Join Komatsu and Be Part of Something Big!
Job Overview
Komatsu is embarking on a business transformation through an SAP S/4HANA implementation. We are seeking a proactive and solution-oriented SAP Security Engineer to support security operations across the existing SAP landscape and contribute to the design, implementation, and support of security solutions for SAP S/4HANA Private Cloud Edition, SAP Fiori, SAP Business Technology Platform, SAP GRC, and related technologies. The role is responsible for role design, user access management, Segregation of Duties compliance, audit support, security operations, and the development and maintenance of SAP security standards and procedures.
• SAP Security Architecture and Engineering - Design, implement, and maintain SAP security architectures, roles, and authorization models that protect enterprise applications and support secure business operations across Komatsu’s SAP environment.
• Identity and Access Management - Establish and maintain effective SAP identity and access management controls, including user provisioning, privileged access, authentication, authorization, and Segregation of Duties (SoD) to ensure appropriate access to business-critical systems.
• Security Governance, Risk, and Compliance - Develop, implement, and maintain SAP security standards, procedures, and controls that align with Komatsu’s cybersecurity policies, regulatory requirements, and internal and external audit obligations with SOC, J-SOX, GDPR, etc.
• SAP Security Operations and Risk Management - Manage ongoing SAP security operations, including access reviews, vulnerability management, security incident resolution, and remediation activities to reduce cybersecurity risk and maintain a secure operating environment.
• SAP Transformation and Project Security Integration - Provide SAP security expertise throughout system implementations, upgrades, migrations, and transformation initiatives, ensuring cybersecurity requirements are incorporated into solution design and implementation.
• Cross-Functional Collaboration and Security Advisory - Partner with business stakeholders, SAP functional teams, technical teams, and cybersecurity personnel to implement effective security solutions, resolve security challenges, and promote consistent security practices across the SAP landscape.
Key Job Responsibilities
SAP Security Engineering and Access Management
• Design, configure, test, and maintain SAP security roles, authorization objects, and access controls across SAP ECC, SAP S/4HANA, SAP Fiori, SAP BTP, and related applications.
• Administer SAP user access management processes, including provisioning, deprovisioning, role assignments, emergency access, and authorization troubleshooting.
• Perform Segregation of Duties (SoD) analysis, access risk assessments, and remediation activities using SAP GRC Access Control and other relevant security tools.
• Support integration between SAP applications and enterprise Identity and Access Management (IAM) and Single Sign-On (SSO) solutions to ensure secure authentication and authorization.
Security Governance, Compliance, and Risk Management
• Develop, maintain, and enforce SAP security standards, procedures, role design documentation, and access management controls aligned with Komatsu’s cybersecurity policies and applicable regulatory requirements.
• Conduct periodic user access reviews, role recertifications, and security control assessments to validate compliance with internal governance requirements and audit expectations.
• Support internal and external security audits by gathering evidence, evaluating control effectiveness, identifying deficiencies, and coordinating remediation activities.
• Support the implementation, configuration, and ongoing maintenance of SAP GRC capabilities, including Access Request Management (ARM), Access Risk Analysis (ARA), Emergency Access Management (EAM), and Business Role Management (BRM).
SAP Security Operations and Transformation
• Monitor SAP security vulnerabilities, security notes, emerging threats, and configuration risks; assess their impact and coordinate appropriate remediation activities.
• Investigate and resolve SAP security incidents, authorization issues, access control deficiencies, and audit findings in collaboration with technical and business stakeholders.
• Participate in SAP system implementations, upgrades, migrations, patching activities, and infrastructure changes to ensure security requirements are incorporated throughout the project lifecycle.
• Support SAP S/4HANA transformation initiatives, including security role redesign, Fiori security, BTP security, application onboarding, and the implementation of secure authorization solutions.
Collaboration and Security Advisory
• Collaborate with business process owners, SAP functional teams, BASIS administrators, application development teams, and cybersecurity personnel to design and implement security solutions that support business requirements.
• Provide technical guidance and recommendations to business and IT stakeholders regarding SAP security risks, access management requirements, compliance obligations, and security best practices.
• Develop and maintain SAP security documentation, including role design specifications, security procedures, access control standards, and operational runbooks, while providing training and knowledge transfer to technical teams and business users.
Qualifications/Requirements
• Bachelor’s degree in computer science, Information Technology, Engineering, or related field.
• 7+ years of experience in SAP security, with expert-level knowledge of SAP GRC Access Control and its core modules (ARM, BRM, EAM, UAR, and ARA).
• Deep expertise in SAP security across multiple SAP products, including SAP S/4HANA, GTS, Ariba, SAP Fiori, and SAP BTP.
• Strong understanding of SAP authorization concepts and security policies, with a focus on role-based access, user administration, and compliance in private cloud environments.
• Proven knowledge of IT SOX controls, including control operations, SOX deficiency management, and their impact on overall SOX audits.
• Demonstrated ability to serve as a security solution architect, designing SAP security solutions aligned with business and project requirements.
• Extensive experience in end-to-end SAP security project lifecycles, including requirements gathering, design and build, UAT, regression testing, cutover, and hypercare.
• Excellent communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams and key stakeholders.
• Strong problem-solving skills.
• Strong documentation, testing and automation skills.
• Strong sense of ownership and the ability to work with a limited set of requirements.
• Ability to explain technical solutions to technical teams and non-technical teams.
• Strong ability to align to and mature security practices.
• Strong ability to align technical needs to business processes.
• Strong ability to prioritize work based on business objectives.
• Strong understanding of security fundamentals and general security technologies
Additional Information
Hiring Range
At Komatsu, your base pay is one part of your total compensation package. This role pays $115,000-$125,000. The actual offer will consider a wide range of factors, including experience and location.
Company Benefits
Komatsu provides an extensive and robust employee benefits package that is designed to enhance the well-being of our employees and family members. We embrace a positive and empowering employee experience with a culture that prides itself on a diverse and inclusive environment.
- Health benefits: Medical, dental, vision, HSA, wellness programs, etc.
- 401k and/or employee savings programs
- Employee time off (vacation and designated holidays)
- Employee and family assistance programs
- Disability benefits
- Life insurance
- Employee learning and development programs
Diversity & Inclusion Commitment
At Komatsu, we come from diverse backgrounds, with unique perspectives, experiences and contributions. We believe that our people are part of our shared purpose. Connected by our core values of ambition, perseverance, collaboration and authenticity, we are committed to continually advancing in our support of diversity and inclusion. United, we are on a journey towards a sustainable future that creates value together.
Company Information
Komatsu develops and supplies technologies, equipment and services for the construction, mining, forklift, industrial and forestry markets. Headquartered in Tokyo, Japan, Komatsu employs more than 64,000 people worldwide, operating in more than 140 countries. For more than a century, the company has been creating value for its customers through manufacturing and technology innovation, partnering with others to empower a sustainable future where people, business and the planet thrive together. Since the company’s founding in 1921, Komatsu has been committed to supporting individuals and communities through job training, skills development and giving back. As a Komatsu employee, you will be encouraged to grow alongside our global company, contributing to a more sustainable future for all. If you are looking for a company that values your talent and potential, join Komatsu to be a part of something big and help advance modern society. Learn more at www.komatsu.com.
EEO Statement
Komatsu is an Equal Opportunity Workplace and an Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.