Lead Analyst - Cyber Security and Controls

Job Title: Lead Analyst - Cyber Security and Controls

Job Summary The Senior lead Analyst SAP Controls, Controls & Compliance is responsible for the design, implementation, monitoring, and continuous improvement of SAP application controls and compliance processes. This role partners with IT, Finance, Internal Audit, and Risk Management to ensure SAP systems comply with regulatory requirements, internal control frameworks, and organizational policies. The position plays a key role in supporting audits, risk assessments, and system control optimization.

Key Responsibilities

SAP Controls & Compliance

• Design, implement, and maintain SAP application controls (automated and manual) to support SOX, internal controls over financial reporting (ICFR), and other regulatory requirements.x
• Ensure SAP systems comply with relevant frameworks and standards (e.g., SOX, COSO, ITGC, GxP, ISO, GDPRas applicable).
• Perform regular control assessments, gap analyses, and remediation planning for SAP environments (ECC, S/4HANA, BW, GRC, etc.).

SAP Security & GRC

• Support SAP GRC Access Control, Process Control, and Risk Management solutions, including role design, segregation of duties (SoD) analysis, and mitigation controls.
• Review and approve SAP roles, authorizations, and access changes in accordance with security and compliance standards.
• Monitor and analyse access risks, control violations, and compliance exceptions.

Audit & Risk Management

• Serve as a key liaison for internal and external auditors for SAP-related audits.
• Prepare audit documentation, evidence, and walkthroughs related to SAP controls and compliance.
• Track audit findings, support remediation activities, and ensure timely closure of issues.
• System Analysis & Process Improvement
• Analyse SAP business processes to identify control weaknesses and opportunities for automation or efficiency improvements.
• Collaborate with business and IT stakeholders to embed controls into system designs, enhancements, and upgrades.
• Support SAP projects, upgrades, and transformations (including S/4HANA) by ensuring controls are designed and tested appropriately.
• Governance & Documentation
• Develop and maintain SAP controls documentation, policies, procedures, and process flows.
• Provide guidance and training to business and IT teams on SAP controls, compliance requirements, and best practices.

Required Qualifications

• Bachelors degree in Information Systems, Computer Science, Accounting, Finance, or a related field.
• 9+ years of experience in SAP systems analysis, controls, compliance, or IT risk management.
• Strong hands-on experience with SAP application controls and IT general controls (ITGC).
• Experience supporting SOX compliance and audit activities in an SAP environment.
• Solid understanding of SAP modules (e.g., FI/CO, MM, SD, HCM) and cross-functional business processes.

Preferred Qualifications

• Experience with SAP GRC (Access Control, Process Control, Risk Management).
• Experience with SAP S/4HANA environments and migration projects.
• Professional certifications such as CISA, CPA, CIA, SAP Security, or SAP GRC certification.
• Experience in regulated industries (e.g., financial services, healthcare, pharmaceuticals, manufacturing).

Key Skills & Competencies

• Strong analytical and problem-solving skills.
• Deep understanding of internal controls, risk management, and compliance concepts.
• Ability to communicate complex technical and control concepts to non-technical stakeholders.
• Excellent documentation, organizational, and project management skills.
• Ability to work independently and collaboratively in a fast-paced environment.

Working Conditions

• Hybrid or remote work environment (depending on company policy).
• Occasional extended hours during audits, system implementations, or critical compliance initiatives.
• Cover UK business hours.

Nice to Have

• Experience with SAP GRC Access Control and Process Control.
• Exposure to SOC 1 / SOC 2 controls and reporting.
• Experience with Generative AI, control automation and continuous controls monitoring.
• Experience in pharmaceutical or life sciences environments.
• Certifications such as CISA, CPA, CIA, or SAP GRC.