Remote SAP Security & GRC Access Control Lead

Novipro; West Vancouver; Remote; CAD 130,000 - 170,000; Full time

Job summary

NOVIPRO, a specialized consulting firm in digital transformation and cybersecurity, is recruiting on behalf of a major manufacturing organization for a SAP Security and GRC Access Control Specialist. This contract role focuses on administering SAP security and GRC modules across ECC, S/4HANA, and Fiori environments.

Key tasks include designing roles, SoD mitigation, maintaining ARA/EAM workflows, and ensuring SOX/GDPR compliance, with 100% remote work within Canada (ETZ).

Qualifications

• 10+ years of cybersecurity experience with enterprise IAM and governance.
• 5–10 years SAP security administration and GRC Access Control.
• Expertise in S/4HANA authorization models and Fiori management.
• Experience in SAP S/4HANA implementations or migrations focusing on role architecture.
• Proficiency in SAP authorization frameworks (PFCG, SU01, SUIM, ST01).
• Hands-on SAP GRC Access Control: ARA and EAM modules.
• Knowledge of SOX, GDPR and ITGC controls.
• Ability to work in a globally distributed, remote setup.

Responsibilities

• Administer and govern SAP user access, role assignments, and authorization structures across ECC, S/4HANA, BW, and Fiori-based environments.
• Design, build, and maintain SAP security roles with SoD and least privilege access models.
• Operate SAP GRC Access Control modules—ARA, EAM, BRM, CUP.
• Configure and maintain risk analysis rules, access workflows, and emergency access procedures.
• Collaborate with cross-functional teams including process owners, internal audit, and IT security to define access governance.
• Perform periodic reviews of sensitive access and SAP security logs; address anomalies.
• Support SAP role redesign and access remediation during upgrades or acquisitions.
• Enhance and document SAP security standards and internal controls for SOX/GDPR compliance.

Skills

10+ years cybersecurity experience

5–10 years SAP security & GRC

S/4HANA authorization & Fiori

SAP GRC ARA/EAM

SOX/GDPR/ITGC knowledge

Distributed/remote collaboration

Tools

SAP Certified Security Architect

GRC Certification

Job description

NOVIPRO, a specialized consulting firm in digital transformation and cybersecurity, is recruiting on behalf of a major manufacturing organization for a SAP Security and GRC Access Control Specialist. This contract role focuses on administering SAP security and GRC modules across ECC, S/4HANA, and Fiori environments.

Key tasks include designing roles, SoD mitigation, maintaining ARA/EAM workflows, and ensuring SOX/GDPR compliance, with 100% remote work within Canada (ETZ).