Lead SAP Security and GRC Analyst

OXY, Inc.
United States, Texas, Houston
5 Greenway Plaza (Show on map)
Jul 21, 2025
Oxy is an international energy company with assets primarily in the United States, the Middle East and North Africa. We are one of the largest oil and gas producers in the U.S., including a leading producer in the Permian and DJ basins, and offshore Gulf of Mexico. Our midstream and marketing segment provides flow assurance and maximizes the value of our oil and gas. Our chemical subsidiary OxyChem manufactures the building blocks for life-enhancing products. Our Oxy Low Carbon Ventures subsidiary is advancing leading-edge technologies and business solutions that economically grow our business while reducing emissions. We are committed to using our global leadership in carbon management to advance a lower-carbon world. Visit oxy.com for more information. Occidental strives to attract and retain talented employees by investing in their professional development and providing rewarding opportunities for personal growth. Our goal is to meet the highest employer standards by ensuring the health and safety of our employees, protecting the environment and positively impacting our communities where we do business. We are looking for an experienced and motivated individual to fill the position ofLead SAP Security and GRC Analystwithin ourFinance Systemsgroup based inHouston, TX. The following are job duties expected of theLead SAP Security and GRC Analyst: This position leads the overall SAP User Security role design and Governance Risk Compliance (GRC) services to the corporate headquarters and worldwide business units. Responsible for the overall SAP User Security role design and architecture. Maintaining the GRC Rule Set, Risk and Control mapping and monitor for new functionality and risk scenarios that need to be configured. Manage Security/GRC activities and resource requirements for SAP Project Implementations and System Upgrades and enhancements. Support System Administration team in SAP user role administration process and change management. Responsible for SAP Security Role design and GRC training for the System Administration team. Supports System Administration team in GRC mitigation control assessment and compliance reporting. Coordinate team resources with the Sysadmin Production Support Manager for production support and project implementation activities. Qualifications - External Required Qualifications: Bachelor of Business Administration in MIS, Accounting or Finance, preferred. Minimum 5 years' experience in SAP User Security design, access management and Governance Risk Control framework. Proficient in user administration & maintenance and troubleshooting user access issues in daily support. Ability to perform and support security role build & maintenance - ensuring SOX compliance and making sure there are no SOD conflicts & deploying role changes in CHARMS. Experienced in CHARM transport & processes. Ability to resolve security issues reported by the business & support users timely and effectively. Experienced with managing User Security and GRC workstream activities for Projects. Ability to perform GRC/SOD control maintenance and remediation processes. Experience working with Internal and External Audit teams to support the process and requests. Ability to effectively communicate and work with other functional teams. Strong analytical and problem-solving skills. Willingness to work overtime, when required, due to system problems and time zone differences among business units. Ability to work independently and manage multiple tasks to meet deadlines. Excellent PC skills including proficiency in Microsoft Excel, Access, Word, PowerPoint. Strong written and oral communication skills. Relocationwill notbe provided. Occidental does not offer sponsorship of employment-based nonimmigrant visa petitions for this role. Recruitment Fraud It has come to our attention various individuals and/or organizations are contacting people falsely pretending to recruit on behalf of Oxy. Please be aware that these recruiting scams and communications do not originate nor are they associated with our recruitment process. All Oxy job postings and offers will require a completed application through our company website. Oxy does not charge a fee at any stage of the recruiting process. We will never: Ask you to pay for applications, interviews, meetings, processing, training or for any other fees Use recruiting or placement agencies that charge candidates an advance fee of any kind or *Request personal information such as passport and bank account details at an early stage of our recruitment process. We recommend against responding to unsolicited business propositions or offers from people you don't know. Do not disclose your personal or financial details. If you believe you have been the victim of a recruiting scam, please contact your local police department. All qualified applicants will receive consideration for employment without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.