ERP SAP Application Security Analyst

Career Area:
Technology, Digital and Data

Your Work Shapes the World at Caterpillar Inc. When you join Caterpillar, you’re joining a global team who cares not just about the work we do — but also about each other. We are the makers, problem solvers, and future world builders who are creating stronger, more sustainable communities. We don’t just talk about progress and innovation here — we make it happen, with our customers, where we work and live.

Together, we are building a better world, so we can all enjoy living in it.

The Caterpillar Information Technology ERP SAP Application Security team is seeking a Senior IT Applications Analyst. As a member of the ERP Application Security team, you will be responsible for safeguarding the integrity, confidentiality, and availability of ERP systems by designing, implementing, and managing security policies and procedures. This role involves analyzing business requirements, configuring ERP roles and authorizations, monitoring user access, and ensuring compliance with internal and external regulations.

• Design, implement, and maintain SAP ERP security roles and authorizations to meet business and compliance requirements.
• Use established ERP change and transport management methodology to promote approved changes to production.
• Monitor and manage user access, segregation of duties (SoD), and privileged accounts within the ERP environment.
• Track and resolve incidents, service requests, and system changes, ensuring proper documentation and compliance with change control processes.
• Identify opportunities to optimize current processes, enhance system performance, and improve user experience.
• Support technical and operational go-lives for deployments and software upgrades.
• Participate in regular security audits, risk assessments, and vulnerability analyses to identify and address potential issues.
• Collaborate with business stakeholders, IT teams, and auditors to ensure security controls align with organizational policies and regulatory standards.
• Provide support for request and incident response, troubleshooting, and resolution of security-related ERP issues.
• Maintain documentation of security policies, procedures, and changes within the ERP landscape.
• Drive internal projects as needed to maintain client integrity.

• Excellent analytical, problem-solving, and communication skills.
• AI skills for automation of manual team tasks.
• Expertise with audit processes, SOX compliance, and risk management principles.
• Ability to support SAP Governance Risk and Control AC/PCECC to S4 conversion knowledge.

• Core Application Systems:
  Knowledge of major production application systems used for delivery services to internal and external clients; ability to leverage major production application systems in diverse situations.
• IT Standards, Procedures & Policies:
  Knowledge of Information Technology (IT) standards and policies; ability to utilize a variety of administrative skills sets and technical knowledge to manage organizational IT policies, standards, and procedures.
• Business Process Improvement:
  Knowledge of business process improvement best practices and ability to use methods for identifying, evaluating, introducing, and implementing more efficient approaches to performing business related activities.
• Accuracy and Attention to Detail:
  Understanding the necessity and value of accuracy; ability to complete tasks with elevated levels of precision.
• Problem Solving:
  Knowledge of approaches, tools, techniques for recognizing, anticipating, and resolving organizational, operational or process problems; ability to apply knowledge of problem solving appropriately to diverse situations.
• Application Design, Architecture:
  Knowledge of basic activities and deliverables of application design; ability to utilize application design methodologies, tools and techniques to convert business requirements and logical models into a technical application design.
>

Implementation:
Knowledge of how to run applications for organizations; ability to implement application software within an organization and help end-users perform…