Remote SAP Security and GRC Access Control Specialist

Novipro; Abbotsford; Remote; CAD 90,000 - 115,000; Full time

Job summary

NOVIPRO is recruiting on behalf of a major Canadian manufacturing organization for a SAP Security and GRC Access Control Specialist. This 6-month contract role is 100% remote within Canada (ET).

You will govern SAP access across ECC, S/4HANA, and related landscapes, design roles, and optimize GRC modules to maintain SOX/GDPR compliance. Ideal candidates have 10+ years in cybersecurity with 5–10 years in SAP security, strong SoD and risk analysis expertise, and deep knowledge of SAP S/4HANA

Qualifications

• Over 10 years of cybersecurity experience with enterprise identity and access governance.
• 5–10 years in SAP security administration and GRC Access Control, including SoD.
• Expertise in SAP S/4HANA authorization models and Fiori tile management.
• Experience in SAP S/4HANA implementation or migration projects and access provisioning.
• Strong SAP authorization framework knowledge (PFCG, SU01, SUIM, ST01) and lifecycle management.
• Familiarity with SOX, GDPR, and ITGC compliance.
• Ability to work in a globally distributed, remote environment.

Responsibilities

• Administer user access, roles, and authorization structures across SAP ECC, S/4HANA, BW, and Fiori.
• Design and maintain SAP security roles with SoD and least-privilege principles.
• Operate SAP GRC Access Control modules: ARA, EAM, BRM, CUP.
• Configure risk rules, access workflows, and emergency access procedures.
• Collaborate with business, audit, and IT security teams on access governance.
• Review sensitive access and SAP security audits; address anomalies.
• Support role redesigns and user migrations during upgrades or acquisitions.
• Document SAP security standards and internal control frameworks for regulatory compliance.

Skills

SAP security administration

GRC Access Control

Role design

SoD mitigation

SAP security audits

S/4HANA authorization models

Fiori tile management

HANA database privileges

ARA (Access Risk Analysis)

EAM (Emergency Access Management)

ITGC compliance

PFCG

SU01

SUIM

ST01

Education

SAP Certified Technology Associate – System Security Architect

SAP Certified Associate – GRC Access Control

Tools

PFCG

SU01

SUIM

ST01

S/4HANA

Job description

NOVIPRO is a specialized consulting firm in digital transformation and cybersecurity, supporting Canadian organizations in identifying and securing top-tier technical talent. We are currently recruiting on behalf of a major organization in the manufacturing sector to fill a critical role in SAP Security and GRC Access Control.

• Title: SAP Security and GRC Access Control Specialist
• Contract Duration: 6 months
• Workload: 35 hours per week
• Work Arrangement: 100% remote within Canada (Eastern Time Zone)
• Employment Type: Contract
• Citizenship/Work Authorization: Must be legally authorized to work in Canada

Responsibilities

• Administer and govern user access, role assignments, and authorization structures across multiple SAP landscapes, including ECC, S/4HANA, BW, and Fiori-based environments.
• Design, build, and maintain SAP security roles in alignment with Segregation of Duties (SoD) principles and least-privilege access models.
• Operate and optimize SAP GRC Access Control modules—Access Risk Analysis (ARA), Emergency Access Management (EAM), Business Role Management (BRM), and Compliant User Provisioning (CUP).
• Configure and maintain risk analysis rules, access request workflows, and emergency access procedures.
• Collaborate with cross-functional teams including business process owners, internal audit, and IT security teams to define and uphold access governance policies.
• Perform periodic reviews of sensitive access and critical authorizations; analyze SAP security audit logs and address identified anomalies.
• Support project delivery involving SAP role redesign, access remediation, or user migration during system upgrades or corporate acquisitions.
• Enhance and document SAP security standards, methodologies, and internal control frameworks to ensure continued compliance with regulatory mandates (e.g., SOX, GDPR).

Required experience and expertise

• Over 10 years of overall experience in cybersecurity, with a strong emphasis on enterprise-level identity and access governance.
• 5 to 10 years of direct experience in SAP security administration and GRC Access Control, including role design, SoD mitigation, and SAP security audits.
• Expertise in SAP S/4HANA authorization models, including Fiori tile/group/catalog management and HANA database-level privileges.
• Proven participation in SAP S/4HANA implementation or migration projects, with a focus on role architecture and access provisioning.
• Strong proficiency in SAP authorization frameworks (PFCG, SU01, SUIM, ST01), user lifecycle management, and custom role modeling.
• Hands-on experience with SAP GRC Access Control, particularly the ARA (Access Risk Analysis) and EAM (Emergency Access Management) modules.
• Solid understanding of compliance and control standards such as SOX, GDPR, and ITGC.
• Ability to work in a globally distributed, multicultural environment, adapting to cross-functional collaboration and remote coordination.

Assets:

• SAP Certified Technology Associate – System Security Architect
• SAP Certified Associate – GRC Access Control