Lead IT Analyst

As the Lead Business Systems Analyst here at Honeywell, you will be responsible for leading the analysis, design, and implementation of business systems. Collaborating with cross-functional teams, you will gather and document business requirements from stakeholders and develop technology solutions to meet those requirements. Your role will involve performing system testing and ensuring quality assurance to deliver reliable and efficient business systems. You will provide technical guidance and support to the team, leveraging your expertise and experience to drive successful system implementations.

In this role, you will have a significant impact on the organization by leveraging your expertise in business systems analysis to identify opportunities for process improvement, streamline workflows, and optimize system functionality. You will collaborate with cross-functional teams to gather requirements, design solutions, and implement best practices.

Key Responsibilities:

• Understanding of SAP security design concepts for ERP-ECC, S4 HANA, BTP and other SAP products like BI/BO, Portal, SRM, CRM, APO, SolMan, Fiori, PI/PO, EWM, Etc.
• S4 authorization design – Lead Role design, enforce SoD compliance, perform risk analysis, and define strategic process for secure S/4HANA implementation & migration, upgrades, and operational support.
• S4 Security Strategy & Architecture: Architect, configure, and maintain user roles and authorizations across SAP S/4HANA, Fiori (catalogs/groups) and design GRC access management workflow.
• GRC Integration: Design and implement SAP GRC Access Control (ARA, ARM, BRM, EAM) and ensure access assignment including remediate Segregation of Duties (SoD) conflicts.
  • Access Control (AC) Implementation: Configure all four AC sub-modules
    • Access Risk Analysis (ARA).
    • Access Request Management (ARM).
    • Emergency Access Management (EAM).
    • Business Role Management (BRM)
  • Process Control (PC) Configuration: Design and set up Continuous Control Monitoring (CCM) 
    • MSMP & BRF+ Design
    • Defining process global settings, initiators, paths, and stages.
    • Mapping agent rules to determine appropriate approvers for each stage.
    • Integrating BRF+ decision tables to handle complex routing logic.
    • Strong understanding of UX to Design user friendly access request forms with optimal workflow design.
• BTP Security : Design and implement comprehensive security architectures for SAP BTP global accounts, subaccounts, and services, ensuring audit guidelines are followed and secure development life cycles.
• SAP Cloud Identity Access Governance (IAG)
  • SAP IAG Configuration: Experience in bridging IAG with GRC and non-ABAP systems.
  • Cloud Security: Knowledge of BTP security, IAS/IPS integration, and SAML/OAuth2.
  • Regulatory Compliance: Understanding of ITAR, SOX, and audit controls.
• Secure Authentication Knowledge
  • Proficiency in SAML, OAuth, and Single Sign-On (SSO) integrations
• Excellent oral and written communication skills 
• Ability to interact with upstream and downstream Stakeholders in a global environment 
• Strong analytical thinking, problem-solving and troubleshooting skills with documentation and design skills 
• Ability to work independently as well as in a team environment, and prioritize multiple project activities 
• Lead and oversee GRC implementation projects, including requirement gathering, design, and testing phases.
• Facilitate training sessions and workshops on SAP security best practices for internal teams.
• Manage risk assessments and prepare necessary documentation for compliance reviews.

Key Responsibilities:

• Understanding of SAP security design concepts for ERP-ECC, S4 HANA, BTP and other SAP products like BI/BO, Portal, SRM, CRM, APO, SolMan, Fiori, PI/PO, EWM, Etc.
• S4 authorization design – Lead Role design, enforce SoD compliance, perform risk analysis, and define strategic process for secure S/4HANA implementation & migration, upgrades, and operational support.
• S4 Security Strategy & Architecture: Architect, configure, and maintain user roles and authorizations across SAP S/4HANA, Fiori (catalogs/groups) and design GRC access management workflow.
• GRC Integration: Design and implement SAP GRC Access Control (ARA, ARM, BRM, EAM) and ensure access assignment including remediate Segregation of Duties (SoD) conflicts.
  • Access Control (AC) Implementation: Configure all four AC sub-modules
    • Access Risk Analysis (ARA).
    • Access Request Management (ARM).
    • Emergency Access Management (EAM).
    • Business Role Management (BRM)
  • Process Control (PC) Configuration: Design and set up Continuous Control Monitoring (CCM) 
    • MSMP & BRF+ Design
    • Defining process global settings, initiators, paths, and stages.
    • Mapping agent rules to determine appropriate approvers for each stage.
    • Integrating BRF+ decision tables to handle complex routing logic.
    • Strong understanding of UX to Design user friendly access request forms with optimal workflow design.
• BTP Security : Design and implement comprehensive security architectures for SAP BTP global accounts, subaccounts, and services, ensuring audit guidelines are followed and secure development life cycles.
• SAP Cloud Identity Access Governance (IAG)
  • SAP IAG Configuration: Experience in bridging IAG with GRC and non-ABAP systems.
  • Cloud Security: Knowledge of BTP security, IAS/IPS integration, and SAML/OAuth2.
  • Regulatory Compliance: Understanding of ITAR, SOX, and audit controls.
• Secure Authentication Knowledge
  • Proficiency in SAML, OAuth, and Single Sign-On (SSO) integrations
• Excellent oral and written communication skills 
• Ability to interact with upstream and downstream Stakeholders in a global environment 
• Strong analytical thinking, problem-solving and troubleshooting skills with documentation and design skills 
• Ability to work independently as well as in a team environment, and prioritize multiple project activities 
• Lead and oversee GRC implementation projects, including requirement gathering, design, and testing phases.
• Facilitate training sessions and workshops on SAP security best practices for internal teams.
• Manage risk assessments and prepare necessary documentation for compliance reviews.