Share this Job

Governance Risk and Compliance (GRC) System Administrator

Apply now »

Date: Oct 16, 2021

Location: Budapest, HU, 1117

Company: Corning

Requisition Number: 48910

 

Corning is one of the world’s leading innovators in materials science. For more than 160 years, Corning has applied its unparalleled expertise in specialty glass, ceramics, and optical physics to develop products that have created new industries and transformed people’s lives.

Corning succeeds through sustained investment in R&D, a unique combination of material and process innovation, and close collaboration with customers to solve tough technology challenges.

The Governance Risk and Compliance (GRC) System Administrator will be the Risk & Control Center of Excellence (RCCOE) key technical subject matter expert (SME) for the implementation and administration of Pathlock GRC platform. The role will also serve as a back-up resource for SAP Security Analyst.

  • This role will participate in the design, build and test plan for the S/4 HANA security roles in Corning’s Security:
    • Participate in / facilitate Corning participation in requirements gathering workshops
    • Support software integration architecture design and implementation, as needed
    • Learn Pathlock GRC software modules which can monitor configured controls and automate IT General Controls and participate in development of strategy and roadmap for Transaction Monitoring (TM) in these areas
    • Assist with all other aspects of Pathlock design, build and deployment, as appropriate, to develop expert knowledge needed for this role
    • Provide test data (e.g., SOD violation transactions) in target development and/or quality assurance (QA) systems for proper TM unit and user acceptance testing;
    • Support training on Pathlock end user training
    • Responsible for day-to-day Pathlock system maintenance
    • Ensure controls configured in the Greenlight TM module are reporting as required
    • Implement new controls to reflect prioritized business risks/concerns

Qualifications:

  • Strong functional/ technical and analytical skills as well as attention to detail required for managing this complex area of SAP S/4 HANA and Fiori security administration
  • Can influence without authority and engage effectively with stakeholders across the organization.

Required Education and Experience:

  • Bachelor’s degree in relevant discipline (e.g., Accounting, Information Systems, Finance, Economics or Business)
  • 3+ years’ relevant experience in SAP Security Administration, Consulting
  • Experience working with multiple groups and cross functional teams

Required Knowledge & Skills:

  • Understanding of key risk management concepts
  • Knowledge of SAP solution design and key elements of SAP role security architectures
  • Knowledge and experience with SAP security in S/4HANA with embedded Fiori
  • Technical and functional knowledge of access management tools (e.g. Greenlight, SAP Access Control, Security Weaver) processes, roles, and responsibilities
  • Experience leading a workstream within complex SAP projects working with cross-functional teams of Business, IT, and Compliance
  • Experience with one or more commonly used internal control frameworks, risk frameworks and compliance methodologies:
    • COSO
    • Sarbanes-Oxley (SOX) compliance programs
    • AICPA Trust Criteria/ SOC Reports, NIST
    • CMMC
    • COBIT
    • General Data Protection Regulation (GDPR)

Desired:

  • Skills with at least one business processes and controls operation or audit, including opportunities for automation and standardization (Six Sigma, LEAN, DMAIC Belt Certifications a plus)
  • Strong business acumen
  • Strong analytical and strategic thinking abilities
  • Effective organization and planning skills with the ability to handle changing priorities
  • Demonstrated advanced skills in Microsoft Excel, Access and SharePoint
  • Excellent communications, interpersonal and influencing skills
  • Execution mindset
  • Customer focus
  • Ability to work in a matrix environment
  • Cross-cultural sensitivity