: Lead Configuration Engineer, SAP Security
About the role:

Global Finance Technology is seeking an SAP Security Specialist to join our team. Our group is responsible to implement and support best in class Finance solutions for our Strategic Business Units: Corporate Finance, Global Risk Solutions (GRS), and Global Retail Markets (GRM). This role will play an active role in multiple in-flight SAP programs by driving adoption of leading security practices, and ensuring our SAP platforms are well governed, secured, and controlled.

  • Design, implement and support SAP security for S/4HANA, BI/BW, Analysis for Office, Fiori, ARIBA, SAP MDG, and SAP modules, including functional areas such as finance accounting (general ledger, fixed assets, accounts payable, cash management), controlling (cost allocations), and financial product sub-ledger (FPSL);

  • Analyze business processes such as record to report (RTR), and procure to pay (PTP), to inform SAP security role design and SAP controls design;

  • Support SAP control design and implementation with emphasis on business process and IT controls;

  • Build and design SAP security roles and administering users in SAP environments to secure data per business requirements, minimize data exposures, and restrict sensitive system administrative transactions;

  • Analyze Segregation of Duties (SoD) conflicts in SAP security roles using SAP GRC reports to eliminate or mitigate risk due to violation of SoD rules;

  • Utilize SAP automation tools, including e-CATT and LSMW, to create roles and users in SAP systems;

  • Analyze SAP ABAP code for custom reports, interfaces, conversions, enhancements, forms, and workflows to ensure sufficient security checks are embedded within code per business requirements;

  • Design, build, and configure SAP GRC tools, including SAP GRC Access Control: Access Request Management (ARM), Emergency Access Management (EAM), Access Risk Analysis (ARA), and Business Role Management (BRM);

  • Build test plans, execute security testing, and troubleshoot authorization issues via standard SAP security troubleshooting mechanisms;

  • Work closely with internal resources, and onshore / offshore external resources supporting our multiple SAP programs across Liberty

  • Work with internal stakeholders and external auditors to maintain up-to-date documentation for scoping, testing and remediation of SOX controls

  • Provide technical direction for existing and future applications, including internal and third-party developed business critical complex applications

  • Mentor and coach team members on security concepts


  • Bachelors in Business, Accounting, Finance or Information Systems

  • CISA, CISSP, CIA, PMP or other equivalent certification (preferred)

  • Previous Big 4, audit, and/or consulting experience (preferred)

  • Deep understanding of finance business processes and systems, and the ability to evaluate and determine the adequacy of controls by considering business, IT and infrastructure risks

  • Strong interpersonal skills and commitment to teamwork and partnerships

  • Minimum 10 years of combined experience in SAP Security Administration with strong knowledge of SAP security principles and concepts

  • SAP Application Security with hands-on technical experience on design, build, test, troubleshoot, deploy and administer security support of roles and groups for SAP ECC, SAP S/4HANA, Business Objects, Analysis for Office, Business Warehouse (BW), BPC, Solution Manager, ARIBA

  • Strong knowledge of SAP GRC
  • Appreciation for GDPR, data security, retention policies, schedule of authority and other compliance requirements to ensure to be process is compliant, monitoring is set up and will be effective (preferred)

*Please note the job level is flexible to grade 17-18 depending on candidate experience.

We value your hard work, integrity and commitment to positive change. In return for your service, its our privilege to offer you benefits and rewards that support your life and well-being. To learn more about our benefit offerings please visit: https://LMI.co/Benefits

At Liberty Mutual, we give motivated, accomplished professionals the opportunity to help us redefine what insurance means; to work for a global leader with a deep sense of humanity and a focus on improving and protecting everyday lives. We create an inspired, collaborative environment, where people can take ownership of their work; push breakthrough ideas; and feel confident that their contributions will be valued and their growth championed.

Were dedicated to doing the right thing for our employees, because we know that their fulfillment and success leads us to great places. Life. Happiness. Innovation. Impact. Advancement. Whatever their pursuit, talented people find their path at Liberty Mutual.


Employee Testimonials

Steve H

The biggest misconception about Tech at Liberty Mutual is that the technology shop here is outdated, boring and lacks opportunity. There is a strong push for failing fast, going agile, building microservices, using the latest technology tools and building a culture of innovation.

Matt W

I like working at Liberty Mutual because they treat their employees very well. Liberty understands the importance of a work-life balance. Because I have significant vacation time, and a flexible workplace schedule, I come to work happier every day. I don't feel the pressure that I may be fired if I need to take a few days off or can't make it into the office due an appointment.

Matt K

I immensely enjoy what I get to work on every day. Reading about machine learning and applying it in a way that has actual business value is great.

Cara B

We are working with top notch technologies and we get to live a little. We have the best of both worlds here.

Jeremiah T

The sense of community working here has been a lot different than I expected at a big company. Everyone is helpful and looking to make sure you have the resources you needed to grow in the company.