Hello! This is the analysis and development group for role models of packaged ERP products. We work at the intersection of information security, audit, and product analytics, focusing on role models in ready-made software products, such as various 1C configurations (UH, MDM, DO, ZUP, BP, etc.). We ensure systems comply with ITGC, SOX, and internal control requirements.
You will
- Implement, maintain, and develop role models for ERP systems.
- Analyze provided user access rights requirements, identify risks, and develop restrictive access procedures at the rights level or form restrictions.
- Conduct interviews with business users, prepare specifications for developing new roles, consult the development team on role model requirements, and accept development results.
- Investigate access rights incidents, independently identify critical access, and initiate system changes.
- Analyze development specifications for access rights.
- Handle errors and advise users on access and role issues.
- Configure access management rules in IDM.
- Conduct ITGC audits of ERP systems regarding access controls and changes, and address identified remarks.
- Identify SoD conflicts and update conflict matrices of authorities.
- Participate in projects for the development and implementation of IT access controls.
- Handle errors and advise users on access and role issues.
We value
- At least 2 years of experience as a business analyst, audit analyst, control analyst, or IT consultant.
- Experience with 1C products (preferably 1C UH: Holding Management).
- Experience with 1C roles and building role models in 1C, understanding the differences between metadata object types and their rights.
- Ability to build relationships with various stakeholders (from developers to business).
- Communication skills and flexibility to change.
- Experience with SOX, ITGC projects, or in an information security environment.
