Principal SAP Security Analyst

Hasbro; Montreal (administrative region); On-site; CAD 110,000 - 150,000; Full time

Job summary

Hasbro in Montreal, Canada seeks a Principal SAP Security Analyst to lead access governance across SAP ECC, S/4HANA, and SAP RISE. This senior IC role guides role design, controls, and security posture with cross-functional partners, focusing on least privilege and SOX readiness.

The role directs SAP security strategy, mentors SAP analysts, and ensures alignment with regulatory requirements while collaborating with auditors and business teams.

Qualifications

• 6–8+ years of SAP security and access governance experience.
• Strong understanding of ECC and S/4HANA authorization concepts.
• Familiarity with SAP GRC and Identity Access Governance.

Responsibilities

• Build SAP security architecture, access models, and role design.
• Support migration to SAP RISE with role mapping and controls.
• Develop RBAC models upholding least privilege and compliance.
• Lead role cleanup, SoD remediation, and risk reviews.
• Set up SAP Identity Access Governance and GRC with workflows and reporting.
• Strengthen access provisioning, reviews, and privileged access oversight.
• Support SOX/ITGC through audits and documentation.
• Collaborate with finance, HR, procurement, and IT teams.
• Provide technical mentorship without people management.

Skills

SAP security

Access governance

Role development

SOX & ITGC

Audit collaboration

Communication

Tools

SAP GRC

SAP Identity Access Governance

SAP BTP

IAS/IPS

S/4HANA

ECC

Job description

We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime.

About the Role

Hasbro is seeking a Principal SAP Security Analyst to join our IT Security team in Montreal. This senior individual contributor position will assist in steering access governance, role development, compliance readiness, and security controls across SAP ECC, S/4HANA, SAP RISE, SAP Business Technology Platform, Identity Authentication Service, and Identity Provisioning Service.

We are shifting more SAP security responsibility internally and need someone who can guide complex tasks through knowledge, collaboration, and sound judgment. This role is not a people manager position, but it does provide technical direction to SAP analysts, access administrators, project teams, business partners, auditors, and implementation partners.

What You’ll Do

• Build SAP security architecture, standards, access models, and role design practices.
• Support our migration to SAP RISE, including role mapping, identity integration, access transition, privileged access, connectivity, and post-migration controls.
• Develop and enhance Role-Based Access Control models that uphold least-privilege, address business needs, and meet compliance requirements.
• Lead role cleanup, redesign, simplification, and Segregation of Duties remediation.
• Set up and maintain SAP Identity Access Governance and SAP Governance Risk and Compliance, covering connectors, workflows, risk rules, provisioning, access analysis, and reporting.
• Strengthen access provisioning, access reviews, emergency and privileged access oversight.
• Support SOX and IT General Controls by collecting evidence, conducting audit walkthroughs, resolving issues, and providing clear documentation.
• Review access risks, weak role builds, SoD conflicts, insecure configurations, and control gaps.
• Partner with finance, supply chain, HR, procurement, SAP application teams, enterprise architecture, identity teams, cybersecurity, compliance, audit, and external partners.
• Provide technical mentorship without formal people-management responsibility.

What You’ll Bring

• 6–8+ years of SAP security, access governance, role development, or related experience.
• Solid understanding of SAP ECC and S/4HANA authorization concepts.
• Experience in configuring or supporting SAP GRC and SAP Identity Access Governance.
• Familiarity with SAP BTP, IAS, IPS, and SAP RISE security considerations.
• Knowledge of Role-Based Access Control, Segregation of Duties, privileged access, user lifecycle management, and access reviews.
• Experience assisting with SOX, IT General Controls, internal audit, or external audit activities.
• Ability to guide complex initiatives, communicate clearly, and build trust with technical and business partners.

Preferred Experience

• SAP security certification or related SAP certification.
• Experience securing SAP RISE environments hosted on AWS or SAP-managed cloud infrastructure.
• Experience with S/4HANA migration, ERP modernization, hybrid SAP landscapes, or cloud identity integration.
• Experience in managing emergency access, conducting access certification, automating provisioning, and handling privileged access controls.
• Experience in a global enterprise environment with complex business processes and audit needs.

Equal Opportunity and Accommodation

Hasbro is committed to equality of opportunity in employment. We make employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, disability, veteran status, or any other legally protected status.

Reasonable accommodation is available for individuals with disabilities during the application process, interview process, and employment. Applicants who need accommodation should contact their recruiter or coordinator.

WE ARE AN EQUAL OPPORTUNITY / AFFIRMATIVE ACTION EMPLOYER

Hasbro is committed to equality of opportunity in all aspects of employment. We are committed to making all employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, or any other legally protected status.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. If you have a disability and require assistance in this application process and need to request an accommodation, please contact your recruiter or coordinator.

Employees may be eligible for annual and long-term incentives as part of their overall compensation package, depending on role, location, and eligibility. Benefits and programs may include:

• Health & Wellness
• Time Off to Recharge
• Financial Well-being
• Life & Family Support
• Volunteer and Community Initiatives
• Learning & Development
• Exclusive Perks

Please review our Applicant Privacy Notice to learn how we collect, use, and protect your personal information in connection with the application process.