Sr Analyst SAP IT Internal Controls (Agriculture)

Job Summary

Medline is seeking a highly motivated and experienced Senior SAP IT Internal Controls Analyst to grow Medline's IT Internal Controls program. This person will play a key role in ensuring our IT systems and processes comply with regulations and industry best practices, with a focus on Medline's SAP systems and access management. A successful candidate will have experience designing, documenting, testing, and remediating SAP and access management controls for large public companies.

Job Description

MAJOR RESPONSIBILITIES

• Support all aspects of IT compliance with internal control requirements, including designing, implementing, documenting, and testing IT controls and processes.

• Collaborate with IT, finance, and other cross-functional teams to identify and document key IT controls and processes that are subject to compliance, including SAP.

• Create and maintain IT controls environment documentation (e.g., process flows, narratives, control matrices, role security matrices, etc.) by conducting walkthroughs, identifying relevant information, and documenting key details.

• Assess the impact of new business initiatives, system implementations, and IT policy changes on the IT internal controls environment.  Provide guidance and training to support compliance.

• Conduct regular assessments and audits of IT internal controls to ensure compliance with requirements and identify any potential compliance risks or issues, with a focus on access management and SAP.

• Identify control gaps, evaluate risk, and develop corrective action plans to address deficiencies, enabling sustainable control processes.

• Develop and implement IT compliance policies, procedures, and guidelines to ensure adherence to regulations and industry standards.

• Support the timely delivery of necessary documentation and evidence to internal and external auditors.

• Support the selection, configuration, and adoption of GRC tools to facilitate IT internal controls initiatives.

• Execute or facilitate the execution of IT internal controls activities, where applicable.

• Suggest efficiencies and continuous improvement opportunities related to the IT internal controls program, especially with respect to access management and SAP.

• Provide training on IT internal controls, as needed.

• Collaborate with cross-functional teams to develop, implement, operationalize, and remediate IT internal controls. 

• Monitor and report on control effectiveness and other program key performance indicators via metrics and dashboards. 

• Stay current on changes to the IT internal controls regulatory environment and their impact to Medline.

 

MINIMUM JOB REQUIREMENTS

Education

• Bachelor's degree in Information Technology, Information Security, Computer Science, Business, Accounting, or related field, or equivalent work experience.

Work Experience

• Minimum of 3 years of experience in IT internal controls, SAP security, external audit, internal audit, or a related role.
• Hands-on experience designing, implementing, executing, and/or testing SAP IT general controls (i.e., SDLC, change management, access management, and interfaces/integrations) in a large, complex IT environment.

Knowledge / Skills / Abilities

• Familiarity with using modern GRC tools to effectively manage IT internal control execution and testing
• In-depth understanding of IT General Controls (i.e., Change Management, Access, IT Operations), SDLC, and application controls especially as they relate to SAP
• Knowledge of SOX audit scoping, testing, and sampling methodologies
• Experience developing and maintaining IT internal control documentation (e.g., risk control matrices, narratives, process flow diagrams, etc.)
• Familiarity with SOC 1 report reviews and documenting complementary user entity controls
• Familiarity with SAP user role assignments, role changes, emergency access management processes and controls, and user role reviews
• Knowledgeable about managing SAP segregation of duties rulesets and mitigating segregation of duties violations
• Knowledgeable about key SAP configurations and migration practices
• Strong written and verbal skills, including a demonstrated ability to translate complex or technical information into concepts that are easily understood
• Strong analytical, problem solving, and critical thinking skills, including the ability to anticipate issues and to design appropriate solutions
• Detail and deadline oriented, with the ability to tackle multiple tasks and priorities simultaneously
• Proficient with Microsoft Office Suite (Word, Excel, PowerPoint, SharePoint, Visio)

PREFERRED JOB REQUIREMENTS

Certification / Licensure

• CISA, CISSP, CIA, CPA, CRISC, or CISM

Work Experience

• Experience configuring and deploying SAP GRC tools (e.g., SAP GRC, Pathlock)
• Experience using AuditBoard SOXHUB module or other similar modern GRC tools
• Experience auditing or consulting for a Big 4 firm
• Advanced skills in Excel and data analytical tools

Medline Industries, LP, and its subsidiaries, offer a competitive total rewards package, continuing education & training, and tremendous potential with a growing worldwide organization.

The anticipated salary range for this position:

$96,200.00 - $144,560.00 Annual

The actual salary will vary based on applicant's location, education, experience, skills, and abilities. This role is bonus and/or incentive eligible. Medline will not pay less than the applicable minimum wage or salary threshold.

Our benefit package includes health insurance, life and disability, 401(k) contributions, paid time off, etc., for employees working 30 or more hours per week on average. For a more comprehensive list of our benefits please click here. For roles where employees work less than 30 hours per week, benefits include 401(k) contributions as well as access to the Employee Assistance Program, Employee Resource Groups and the Employee Service Corp.

We're dedicated to creating a Medline where everyone feels they belong and can grow their career. We strive to do this by seeking diversity in all forms, acting inclusively, and ensuring that people have tools and resources to perform at their best. Explore our Belonging page here.

Medline Industries, LP is an equal opportunity employer. Medline evaluates qualified individuals without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, age, disability, neurodivergence, protected veteran status, marital or family status, caregiver responsibilities, genetic information, or any other characteristic protected by applicable federal, state, or local laws.