Senior Information Security Analyst - IAM SAP

Description

The SAP Security Analyst will contribute to the integrity, confidentiality, and availability of our SAP systems. They will collaborate on implementing and maintaining robust security measures, managing SAP roles, and ensuring compliance with relevant regulations and standards. Experience in operating systems, processes, and workflows related to access management and identity management is required. **Responsibilities and Duties** * Management of Profiles and Authorizations; * Define and configure authorization profiles in SAP; * Create, modify, and delete roles (standard or customized); * Analyze authorization conflicts; * Review and audit critical accesses and segregation of duties (SoD); * Access Control; * Process user access requests; * Assess the criticality of requested accesses; * Configure and administer users and access profiles; * Implement least privilege access policies; * Audits and Compliance; * Conduct and support internal and external audits; * Monitor and document accesses to sensitive data and critical transactions; * Manage security audit reports; * Ensure compliance with legislation (e.g., LGPD, SOX, GDPR); * SAP Infrastructure Security; * Configure and maintain SAP security parameters (e.g., SNC, SSL, SAP Router, SAP Gateway); * Monitor security logs (SM20, ST01\); * Analyze vulnerabilities and recommend preventive and corrective actions; * Risk Management; * Map access risks and segregate conflicting functions; * Implement GRC (Governance, Risk and Compliance) solutions, such as SAP GRC Access Control; * Perform risk simulations for new accesses or role changes; * Projects and Improvements; * Participate in SAP implementation, migration, or upgrade projects, ensuring security controls are applied; * Propose continuous improvements to the security environment; * Deliver training and awareness on SAP security best practices. **Requirements and Qualifications** * Degree in Information Technology (IT), Computer Science, Computer Engineering, Information Systems, Systems Analysis and Development, Information Security, or related fields. * Advanced English (mandatory); * Intermediate Spanish (desirable); * SAP Systems Administration (especially SAP Basis and SAP Security); * Identity and Access Management (IAM); * Access controls (roles, profiles, authorizations); * Knowledge of GRC (Governance, Risk and Compliance), especially SAP GRC Access Control; * Concepts of system compliance and auditing; * Strategic thinking and architectural vision; * Excellent analytical and problem-solving skills; * Ability to communicate effectively with technical and executive teams; * Proactivity and technical positioning; * Ability to influence and negotiate. **Additional Information** **Job Title:** Senior Information Security Analyst **Work Location:** Hybrid work model (3 days onsite per week), São Paulo/SP Volkswagen is part of Brazilians’ lives, hearts, and garages. For over 70 years, thousands of hands have built a history delivering increasingly innovative products and services that will transform urban mobility. Our Volkswagen aims to become increasingly **diverse, digital, agile, customer-centric, and carbon-neutral.** Our commitment is to deliver ever greater value to our customers, employees, partners, and society. We strive to offer extraordinary experiences and build the future in a more sustainable and surprising way. We encourage debate, new ideas, and solutions. We value teamwork and empathy—and together, we accelerate! We are the only automaker to receive the Top Employer certification every year since 2019—the most important international recognition of excellence in people management. Build the future with us—**Our Volkswagen**! **Volkswagen is committed to its ESG agenda** **Diversity & Inclusion** is a strategic pillar of our brand: **we value and respect differences.** We work toward building a healthy, diverse, inclusive, and collaborative workplace. **\#OurVW** is becoming increasingly human, diverse, and close to people. Volkswagen do Brasil is the **only automaker** signatory to the five main Diversity & Inclusion forums in Brazil: * Corporate Initiative for Racial Equality * Mulher 360 Movement * LGBTI+ Companies Forum * REIS (Corporate Network for Social Inclusion – for inclusion of persons with disabilities) * Generations and Future of Work Forum **Through these initiatives, VW further reinforces its commitment to promoting inclusion within the company.** **Stay tuned to Volkswagen do Brasil’s latest news on our social media channels. You might be the person we’re looking for to help shape this future with us? ;)** ***Attention!*** *Volkswagen do Brasil* ***does not request personal information, documents, or confidential data via WhatsApp****. All official communications regarding selection processes occur exclusively through our institutional channels.* *Official WhatsApp may be used as a contact facilitator solely for* ***scheduling interviews.*** *We use Gupy as our official recruitment platform. Emails sent to candidates are dispatched directly by Gupy or our corporate mailbox, always to the email addresses registered by the candidates themselves.* *To learn more about how we handle your personal data, please access Volkswagen’s Privacy Notice here and Gupy’s Privacy Notice,* *here**.* *If you have questions about data handling, please contact our privacy team via our* *Privacy and Data Protection Channel**.