SAP Security Analyst

Requisition Number: 76635   The company built on breakthroughs. ​   Join us.​                                                                                Corning is one of the world’s leading innovators in glass, ceramic, and materials science. From the depths of the ocean to the farthest reaches of space, our technologies push the boundaries of what’s possible.  ​     How do we do this? With our people. They break through limitations and expectations – not once in a career, but every day. They help move our company, and the world, forward. ​     ​At Corning, there are endless possibilities for making an impact. You can help connect the unconnected, drive the future of automobiles, transform at-home entertainment, and ensure the delivery of lifesaving medicines. And so much more.​       ​Come break through with us.      The global Information Technology (IT) Function is leading efforts to align IT and Business Strategy, leverage IT investments, and optimize end to end business processes and associated information integration technologies.  Through these efforts, IT helps to improve the competitive position of Corning's businesses through IT enabled processes.  IT also delivers Information Technology applications, infrastructure, and project services in a cost efficient manner to Corning worldwide.   Purpose of Position   The SAP Security Analyst is responsible for administering and maintaining user access within Corning's SAP ECC 6.0 environment. This role serves as a critical control point for ensuring that user access is provisioned, modified, and removed in accordance with Corning security policies, Segregation of Duties (SoD) requirements, internal controls, and Sarbanes-Oxley (SOX) compliance obligations. The analyst works closely with business users, managers, auditors, IT support teams, and security administrators to ensure appropriate access is granted based on business need while protecting Corning systems and data assets.   Key Responsibilities   1. SAP User Account Administration

Create, modify, lock, unlock, and delete SAP user accounts across ECC environments. Process access requests, transfers, and terminations in accordance with defined approval workflows. Ensure all user access is supported by appropriate approvals (e.g., supervisor and role owner approvals). Maintain accuracy and completeness of user master data. Support manual and automated provisioning processes (e.g., ZCAT, SU01).

2. SAP Role Assignment & Maintenance

Assign, modify, and remove SAP roles based on approved business requirements. Validate all access requests against approved SAP role design and authorization concept. Ensure access aligns to job function and business necessity. Support role rationalization and cleanup efforts to reduce unnecessary access. Enforce least-privilege access principles across all assignments.

3. Security Controls & Compliance

Execute Segregation of Duties (SoD) checks during role assignment and user provisioning. Utilize tools such as SecurityWeaver to identify, monitor, and mitigate SoD conflicts. Support periodic access reviews, including quarterly and annual certification activities. Ensure compliance with SAP security policies, internal controls, and audit requirements. Maintain documentation and audit evidence for access provisioning and changes.

4. Access Governance & Risk Management

Ensure all access requests follow defined processes and require appropriate approvals. Support management of critical (Cat3) roles, including approvals and monitoring. Assist in enforcing restrictions on high-risk transactions and system-wide access. Participate in enforcing policies governing privileged access and emergency access use.

5. Incident Support & Troubleshooting

Investigate and resolve user access issues and authorization errors.