




**Position Details** ----------------------- * **Country:** Mexico * **Scope of Position:** Global * **Business Area:** Finance * **Discipline:** Shared Services Control * **Talent Level:** NT 5 \- Specialist Coordinator/Analyst/Assistant/Technician **Purpose of the Position** ------------------------ Ensure confidentiality, integrity, and availability of information through proper segregation of duties across different business areas, in accordance with formally defined standards, policies, and procedures. **Decision Making (Specific to the Position)** ------------------------------------------- Improvements in regulatory and technological processes. Definition and monitoring of policies and procedures related to security. **Areas of Responsibility (What is done / How it is done / Why it is done) \- Indicator** -------------------------------------------------------------------------------------- 1\. Control access in Mabe systems and maintain an access control reporting system * \# Requests * \# Findings * \# Corrections * Monthly reporting 2\. Administer roles/permissions for centrally managed applications. * \# Requests * \# Findings 3\. Evaluate and document potential and actual SoD conflicts, communicate them to the responsible business areas for resolution and/or control, and ensure their documentation. * \# Proposals 4\. Manage the identity control tool, ensuring its availability. * \# Timely Requests * \# Correct Requests * Tool Availability 5\. Assess impacts and propose solutions for changes in processes and role profiling with a control focus (SoD). * \# Letters * \# Solutions 6\. Coordinate with Human Resources, Center of Excellence, and Information Technology departments to correct findings from internal and external audits. * \# Audit Findings * \# Unresolved Findings 7\. Personally attend to and advise Information Technology departments at the continental level on information security matters. * \# Solutions * Conflicts 8\. Implement security controls for databases. * COBIT Controls * MABE Policies and Standards 9\. Standardize infrastructure controls and policies that promote and guarantee the execution of access and identity security measures. * COBIT Controls * MABE Policies and Standards **Education, Experience, Key Skills, and Interaction Network** ------------------------------------------------------------------ Education * **Education:** University * **Degree – Major:** Systems Engineer / Industrial Engineer / Bachelor in Computer Science. * **Specialized Knowledge:** ERP: Baan, SAP, JD Edwards, People Soft \| Databases: Oracle, SQL Server \| Operating Systems: Windows, Unix. \| Knowledge of security programs and automated scheduled processes. \| Office: Advanced Excel. * **Languages and % Proficiency:** English 100 % Experience * **Years of Experience:** 3\-5 years * **Area:** Access Administration * **Industry Type:** Industry * **Position:** Security Administrator * **Years of Experience:** 3\-5 years * **Area:** Internal Audit * **Industry Type:** Industry * **Position:** Information Technology Auditor (access) Interaction Network * **Immediate Supervisor (position):** Security Office Manager, IDM Manager, Business Processes and Roles Manager * **Subordinates (positions):** None * **Internal Company Suppliers (positions with highest interaction):** ADP\_Personnel Administrator, Position Administrator, COE Consultants, Infrastructure and Data Center, Information Technology Consultants * **External Suppliers:** Application Consultants, External Auditors * **Internal Company Clients (main areas):** End Users, Service Desk (SD), Process Managers and/or Managers, Internal Auditors * **External Clients:** Suppliers/Clients with access to Mabe Systems, External Auditors


