Want to know if this job is worth applying to?
India
Hybrid
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Lead Information Security Analyst (SAP Security) based in India.
Take the next step in your cybersecurity career by helping secure complex, business-critical SAP environments within a global aerospace and defense organization. In this role, you will lead key SAP security activities, strengthen access controls, and ensure compliance with enterprise security policies and regulatory requirements. You will collaborate with business stakeholders, application owners, and technology teams to design effective security roles and manage access across multiple SAP platforms. Your expertise will support security audits, risk mitigation, incident resolution, and digital transformation initiatives. Working in an international, technology-driven environment, you will contribute to improving security governance while developing your knowledge of SAP S/4HANA, SAP Governance, Risk, and Compliance (GRC), and enterprise access management. This full-time, hybrid opportunity is ideal for an experienced SAP security professional who combines technical expertise, analytical thinking, and strong stakeholder management skills.
SAP security design and implementation: Design, implement, maintain, and support SAP security solutions across multiple applications and platforms, ensuring secure access and alignment with business requirements.
User and role administration: Manage SAP user access and authorization structures, including single roles, composite roles, role design, role maintenance, and access management. Ensure that permissions are appropriately assigned and maintained.
Access governance and compliance: Ensure adherence to internal security policies, audit requirements, and the Sarbanes-Oxley (SOX) framework. Support access reviews, segregation of duties (SoD) controls, compliance assessments, and security governance activities.
Security incident and service management: Investigate and resolve SAP security incidents and service requests, support audit findings, and coordinate appropriate corrective actions to maintain secure and reliable business operations.
Business process and authorization analysis: Analyze business processes, workflows, transactions, tables, and authorization objects to identify security gaps and recommend efficient, compliant access solutions.
Security standards and documentation: Develop, maintain, and improve SAP security standards, procedures, technical documentation, and operational guidelines to promote consistency and strengthen security practices.
Testing and change implementation: Participate in security testing, system enhancements, implementation activities, and access validation to ensure changes meet security requirements and quality standards.
Project and initiative management: Support multiple SAP security initiatives simultaneously, including small- to medium-sized enhancement projects and broader transformation programs, ensuring timely delivery and effective risk management.
Cross-functional collaboration: Partner with application owners, business stakeholders, and technical teams across global functions to understand access requirements, resolve security challenges, and implement appropriate controls.
Continuous improvement: Identify opportunities to improve SAP security architecture, role design, compliance processes, and access management practices while staying current with emerging technologies and industry standards.
Professional experience: At least 6 years of hands-on experience in SAP Security, including practical responsibility for security administration, authorization design, and access management.
SAP security expertise: Strong understanding of SAP security architecture, role-based authorization concepts, user administration, single and composite roles, role design, role maintenance, and access controls.
SAP platform experience: Practical experience supporting one or more SAP environments, such as SAP ECC, SAP BW/BI, SAP S/4HANA, SAP BW/4HANA, SAP Portal, SAP PI, and SAP SRM. Familiarity with Tableau and SAP BusinessObjects (BOBJ) is also relevant.
Audit and compliance knowledge: Experience supporting security audits, compliance activities, SOX controls, access reviews, and security testing, with an understanding of segregation of duties and risk-based access management.
Incident and service management: Experience handling SAP security incidents, service requests, access issues, and related operational support activities.
Governance, Risk, and Compliance: Experience with SAP GRC tools is an advantage, and SAP GRC certification is highly desirable.
Project delivery experience: Exposure to end-to-end SAP implementation, system enhancement, or transformation projects, including security design, testing, and deployment activities.
Education: Bachelor's degree in Engineering, Information Technology, Computer Science, or a related STEM discipline.
Preferred qualifications: A master's degree in a relevant field, professional SAP security or GRC certifications, and experience working with Agile or hybrid delivery methodologies are advantageous.
Industry exposure: Experience in aerospace, manufacturing, or other large, globally distributed organizations is preferred.
Analytical and problem-solving skills: Strong analytical thinking, attention to detail, and the ability to investigate complex authorization issues, assess security risks, and develop practical solutions.
Communication and collaboration: Excellent communication and stakeholder management skills, with the ability to work effectively with business users, application owners, and technical teams across different regions.
Autonomy and adaptability: Ability to manage competing priorities, work independently, and contribute effectively within a global team operating in a dynamic enterprise technology environment.
Full-time employment: A permanent-style, full-time opportunity within a global technology and aerospace environment; the specific employment contract terms should be confirmed during recruitment.
Hybrid working model: A combination of onsite and offsite work, with the onsite schedule determined in coordination with the team leader.
Group health insurance: Medical coverage as part of the employee benefits package.
Group term life insurance: Financial protection for eligible employees and their beneficiaries.
Group personal accident insurance: Additional coverage against eligible accidental injury risks.
Paid time off: 18 days of annual vacation leave and 12 days of contingency leave.
Meal benefits: Meal coupons or vouchers to support everyday expenses.
Retirement benefits: Access to the National Pension Scheme (NPS), subject to applicable program terms.
Travel benefits: Leave Travel Allowance (LTA), subject to the applicable policy.
Vehicle-related benefits: Car lease options and fuel, vehicle maintenance, or driver wage benefits, where applicable under company policy.
Education support: Access to an employee scholar programme.
Work-life balance: A benefits and work arrangement designed to support employee well-being and professional sustainability.
Professional development: Opportunities to strengthen expertise in SAP security architecture, SAP S/4HANA, GRC, access governance, and enterprise cybersecurity.
Global collaboration: Exposure to international teams, complex enterprise systems, and strategic digital technology initiatives.
Important hiring condition: Background verification is required for external new hires in India. Additional screening requirements may apply depending on the position and applicable policies.
