POSITION PURPOSE

The Application Security Analyst supports the application security function within the Digital Applications & Product Delivery organization, helping to protect BAC's enterprise application estate through sound access governance, security administration, and support of security and compliance activities. SAP S/4HANA and the wider SAP landscape are the primary focus and the largest share of the work, but the role supports application security across the wider estate, including non-SAP business applications.

This is a developing role suited to someone early in an application security career. Working under the guidance of senior application security and business analysis colleagues, the analyst carries out the day-to-day tasks that keep application access controlled and auditable - building and maintaining SAP roles, processing access, supporting segregation of duties and access reviews, and helping prepare audit evidence - while building the deeper expertise to take on more complex security work overtime.

The successful candidate combines a foundational understanding of SAP authorizations and security concepts with strong attention to detail, a disciplined and control-minded approach, and the curiosity to grow into a broader application security specialist.

KNOWLEDGE & SKILLS

· Bachelor's degree in information technology, computer science, information security, business, or a related field, or equivalent practical experience.

· Around 1 to 2 years of experience in SAP security, IT access administration,



application support, or a related role; strong candidates earlier in their career will be considered.

· Foundational understanding of SAP authorization concepts - users, roles, profiles, authorization objects — and of common authorization error patterns.

· Exposure to SAP GRC Access Control or a similar access governance or SoD tool, or a strong willingness to learn it.

· Understanding of access management principles, segregation of duties, and least-privilege access.

· Awareness of IT general controls and audit concepts (for example SOX, GDPR) as they apply to application access.

· Strong attention to detail, a disciplined and control-minded approach, and sound documentation habits.

· Good analytical and problem-solving skills, and the discipline to follow defined procedures precisely.

· Clear written and verbal communication in English, and the ability to work effectively in a integral, multicultural team.

· Genuine interest in application and information security, with the motivation to develop into a broader security specialist.

Preferred

· A foundational security certification (for example CompTIA Security+ or equivalent), or willingness to work toward one.

· Exposure to security concepts beyond SAP, such as identity and access management, Microsoft 365 security, or application vulnerability management.

· Experience supporting an audit or a SoD remediation exercise.

· Experience in a manufacturing or engineer-to-order environment.

📌 Applications Security Analyst (Ciénega de Flores)
🏢 BALTIMORE AIRCOIL COMPANY DE MEXICO
📍 Ciénega de Flores