Security & Controls Lead

Job Description

**Security & Controls Lead** (Contract)Duration: 6 Months (Possibility for Extension)Location: Primarily remote with occasional travel to SolihullRate: A highly competitive Umbrella Day rate is available for suitable candidatesRole PurposeThe Security & Controls Specialist will play a critical role in the day-to-day governance of our business systems, working within a wider ERP Team. They will be a focal point in the design, operation and governance of User and Access Management processes,including supporting technologies, and will provide ongoing guidance and monitoring to ensure effective control.This role will also ensure our policies and processes are world class and embrace the latest technologies and innovations.Key Accountabilities:

• Define, develop and improve security processes and controls to support both internal and external regulations/standards.
• Design, operate and continuously improve monitoring to ensure compliance with internal security policies and applicable laws and regulations.
• Maintain the ERP security policies and standards, and ensure adherence to current best practice.
• Ensuring all SAP and other system changes and developments are compliant with the security policies and take into account potential impact on controls.
• Identifying and remediating control "gaps" within systems and processes.
• Regular reporting to senior stakeholders on security, governance and compliance including access risk issues, firefighter usage and mitigating control management
• Embed a focus on security and controls into "business as usual" processes, as well as implementing and running periodic controls assurance programmes.
• Monitor compliance with segregation-of-duties, sensitive access and other security standards in SAP and other critical business systems using Security Weaver (now Pathlock) GRC tools.
• Review and approve risk mitigations along with Global Process Owners (GPOs).
• Work closely with GPOs to ensure integration between business and IT controls.
• Act as Security & Controls focal point in relevant forums to move forward ongoing controls initiatives and define/implement new ones.
• Co-ordinate and liaise with Internal and External Auditors during security audits.
• As SME for Security & Controls, demonstrate security processes and GRC tool processes to internal and external auditors and respond to questions relating to them.
• Provide expertise in additional security and controls capability, define requirements for solutions and manage delivery of enhancements.
• Provide oversight and audit support to ensure that security and controls services performed by outsourced providers are in accordance with company policies and objectives.
• Perform reviews of new connections/interfaces into SAP, and support new roadmap technology such as preparing for S4 HANA, and new Security Weaver (Pathlock) modules.
• Perform forensic investigations as required to support controls environment.

Skills & Experience:

• A degree or equivalent qualification in an IT or engineering field or accounting would be preferable) - relevant experience would also count
• A sound knowledge of SAP Security & Control standards and guidelines;
• A sound knowledge of SAP Security and Authorization technology across ECC, HCM, SRM and BW.
• Thorough understanding of risk and control concepts, including IT general controls and business controls across key functional areas;
• Good troubleshooting & analytical skills, with excellent written and oral communication skills at both technical and business levels; and
• Good understanding of GRC concepts especially around access controls
• Basic understanding of SAP workflow and approval controls
• Extensive experience in ERP Security & Controls, with strong experience in SAP Security Technologies. Experience with other SAP modules will be considered as an advantage;
• Experience administering and/or using GRC technologies, with specific experience using Security Weaver (now Pathlock) preferable;
• Experience conducting audits or assurance programmes around security and controls (preferable)

Candidates will need to show evidence of the above in their CV in order to be considered.If you feel you have the skills and experience and want to hear more about this role apply now to declare your interest in this opportunity with our client. Your application will be observed by our dedicated team.We will respond to all successful applicants ASAP however, please be advised that we will always look to contact you further from this time should we need further applicants or if other opportunities arise relevant to your skillset.Pontoon is an employment consultancy. We put expertise, energy, and enthusiasm into improving everyones chance of being part of the workplace. We respect and appreciate people of all ethnicities, generations, religious beliefs, sexual orientations, genderidentities, and more. We do this by showcasing their talents, skills, and unique experience in an inclusive environment that helps them thrive.As part of our standard hiring process to manage risk, please note background screening checks will be conducted on all hires before commencing employment.