Applications Security Analyst

POSITION PURPOSE

The Application Security Analyst supports the application security function within the Digital Applications & Product Delivery organization, helping to protect BAC’s enterprise application estate through sound access governance, security administration, and support of security and compliance activities.

SAP S/4HANA and the wider SAP landscape are the primary focus and the largest share of the work, but the role supports application security across the wider estate, including non-SAP business applications.

This is a developing role suited to someone early in an application security career.

Working under the guidance of senior application security and business analysis colleagues, the analyst carries out the day-to-day tasks that keep application access controlled and auditable - building and maintaining SAP roles, processing access, supporting segregation of duties and access reviews, and helping prepare audit evidence - while building the deeper expertise to take on more complex security work overtime.

The successful candidate combines a foundational understanding of SAP authorizations and security concepts with strong attention to detail, a disciplined and control-minded approach, and the curiosity to grow into a broader application security specialist.

PRINCIPAL ACCOUNTABILITIES

SAP Roles & Authorizations

· Build, maintain, and test SAP roles, profiles, and authorizations in line with design specifications and established security standards, under the guidance of senior colleagues.

· Troubleshoot authorization errors, analyzing missing objects and values and proposing appropriate role changes for review.

· Support role redesign, cleanup, and remediation activities across the SAP landscape.

· Maintain accurate documentation of roles, authorization designs, and changes to support transparency and audit.

Access Management & Provisioning

· Process user access requests across SAP and, where required, non-SAP applications, strictly in line with approved access request and approval workflows.

· Create, amend, and deactivate user accounts and access accurately and within agreed service levels.

· Escalate, without exception, any request that appears to breach segregation of duties, approval policy, or established controls.

· Maintain complete and accurate records of access changes to support internal and external audit requirements.

Segregation of Duties, Reviews & Compliance Support

· Support segregation of duties (SoD) analysis using SAP GRC or equivalent tooling, preparing reports, identifying conflicts, and tracking remediation under senior guidance.

· Support periodic user access reviews and role recertification, preparing extracts, coordinating with reviewers, chasing responses, and recording outcomes.

· Help prepare evidence and respond to internal and external audit requests relating to application access and security controls (for example SOX ITGC).

· Help maintain the SoD rule set and contro...