Apply on Employer Site

GALLO · 1 day ago

SAP Security Analyst

Modesto, CA

Full-time

Hybrid

Mid, Senior Level

$40/hr - $60/hr

3+ years exp

GALLO is a family-owned company with a rich 90+ year legacy in the alcohol beverage industry. They are seeking an experienced SAP Security Analyst to shape and operate SAP security, manage access controls, and lead various security initiatives while collaborating closely with other departments to ensure compliance and security effectiveness.

Wine & Spirits

Growth Opportunities

No H1B

Hiring Manager

Jennie Johnson

Responsibilities

Shape and operate SAP security across on‑premises and cloud platforms (S/4HANA, Fiori, GRC, EWM, Ariba, BTP, BRF+, IAS, IBP, Solution Manager)

Design and develop roles

Enforce segregation of duties

Manage access controls

Sustain ITGCs and compliance

Lead access provisioning

Testing

Audit readiness

Incident response

Continuous improvement efforts

Document processes and train users

Collaborate closely with Enterprise Architecture, IAM, and Cybersecurity

Drive projects from requirements through implementation and production support

Coordinate testing with business and technical stakeholders

Support transitions from project delivery to stable operations

Monitor emerging SAP security trends

Recommend practical enhancements that balance risk, usability, and business needs

Role design and debugging

Risk mitigation

Audit management and remediation

Creating clear runbooks and training materials

Investigating security incidents with a focus on timely, effective resolution

Qualification

SAP SecurityInformation SecurityAccess ControlsVulnerability AssessmentProfessional CertificationsData SecurityApplication SecurityAnalytical SkillsTeam BuildingCommunication SkillsNegotiation Skills

Required

Bachelor's degree in Computer Science, Business Administration, MIS, Mathematics, or Engineering, plus 3 years of experience with information security, System Administration or equivalent with increasing levels of responsibility; OR High School Diploma or State-issued equivalency certificate plus 7 years of experience in Information Security, System Administration or equivalent with increasing levels of responsibility

Demonstrated technical expertise in IT systems

Strong analytical ability, communication skills and the ability to work effectively with clients/customers, IT management and staff, vendors, consultants, and auditors

Required to travel to company offices, sites, and/or meeting locations for onboarding, training, meetings, and events for development, department needs, and business delivery up to 5% of the time, with or without reasonable accommodation

Required to be 18 years or older

Preferred

Bachelor's degree in Computer Science, Business Administration, MIS, Mathematics, or Engineering, plus 5 years of experience with data security reflecting increasing levels of responsibility

Extensive professional experience in management and deployment of security tools

Extensive knowledge of networking, databases, systems and/or Web operations

In-depth knowledge of data security and protection techniques

In-depth knowledge of application security and application security best practices

Professional experience in the following: Vulnerability and configuration assessment tools, IDS/IPS tools, logging and monitoring tools (SIM), DLP, audit & assessment (GRC tools), data encryption and network or application firewalls, enterprise monitoring (SIEM)

Familiarity with mobile, SaaS & Cloud technologies

Professional certifications (CISSP, ISACA, GSEC, others)

Knowledge of industry frameworks and best practices (ISO, NIST, CSC, others)

Knowledge of regulatory requirements and compliance (PCI, SOX, HIPAA, GLBA)

Experience managing customer expectations

Experience identifying short and long-term issues and providing solutions

Knowledge of other business areas

Demonstrates strong team building skills, adapts to unexpected changes, and acts as a strong role model

Demonstrates strong negotiation and conflict resolution skill

Broad knowledge of principles, practices, and procedures in this field of specialization

Experience completing assignments that are broad in nature, usually requiring originality and ingenuity, with appreciable latitude for unreviewed action or decision