Senior GRC Compliance Analyst

Accelerate your career. Join the organization that's driving the world's technology and shape the future.

Ingram Micro is a leading technology company for the global information technology ecosystem. With the ability to reach nearly 90% of the global population, we play a vital role in the worldwide IT sales channel, bringing products and services from technology manufacturers and cloud providers to business-to-business technology experts. Our market reach, diverse solutions and services portfolio, and digital platform Ingram Micro Xvantage set us apart. Learn more at www.ingrammicro.com

Come join our team where you'll make technology happen in surprising ways. Let's shape tomorrow - it'll be a fun journey!

Summary:

Seeking a highly skilled and experienced Senior GRC Compliance Analyst to join our team. The Senior GRC Compliance Analyst is responsible for evaluating segregation of duties (SOD) risks within business roles, ensuring compliance with governance, risk, and compliance (GRC) requirements, and supporting audit and risk mitigation efforts. The Senior GRC Compliance Analyst will collaborate with cross-functional teams to ensure robust security controls, mitigate risks, and enhance controls.

Your role:

A seasoned professional with extensive expertise in risk and controls and business processes, coupled with a profound understanding of access management. Your exceptional analytical and problem-solving skills are matched by your ability to communicate complex issues effectively to stakeholders at all levels. You have a proven track record in user access management, conducting comprehensive security access audits, and ensuring strict compliance with policies.

As a Senior GRC Compliance Analyst, you will leverage your technical expertise in access management and risk mitigation strategies to:

• Serve as a subject matter expert (SME) for SOD access risks
• Review and approve or reject SOD conflicts for new roles, updates to existing roles, and role assignments to users
• Manage to resolution SOD exceptions
• Ensure compliance with SOX and other regulatory frameworks
• Remediate risk violations, by reviewing usage to analyze if unnecessary access can be revoked and apply least privilege principles
• Collaborate with business stakeholders to understand requirements and potential exceptions
• Collaborate with SAP functional and security teams to update roles for different business needs
• Collaborate on the design of SAP security roles across multiple SAP platforms, including S/4HANA, ECC, and Fiori
• Participate in SAP security enhancement projects, ensuring timely delivery and alignment with business goals.

What you bring to the role:

• 5+ years of experience
• Strong understanding of controls principles, risks, and overall awareness of the corporate security posture
• General knowledge of business processes within Financial Close, Order-To-Cash, Purchase-To-Pay, Materials/Inventory Management
• Familiarity with regulatory requirements (SOX, etc.) and audit compliance processes
• Experience working on a cross-functional team and is aware of business priorities and organizational dynamics
• Ability to work with global teams, act independently and as part of a team
• Open-minded to new perspectives or ideas, or unusual solutions when appropriate
• Communicates in a clear and succinct manner
• Proven history of being able to lead design and process sessions

Preferred experience:

• Evaluating roles in ECC and S/4HANA within the SAP GRC Access Control module
• Analyzing and resolving access risk violations
• Preferred implementation experience across multiple modules of SAP ECC or SAP S/4HANA.

#LI-RT1

#LI-Hybrid

The typical base pay range for this role across the U.S. is USD $93,000.00 - $158,100.00 per year.

The ranges above reflect the potential annual base pay across the U.S. for all roles; the applicable base pay range will depend on the candidate's primary work location, pay grade, and variable compensation plan. Individual base pay within each range depends on various factors, in addition to primary work location, such as complexity and responsibility of role, job duties/requirements, and relevant experience and skills. Base pay ranges are reviewed and typically updated each year. Offers are made within the base pay range applicable at the time of hire. New hires starting base pay generally falls in the bottom half (between the minimum and midpoint) of a pay range.

At Ingram Micro certain roles are eligible for additional rewards, including merit increases, annual bonus or sales incentives and long-term incentives. These awards are allocated based on position level and individual performance. U.S.-based employees have access to healthcare benefits, paid time off, parental leave, a 401(k) plan and company match, short-term and long-term disability coverage, basic life insurance, and wellbeing benefits, among others.

This is not a complete listing of the job duties. It's a representation of the things you will be doing, and you may not perform all these duties.

Please be prepared to pass a drug test and successfully pass a pre-employment (post offer) background check.

Ingram Micro Inc. is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, veteran status, or any other protected category under applicable law.