ERP Security & GRC Analyst

Teck Resources; Vancouver; Hybrid; CAD 90,000 - 130,000; Full time

Job summary

Teck Resources is seeking a SAP GRC and Identity Access Governance Analyst on a one-year contract in Vancouver, BC. The role focuses on SAP security, access governance, and compliance across SAP landscapes, collaborating with business users, auditors, and technical partners.

The candidate will support SAP S/4HANA and cloud-based SAP applications, contribute to risk mitigation, and assist in audit readiness while maintaining strong documentation and governance practices.

Qualifications

• 2-3 years of experience in SAP Application Security and SAP GRC implementation or support.
• Understanding of SAP security concepts, authorization objects, role building, and user permissions.
• Foundational knowledge of SAP governance, risk management, and compliance.

Responsibilities

• Support SAP security roles, profiles, and user access coordination.
• Assist with provisioning, access modifications, deprovisioning, and role assignments.
• Perform access analysis and support role design per security standards.
• Maintain security documentation, role matrices, and access governance procedures.
• Support SoD review and remediation efforts.
• Assist with governance, risk, and compliance documentation and reporting.

Skills

Analytical thinking

Documentation

Communication

Collaboration

Education

Bachelor's degree in IT / CS / Cybersecurity / BTM or related field

Tools

SAP GRC

Identity Access Governance (IAG)

SAP S/4HANA

Job description

Location: Vancouver, BC, Canada

Employment Type: Contractor

Workplace Type: Hybrid

About our Vancouver Office

Located in the heart of downtown Vancouver, between the Pacific Ocean and the Coast Mountains, Teck's Corporate Office sits in one of Canada's most culturally diverse cities.

Surrounded by world-renowned nature and globally inspired cuisine, the office brings together many of Teck's corporate functions - all working toward Teck's purpose of providing the essential resources the world relies on.

Role Overview

Reporting to the Lead, ERP Security, the SAP GRC and IAG Analyst is responsible for supporting SAP application security, governance, risk, and compliance activities across SAP landscapes. This role assists in maintaining secure and compliant access controls, supporting SAP GRC and Identity Access Governance (IAG) processes, and ensuring alignment with organizational security and compliance requirements.

Working closely with business users, SAP functional teams, auditors, cybersecurity teams, and technical partners, the analyst helps coordinate SAP security roles, access governance processes, and compliance controls. The role supports SAP S/4HANA and cloud-based SAP applications while contributing to access management, risk mitigation, audit readiness, and continuous improvement initiatives.

This position requires foundational experience in SAP Security, SAP GRC, and Identity Access Governance (IAG), along with strong analytical, documentation, and collaborator communication skills.

This is an initial one-year contract.

Safety & Compliance

• Be a courageous safety leader, adhere to and sponsor safety and environmental rules and procedures
• Support compliance with audit requirements, access management standards, and IT General Controls (ITGC).
• Assist with Segregation of Duties (SoD) monitoring, mitigation activities, and access reviews.
• Follow established security, change coordination, and governance processes.
• Support audit evidence collection and remediation activities.

SAP Security Administration & Access Management

• Support the coordination and continual support of SAP security roles, profiles, and user access.
• Assist with user provisioning, access modifications, deprovisioning, and role assignments.
• Perform access analysis and support role design activities in accordance with security standards.
• Assist in maintaining security documentation, role matrices, and access governance procedures.
• Support periodic user access reviews and certification activities.
• Collaborate with business and technical teams to ensure appropriate access controls are maintained.

SAP GRC & IAG Administration

• Support the ongoing administration and maintenance of SAP GRC and Identity Access Governance (IAG) solutions.
• Assist with access requests, approvals, provisioning workflows, and risk analysis activities.
• Perform Segregation of Duties (SoD) reviews and support remediation efforts.
• Maintain risk documentation, mitigation controls, and compliance records.
• Assist with process testing and validation of governance and compliance controls.
• Support integration and monitoring activities related to SAP GRC and IAG environments.

SAP Security Governance & Documentation

• Gather, analyze, and detail organizational and technical needs related to SAP Security and GRC processes.
• Maintain security procedures, standards, and operational documentation.
• Document and support IT Service Management (ITSM) processes related to SAP Security and GRC operations.
• Assist in developing process flows, work instructions, and compliance documentation.
• Support reporting efforts focused on protection measures and regulatory standards.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Business Technology Management, or a related field, or an equivalent combination of education and experience.
• 2-3 years of experience in SAP Application Security and SAP GRC implementation or support.
• Understanding of SAP security concepts, authorization objects, role building, and processes for managing user permissions.
• Foundational knowledge of SAP solutions for governance, risk management, and compliance.
• Ability to interpret, examine, and detail business and technical requirements.
• Experience providing detailed IT service procedures connected to SAP Security and GRC or equivalent experience.
• Strong analytical, documentation, fix, and problem‑solving skills.
• Experience collaborating with business users alongside technical teams to support access management and compliance activities.
• Ability to collaborate effectively with business, technical, and security collaborators.
• Good interpersonal, communication, and relationship-management skills.
• Demonstrated ability to document processes, analyze requirements, and support governance initiatives.
• Experience supporting compliance, audit, and identity management strategic direction activities.
• Ability to work effectively in a team-oriented environment.
• Experience within SAP S/4HANA or SAP cloud environments is seen as a positive attribute.

Nice-to-Have

• Exposure to SAP solutions for managing identity access controls.
• Knowledge of SAP S/4HANA security and authorization concepts.
• Familiarity with SAP cloud technologies such as SAP BTP, SAP Ariba, SAP Analytics Cloud (SAC), and SAP Cloud ALM.
• Understanding of Segregation of Duties (SoD), IT General Controls (ITGC), and compliance frameworks.
• Knowledge of identity and access management (IAM) concepts and solutions.
• Experience with security testing, user access reviews, and audit support activities.
• Familiarity with SAP Cloud Identity Services (IAS/IPS).
• Experience working in regulated industries with strong compliance and audit requirements.
• SAP Security or SAP GRC certifications are considered an asset.

Why Teck

At Teck, your work matters-to the world, to our communities and to your future.

As a leading Canadian resource company, we focus on responsibly providing the metals essential for global development and the energy transition while caring for the people, communities and land that we love. We do this guided by our values that, together, form The Teck Way . At Teck, you'll find purpose-driven work, a culture of respect and inclusion, and the opportunity to grow your career while helping build a better world.