Company: Saudi Aramco (ASC)
Skills: IT - SAP / ERP, Security
Experience: 8 + Years
Education: Bachelors/3-5 yr Degree
Employment Type: Full Time Salaried Employee
Location: Saudi Arabia

In order to apply for this position, applicants MUST meet the following criteria. If your resume does not match these criteria, you will not be able to apply for this position.

Req Number: 17251BR

Position Description:
We are seeking an SAP Security Analyst to join the Access Management Division (AMD) of the Information Protection Department.

AMD is responsible for providing streamlined and efficient services to protect company resources, through secure access and authorization.

The SAP Security Analyst role is to be fulfilled by a senior technologist with a strong background in SAP NetWeaver security, with a specific emphasis in SAP GRC and SAP HANA solutions and technologies.

Minimum Requirements:
Bachelor's Degree in Computer Science or Computer Information Technology.

Prefer 8+ years of functional experience with SAP Security, with knowledge of associated SAP GRC and SAP HANA.

Certified SAP consultant.

Thoroughly proficient in both verbal and written English.

Selection Criteria

Thorough understanding of SAP Security authorizations, concepts, transactions, and tables highly desired.

Experience with SAP's GRC Access Control and Firefighter tools highly desired. They include:

- Super User Privilege Management (Fire Fighter)
- Enterprise Role Management (Role Expert)
- Compliant User Provisioning (Access Enforcer)
- Risk Analysis & Remediation (Compliance Calibrator)

Experience with SAP HANA security and related tools.

Ability to work effectively on a diversified team as well as independently, in pressure situations, with composure and tact, is required.

Ability to facilitate interactive sessions to elicit requirements, design, and functional specifications is required.

Strong analytical, problem-solving, conceptual and project management skills are required.

A customer-focused, service attitude, working with all levels of the organization, both technical and nontechnical is required.

Advanced knowledge of application software tools, including presentation, spreadsheet, project management, and word processing applications, #e.g.,

Microsoft applications) is required.

Highly developed interpersonal, written, and verbal skills, including active listening, with an ability to express complex technical concepts into business terms are required.

Excellent technical writing and system documentation skills are required.

Duties & Responsibilities:
You will be required to perform the following:

Provide application support for SAP role and authorization development and configuration changes as well as production problems. Perform third level support for SAP application security to ensure efficient execution of business processes, while simultaneously protecting business critical data.

Review ERP authorization requests and release plans to determine and resolve any conflicts between current and proposed functionality in SAP R/3 and EBP systems.

Provide technical support of SAP system hot packs, upgrades & OSS note applications to the program managers, technical and system development teams and the business.

Work with internal and external auditors; good understanding of system risk and mitigating controls, segregation of duties.

Coordinate the creation and maintenance of User Master Records in all SAP clients. Thorough analysis is required to check for separation of duty conflicts.

Provide afterhours coverage for business critical situations.

Configure of SAP Security parameters and privileges. Evaluate and implement external security advisories and patches. Make decisions which impact projects within scope of authority. Identify and evaluate project dependencies.

Analyze and implement authorization security requirements and make recommendations as needed to help develop security measures.

Serve as a Project Team Member on various sized projects and assist in defining SAP security requirements.

Document SAP security processes and help in the creation of operational guides and procedures.

About us:
The Engineering & Project Management (E&PM) business line studies, plans and oversees the construction of the Company's new facilities, including some of the biggest and most complex projects in the petroleum industry. Recently, Saudi Aramco completed the largest capital program in its history that included new or expanded oil, gas and petrochemical facilities, raising maximum sustainable crude oil production capacity to 12 million barrels per day and significantly increasing gas production and processing capacities. Among the recently completed projects was the largest crude oil increment in the history of the industry: Khurais, with a production capacity of 1.2 million barrels per day. More challenges lie ahead, with a slate of new or expanded oil, gas, refining and petrochemical projects in the works. E&PM also manages the Company's Research & Development Center where scientists investigate topics such as the desulfurization of crude oil, advanced fuel formulations for next generation combustion engines, and reservoir nano-scale robots (Resbots™) for injection into reservoirs to record their properties.