> Markdown version of [/jobs/ext/559400-secret-sap-security-analyst](https://www.wearedevelopers.com/jobs/ext/559400-secret-sap-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Secret - SAP Security Analyst

- **Company:** Insight Global
- **Location:** New York, NY, United States
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Systems, Identity and Access Management, Smartsuite, SAP (Applications), SAP GRC, SAP Security
- **Published:** June 14, 2026
- **Apply:** https://dejobs.org/x/x/4EA8988506B047149205B6290671222D/job/

## About the Role

Secret Cleared Clearance

 * Bachelor's degree in Information Systems, Cybersecurity, Business, or related field (or equivalent experience)

 * Experience supporting access management, controls, or compliance processes

 * Basic understanding of SoD (Segregation of Duties) and access risk concepts

 * Familiarity with GRC tools or case management systems

 * Strong attention to detail, organization, and communication skills

 * Ability to manage multiple cases and follow structured processes Preferred Qualifications

 * Experience with SAP GRC or access control frameworks

 * Exposure to audit support, SOX compliance, or risk management processes

 * Familiarity with identity and access management (IAM) concepts

 * Experience working in a regulated or client-facing environment

## Description

We are seeking an SAP Access & Controls Analyst to support Access Violation Management (AVM) activities within a structured governance and compliance framework. This role will focus on monitoring access violations, performing initial triage, supporting audit readiness, and tracking remediation efforts, ensuring adherence to internal controls and regulatory standards., * Monitor AVM queues and intake access violation cases (SoD conflicts, elevated access, policy exceptions)

 * Perform initial triage by validating request completeness and confirming user, role, and application details

 * Route cases to appropriate stakeholders (IT, application owners, business teams) for resolution

 * Collect and organize audit evidence including approvals, tickets, system logs, and screenshots

 * Track case status, remediation actions, and due dates within GRC or case management tools

 * Follow up with stakeholders to ensure timely closure of access violations

 * Support periodic activities such as access reviews, recertifications, metrics reporting, and control attestations

 * Escalate aging or high-risk issues in accordance with defined governance procedures

 * Maintain clear, accurate documentation aligned with audit and compliance standards


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [AI Pair Programming with GitHub Copilot at SAP: Looking Back, Looking Forward!](https://www.wearedevelopers.com/videos/1546-ai-pair-programming-with-github-copilot-at-sap-looking-back-looking-forward)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [Beyond GPT: Building Unified GenAI Platforms for the Enterprise of Tomorrow](https://www.wearedevelopers.com/videos/1525-beyond-gpt-building-unified-genai-platforms-for-the-enterprise-of-tomorrow)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Remote Driving on Plant Grounds with State-of-the-Art Cloud Technologies](https://www.wearedevelopers.com/videos/251-remote-driving-on-plant-grounds-with-state-of-the-art-cloud-technologies)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Data Analyst Salary in Switzerland](https://www.wearedevelopers.com/magazine/276-data-analyst-salary-in-switzerland)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Best Companies to Work For in Berlin: Top 14 Companies in 2023 ](https://www.wearedevelopers.com/magazine/188-best-companies-to-work-for-in-berlin-top-14-companies-in-2023)
- [Data Analyst Salary Germany](https://www.wearedevelopers.com/magazine/277-data-analyst-salary-germany)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)