3 months, with option to extend
To ensure secure and reliable access to all of the clients key applications like mySAP ERP (SAP ECC) by maintaining and safeguarding the authorization architecture (access model, segregation of duty rules, authorization procedures, etc).
To define and maintain the authorization architecture and authorization profiles of users of the clients key applications, based on internal and external rule sets
To ensure that the structure of job positions and corresponding user profiles enables optimal, Sarbanes-Oxley compliant segregation of duties.
To ensure an effective and efficient role-based-access-control model with respect to authorizations.
To develop, maintain, and execute authorization procedures
To advise on new applications and on enhancements/modifications on existing services concerning authorizations.
To participate in projects related to key applications in order to facilitate the creation, modification and removal of user authorizations.
Monitoring of authorizations, reporting outcomes periodically, and solving issues jointly with internal business process owners
Maintain the SAP GRC (Virsa Compliance Calibrator) application used for auditing and reporting on the SAP authorization profiles.
High Vocational / Academic; Informatics, Business Administration with specialization in IT Security
Extensive knowledge of SAP applications like ECC, BW, SCM, GTS, Ariba, MDG.
Extensive experience with the SAP - Role Based Access model
Experience with SAP Virsa /Compliance Calibrator monitoring and reporting tool
Extensive knowledge of administrative organization, business processes and Internal Control.
Familiar with auditing principles, the COSO/COBIT framework, ITIL, ISO 17799 and applicable legislation (e.g. Sarbanes-Oxley Act)
Good analytical and problem solving skills, accurate, pragmatic, support minded
Excellent communication skills and proficiency in the English language
If you are interested in this opportunity please leave your CV and I will contact you.
Riwanna van der Galiën
Candidate Relations Consultant in IT Contracting
Reactie is prive en alleen zichtbaar voor de opdrachtgever en de plaatser van de reactie.
Je moet inloggen voordat je een reactie kunt plaatsen.