Sr. Information Security Analyst ERP Systems

4 weeks ago


Irving, United States MCKESSON Full time
McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care.

What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you.

This position is for a Senior Information Security Analyst - supporting JD Edwards and SAP Security & Compliance. Primary responsibility is to provide security administration, security design, and security improvement initiatives.

This individual is responsible for the security design supporting McKesson business processes, and organizational structure in the most effective and efficient manner while ensuring compliance with all security and architectural mandates. This individual will work very closely with other teams including those within McKesson Shared Services, Cybersecurity, and the compliance and audit teams. Leadership and technical competence are a must.

Areas of Responsibilities include:
  • Act as a subject matter expert for security and compliance on JD Edwards E1 and SAP systems (ECC, S4, GRC, Access Control, Process Control, ETD and others)
  • Identifying gaps and improvements in the current security implementation
  • Expansion of security capabilities to take full advantage of the JDE and SAP security tools available
  • Updates and implementation of Master Data such as Roles/Entitlements, Role Owners, SOD rules changes, Security Configuration, threat patterns etc.
  • Provide subject matter expertise and oversight as needed for projects requiring security access and compliance support
  • Provide training to other security team members on security services activities and domain knowledge, so that service delivery and support can be shared


Support the ongoing security service for JDE and SAP and JDE Security through:
  • Meeting all defined service levels and defined performance objectives
  • Expand automated processes and workflows to deliver on business projects
  • Security Strategy Development and Management
  • Role design and implementation
  • Access provisioning and de-provisioning of users
  • Identity life cycle and user maintenance
  • Serve as a leader for implementing security architecture
  • Possess and able to convey a strategic vision and end state design for interrelated business and security processes (i.e., Access administration and Security controls, threats and vulnerabilities)
  • Coordinate all security designs with various Business Units and Cybersecurity teams
  • Analyze and implement security requirements
  • Recommends and develops security measures to protect information against unauthorized modification or loss
  • Works closely with both technical and functional teams to ensure the success of the overall security solution
  • Serve as Security subject matter expert and provide advisory and consulting services as needed
  • Strong ability to collaborate with application teams, administration teams, and business partners to design and implement technical security solutions on JDE, SAP, and associated bolt-on applications
  • Experience with integration of SAP and JD Edwards security administration with Identity Management platforms is a plus


Support of SOX Compliance through:
  • Adherence to, and delivery of SOX controls and procedures
  • Support of compliance initiatives, and audits both internal and external
  • Support of recurring security assessments and access reviews


Support the ongoing improvement of Security & Compliance area:
  • Providing ideas for improvement initiatives
  • Self-managing through improvement projects and providing clear measurable results


Minimum Requirements

7+ years relevant security administration experience

Critical Skills
  • At least 2 full implementations of security on SAP and JD Edwards systems
  • Experience with different scripting / programming languages to expand automation and capabilities
  • Expertise in:
  • OWM security and menu
  • JDE E1 security design and user maintenance
  • At least 3 years experience in SAP GRC Access Control & Process Control
  • At least 3 years experience with SAP ETD administration and maintenance; implementation of Threat Patterns including design, alerts, fraud detection and user Behavioral analysis, and response planning
  • Cloud applications and Bus. Objects
  • Emergency Access and Firefighter management
  • SOD Risk Management & Configuration
  • Proficient in IT general controls, SOC and SOX requirements as they relate to security administration
  • Proficient in ERP security principles, technologies and solutions, delivering functionality and
    services on time, on budget and to meet business needs
  • Audit testing & evidence collection
  • HANA DB Security
  • SAP NextGen S4 Hana
  • Progressively responsible experience in designing, implementing, and maintaining application Security
  • Deep knowledge of application security, capabilities, and limitations
  • Proficient in reducing the attack surface and hardening ERP system security
  • Proficient in ERP security principles, technologies, and solutions, delivering functionality or services on time, on budget and to meet business needs
  • Technical knowledge of security architecture and role-based authorization models
  • Proven success on multiple, enterprise-scale implementation projects or services


Additional Knowledge & Skills
  • Strong, proven problem-solving skills and ability to identify, analyze, and resolve problems, driving solutions to completion
  • Proficient in analyzing requirements, resource estimation, and allocation
  • Excellent in team leadership and team-based problem-solving skills
  • Excellent interpersonal and oral, written communication skills
  • Ability to translate complex technical information across all levels of the organization
  • Ability to self-manage on tasks and mini-projects or improvement efforts
  • Strong facilitation skills and a clear ability to build strong relationships with business partners at all levels
  • Demonstrated ability to translate business drivers and priorities into security design, policies, and procedures
  • Results driven, and able to collaborate with management and colleagues to share the responsibilities for achieving an end-to-end solution for customers
  • Strong attention to detail which ensures that customer requirements are met and that a high quality standard is achieved
  • Provide technical perspectives to other architecture functions to ensure that solutions effectively leverage infrastructure capabilities and services and integrate with them
  • Must have excellent initiative, organization, and customer service skills


We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please

Our Base Pay Range for this position

$116,700 - $194,500

McKesson is an Equal Opportunity Employer

McKesson provides equal employment opportunities to applicants and employees and is committed to a diverse and inclusive environment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age or genetic information. For additional information on McKesson's full Equal Employment Opportunity policies, visit our page.

Join us at McKesson Sr. Information Security Analyst ERP Systems (SAP and JD Edwards)
  • Systems Analyst

    2 weeks ago


    Irving, United States Cinter Career Full time

    Our client is seeking a Systems Analyst / Support Engineer - SAP/ERP in Irving, TX. Client: Japanese IT company Working Location: Irving, TX 75063 Salary Range: DOE + Full Benefit / 401K Key Responsibilities: This position is responsible for SAP ERP Application and Implementation Support. Investigates issues and analyze, create, modify, and maintain SAP...


  • Irving, Texas, United States MORS Full time

    Position Overview: The Information Security Analyst II plays a crucial role in overseeing and executing the IT Governance, Risk, and Compliance (GRC) initiatives within the organization. This role collaborates extensively with business partners and junior cybersecurity analysts during contract discussions and is responsible for conducting Vendor Risk...


  • Irving, Texas, United States 00002 Citibank, N.A. Full time

    About Citibank, N.A.: As a forward-thinking financial institution, Citibank is dedicated to creating economic value that is responsible and aligned with our clients' best interests. Our Enterprise Operations & Technology teams are tasked with a mission that parallels any leading technology firm. Our technological solutions form the backbone of our...


  • Irving, Texas, United States Christus Health Full time

    Overview:The ERP Supply Chain division is dedicated to providing comprehensive support for all domestic healthcare facilities within CHRISTUS Health. A profound knowledge of ERP systems and associated third-party applications is essential for the team's success. This role requires a thorough understanding of ERP capabilities, design, and workflows tailored...


  • Irving, Texas, United States Christus Health Full time

    Overview:The ERP Supply Chain division is dedicated to providing comprehensive support for all domestic healthcare facilities under CHRISTUS Health. A profound comprehension of ERP systems and associated third-party applications is essential for the success of this team. This role demands a thorough understanding of ERP functionalities, architecture, and...


  • Irving, Texas, United States Christus Health Full time

    Overview:The ERP Supply Chain division is dedicated to providing continuous support for all domestic healthcare facilities within CHRISTUS Health. A comprehensive understanding of ERP systems and associated third-party applications is essential for the success of this role. This includes a thorough grasp of ERP capabilities, design, and workflows as they...


  • Irving, Texas, United States Christus Health Full time

    Overview:The ERP Supply Chain division offers round-the-clock assistance for all domestic healthcare facilities within CHRISTUS Health. A comprehensive knowledge of ERP systems and associated third-party applications is essential for the team's success. This role demands a thorough grasp of ERP capabilities, design, and workflows as they pertain to both...


  • Irving, Texas, United States Christus Health Full time

    Overview:The ERP Supply Chain division is dedicated to providing comprehensive support for all domestic healthcare facilities within CHRISTUS Health. A profound knowledge of ERP systems and their associated third-party applications is essential for the team's success. This role requires a thorough comprehension of ERP capabilities, architecture, and...


  • Irving, Texas, United States Christus Health Full time

    Overview:The ERP Supply Chain division offers continuous support for various healthcare facilities under CHRISTUS Health. A comprehensive grasp of ERP systems and associated third-party applications is essential for the team's success. This role demands a thorough understanding of ERP capabilities, architecture, and workflows tailored to meet the...


  • Irving, Texas, United States Citigroup Inc Full time

    About the RoleCitigroup Inc., a leading global financial institution, is seeking a highly skilled Senior Information Security Analyst to join its team. As a key member of the organization, you will play a critical role in ensuring the safety and security of the company's clients', employees', and proprietary data.Key Responsibilities:Drive efforts to...


  • Irving, United States Envoy Air Full time

    Overview: Who we are: Would you like to work for a stable, secure, and fast-growing airline where you will be stimulated, challenged, and have the opportunity to develop your career? If so, read on! Come and work with the best of the best at Envoy Air where you will join a team committed to providing outstanding service. We offer: Amazing employee flight...

  • Sr. IT Analyst

    4 weeks ago


    Irving, United States Revolution Technologies Full time

    Position Title: Sr. IT Analyst (Labelling & Packaging)Location: Irving, TXInterview Mode: MS Teams Video Call Approximate Duration: 12+ monthsDomain: Pharmaceutical Providing IT Business Analysis and Project Management & Leadership for assigned Business-IT projects.Active member of the global teamsSupport & lead current IT Projects as Business Analyst and/or...

  • Sr. IT Analyst

    4 weeks ago


    Irving, United States Revolution Technologies Full time

    Position Title: Sr. IT Analyst (Labelling & Packaging)Location: Irving, TXInterview Mode: MS Teams Video Call Approximate Duration: 12+ monthsDomain: Pharmaceutical Providing IT Business Analysis and Project Management & Leadership for assigned Business-IT projects.Active member of the global teamsSupport & lead current IT Projects as Business Analyst and/or...


  • Irving, United States GM Financial Full time

    Overview Opportunity to work in a hybrid model: Potential to work 4 days onsite and 1 day remote Why GMF Cybersecurity? Our Cybersecurity team is tasked with the security engineering, regulatory response, third party risk, and incident response capabilities necessary to secure GM Financial, the captive auto finance subsidiary of General Motors. Reporting...


  • Irving, United States MCKESSON Full time

    McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care.What you do at McKesson matters. We foster a culture...


  • Irving, Texas, United States GM Financial Full time

    Overview:Opportunity to engage in a hybrid work model: Potential to work 4 days onsite and 1 day remotely.Why Choose GMF Cybersecurity?The Cybersecurity division is responsible for security engineering, regulatory compliance, third-party risk management, and incident response capabilities essential for safeguarding GM Financial, the captive auto finance...


  • Irving, Texas, United States GM Financial Full time

    Overview:Join us in a hybrid work environment: Potential to work 4 days onsite and 1 day remotely.Why GM Financial Cybersecurity?Our Cybersecurity division is responsible for security engineering, regulatory compliance, third-party risk management, and incident response strategies essential for safeguarding GM Financial, the auto finance subsidiary of...

  • Sr. Financial Analyst

    4 weeks ago


    Irving, United States MCKESSON Full time

    McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care.What you do at McKesson matters. We foster a culture...

  • Sr. FP&A Analyst

    4 weeks ago


    Irving, United States Trend Micro Full time

    Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital information. Fueled by decades of security expertise, world-leading global threat research and intelligence, and continuous innovation, our cybersecurity platform protects hundreds of thousands of organizations and millions of individuals across clouds, networks,...

  • Sr. Security Engineer

    3 months ago


    Irving, United States Hilltop Holdings Full time

    Hilltop Holdings Inc. (NYSE:HTH) is a Texas-based diversified financial holding company specializing in banking, mortgage origination, and financial advisory through its wholly owned subsidiaries, PlainsCapital Bank, PrimeLending, and HilltopSecurities.Hilltop Holdings is looking for a Sr. Security Engineer who will be responsible for designing and...