SAP Security Analyst

The SAP Security Analyst is responsible for administering and maintaining user access within Corning’s SAP ECC 6.0 environment. This role serves as a critical control point for ensuring that user access is provisioned, modified, and removed in accordance with Corning security policies, Segregation of Duties (SoD) requirements, internal controls, and Sarbanes-Oxley (SOX) compliance obligations.

The analyst works closely with business users, managers, auditors, IT support teams, and security administrators to ensure appropriate access is granted based on business need while protecting Corning systems and data assets., 1. SAP User Account Administration

• Create, modify, lock, unlock, and delete SAP user accounts across ECC environments.
• Process access requests, transfers, and terminations in accordance with defined approval workflows.
• Ensure all user access is supported by appropriate approvals (e.g., supervisor and role owner approvals).
• Maintain accuracy and completeness of user master data.
• Support manual and automated provisioning processes (e.g., ZCAT, SU01).

1. SAP Role Assignment & Maintenance * Assign, modify, and remove SAP roles based on approved business requirements. * Validate all access requests against approved SAP role design and authorization concept. * Ensure access aligns to job function and business necessity. * Support role rationalization and cleanup efforts to reduce unnecessary access. * Enforce least-privilege access principles across all assignments.

2. Security Controls & Compliance * Execute Segregation of Duties (SoD) checks during role assignment and user provisioning. * Utilize tools such as SecurityWeaver to identify, monitor, and mitigate SoD conflicts. * Support periodic access reviews, including quarterly and annual certification activities. * Ensure compliance with SAP security policies, internal controls, and audit requirements. * Maintain documentation and audit evidence for access provisioning and changes.

3. Access Governance & Risk Management * Ensure all access requests follow defined processes and require appropriate approvals. * Support management of critical (Cat3) roles, including approvals and monitoring. * Assist in enforcing restrictions on high-risk transactions and system-wide access. * Participate in enforcing policies governing privileged access and emergency access use.

4. Incident Support & Troubleshooting * Investigate and resolve user access issues and authorization errors. * Support business users with access-related inquiries. * Coordinate with functional teams to resolve role-related issues.

5. Operational Support * Process ServiceNow SAP security tickets within defined SLAs. * Support onboarding, offboarding, and organizational changes impacting access. * Participate in system refreshes, migrations, and project cutover support.

6. Documentation & Continuous Improvement * Maintain and update SAP security work instructions, procedures, and documentation. * Identify opportunities to improve efficiency, automation, and control effectiveness. * Support continuous improvement initiatives within SAP security processes.

• Bachelor’s degree in information systems, Computer Science, Business, Accounting, Cybersecurity, or a related discipline desired.
• Equivalent combination of education and experience will be considered.
• 2-5 years of experience supporting SAP security administration (or related system) preferred.
• Experience with SAP ECC 6.0 user and role management (or related system) desired.
• Experience working with IT service management tools such as ServiceNow desired.
• Experience supporting compliance-driven environments.
• Understanding of SAP authorization concepts.
• Knowledge of user provisioning and deprovisioning processes.
• Knowledge of Segregation of Duties (SoD) concepts.
• Understanding of internal controls and audit requirements.
• Strong analytical and problem-solving skills.
• Strong attention to detail and commitment to data accuracy.
• Ability to manage multiple priorities and meet deadlines.
• Strong written and verbal communication skills.
• Ability to work effectively with business and technical stakeholders globally.

Preferred Qualifications

• Experience with Security Weaver or comparable SAP security governance tools.
• Experience supporting SOX-regulated environments.
• Experience with SAP GRC Access Control.
• Familiarity with Identity and Access Management (IAM) solutions.
• Experience supporting global SAP environments.
• Knowledge of SAP S/4HANA security concepts.
• Security-related certifications such as SAP Security, CISSP, CISM, or comparable credentials.

The range for this position is $63,456.00 - $87,252.00 assuming full time status. Starting pay for the successful applicant is dependent on a variety of job-related factors, including but not limited to geographic location, market demands, experience, training, and education.

**A job that shapes a life. **

**Corning offers you the total package. **

Your well-being is our priority. Our compensation and benefits package supports your health and wellness, financial aspirations, and career from day one.

• Company-wide bonuses and long-term incentives align with key business results and ensure you are rewarded when the company performs well. When Corning wins, we all win.
• As part of our commitment to your financial well-being, we provide a 100% company-paid pension benefit with fixed contributions that grow throughout your career. Combined with matching contributions to your 401(k) savings plan, Corning’s total contributions to your retirement accounts can reach between 7% and 12% of your pay, depending on your age and years of service.
• Our health and well-being benefits include medical, dental, vision, paid parental leave, family building support, fitness, company-paid life insurance, disability, disease management programs, paid time off, and an Employee Assistance Program (EAP) to support you and your family.
• Getting paid for our work is important, but feeling appreciated and recognized for those contributions motivates us much more. That’s why Corning offers a recognition program to celebrate successes and reward colleagues who make exceptional contributions.

Corning is one of the world’s leading innovators in glass, ceramic, and materials science. From the depths of the ocean to the farthest reaches of space, our technologies push the boundaries of what’s possible.

How do we do this? With our people. They break through limitations and expectations - not once in a career, but every day. They help move our company, and the world, forward.

At Corning, there are endless possibilities for making an impact. You can help connect the unconnected, drive the future of automobiles, transform at-home entertainment, and ensure the delivery of lifesaving medicines. And so much more.

** Come break through with us. **

The global Information Technology (IT) Function is leading efforts to align IT and Business Strategy, leverage IT investments, and optimize end to end business processes and associated information integration technologies. Through these efforts, IT helps to improve the competitive position of Corning’s businesses through IT enabled processes. IT also delivers Information Technology applications, infrastructure, and project services in a cost efficient manner to Corning worldwide.