise and track record puts us in an unparalleled position to shape the sustainable future of our industry. To be successful we must anticipate the needs of our customers, reducing the cost of energy delivery today and pioneering the flexible energy systems of tomorrow. This requires us to deliver on our promises and always look for new opportunities to grow, both ourselves and our business

At National Grid, we work towards the highest standards in everything we do, including how we support, value and develop our people. Our aim is to encourage and support employees to thrive and be the best they can be. We celebrate the difference people can bring into our organisation, and welcome and encourage applicants with diverse experiences and backgrounds, and offer flexible and tailored support, at home and in the office. Our goal is to drive, develop and operate our business in a way that results in a more inclusive culture. All employment is decided on the basis of qualifications, the innovation from diverse teams & perspectives and business need. We are committed to building a workforce so we can represent the communities we serve and have a working environment in which each individual feels valued, respected, fairly treated, and able to reach their full potential.