Remote SAP Security and GRC Access Control Specialist

Novipro; Dollard-des-Ormeaux; Remote; CAD 90,000 - 130,000; Full time

Benefits offered by this job

SAP Certifications: System Security/ G

Remote work within Canada

Job summary

NOVIPRO is seeking a SAP Security and GRC Access Control Specialist for a major manufacturing client. This 6‑month contract is 100% remote within Canada (ET). You will lead access governance, design security roles, and support GRC implementations across SAP landscapes.

Ideal candidates have deep SAP security experience, SoD mitigation skills, and strong knowledge of SOX/GDPR controls, with collaboration across IT security and internal audit teams.

Qualifications

• Over 10 years of cybersecurity with a focus on identity and access governance.
• 5–10 years in SAP security administration and GRC Access Control, including SoD mitigation.
• Expertise in SAP S/4HANA authorization models, including Fiori and HANA privileges.
• Experience in SAP S/4HANA implementation or migration with role provisioning.
• Strong knowledge of SAP security frameworks (PFCG, SU01, SUIM, ST01) and user lifecycles.
• Hands-on with SAP GRC Access Control modules, especially ARA and EAM.
• Solid understanding of SOX, GDPR, and ITGC controls.
• Ability to work in a globally distributed, multicultural, remote setting.

Responsibilities

• Administer and govern user access, role assignments, and authorization structures across SAP ECC, S/4HANA, BW, and Fiori-based environments.
• Design, build, and maintain SAP security roles in alignment with SoD and least-privilege access.
• Operate and optimize SAP GRC Access Control modules—ARA, EAM, BRM, and CUP.
• Configure and maintain risk analysis rules, access request workflows, and emergency access procedures.
• Collaborate with cross-functional teams including process owners, internal audit, and IT security to define access governance policies.
• Perform periodic reviews of sensitive access; analyze SAP security audit logs and address anomalies.
• Support project delivery involving SAP role redesign, access remediation, or user migration during upgrades or acquisitions.
• Enhance and document SAP security standards, methodologies, and internal control frameworks for SOX/GDPR compliance.

Skills

Identity and access governance

SAP security administration

GRC Access Control

SoD mitigation

Role design

Fiori access management

HANA privileges

SOX compliance

GDPR ITGC

Cross-functional collaboration

Remote coordination

Tools

PFCG

SU01

SUIM

ST01

GRC Access Control

ARA

EAM

Job description

NOVIPRO is a specialized consulting firm in digital transformation and cybersecurity, supporting Canadian organizations in identifying and securing top-tier technical talent. We are currently recruiting on behalf of a major organization in the manufacturing sector to fill a critical role in SAP Security and GRC Access Control.

• Title: SAP Security and GRC Access Control Specialist

• Contract Duration: 6 months

• Workload: 35 hours per week

• Work Arrangement: 100% remote within Canada (Eastern Time Zone)

• Employment Type: Contract

• Citizenship/Work Authorization: Must be legally authorized to work in Canada

Responsibilities

• Administer and govern user access, role assignments, and authorization structures across multiple SAP landscapes, including ECC, S/4HANA, BW, and Fiori-based environments.

• Design, build, and maintain SAP security roles in alignment with Segregation of Duties (SoD) principles and least-privilege access models.

• Operate and optimize SAP GRC Access Control modules—Access Risk Analysis (ARA), Emergency Access Management (EAM), Business Role Management (BRM), and Compliant User Provisioning (CUP).

• Configure and maintain risk analysis rules, access request workflows, and emergency access procedures.

• Collaborate with cross-functional teams including business process owners, internal audit, and IT security teams to define and uphold access governance policies.

• Perform periodic reviews of sensitive access and critical authorizations; analyze SAP security audit logs and address identified anomalies.

• Support project delivery involving SAP role redesign, access remediation, or user migration during system upgrades or corporate acquisitions.

• Enhance and document SAP security standards, methodologies, and internal control frameworks to ensure continued compliance with regulatory mandates (e.g., SOX, GDPR).

Required experience and expertise

• Over 10 years of overall experience in cybersecurity, with a strong emphasis on enterprise-level identity and access governance.

• 5 to 10 years of direct experience in SAP security administration and GRC Access Control, including role design, SoD mitigation, and SAP security audits.

• Expertise in SAP S/4HANA authorization models, including Fiori tile/group/catalog management and HANA database-level privileges.

• Proven participation in SAP S/4HANA implementation or migration projects, with a focus on role architecture and access provisioning.

• Strong proficiency in SAP authorization frameworks (PFCG, SU01, SUIM, ST01), user lifecycle management, and custom role modeling.

• Hands-on experience with SAP GRC Access Control, particularly the ARA (Access Risk Analysis) and EAM (Emergency Access Management) modules.

• Solid understanding of compliance and control standards such as SOX, GDPR, and ITGC.

• Ability to work in a globally distributed, multicultural environment, adapting to cross-functional collaboration and remote coordination.

Assets:

• SAP Certifications such as:

  • SAP Certified Technology Associate – System Security Architect

  • SAP Certified Associate – GRC Access Control