SAP Security Administrator & GRC Specialist

Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!; Calgary; On-site; CAD 80,000 - 100,000; Full time

Job summary

Astra-North Infoteck Inc. is looking for an experienced SAP Security & GRC Specialist to oversee SAP security administration and governance. The ideal candidate must manage compliance and risk across SAP environments.

Applicants should have at least 5 years of experience in SAP security, knowledge of authorization concepts, and familiarity with GRC Access Control modules. Strong analytical skills and excellent communication are essential.

Qualifications

• 5+ years of experience in SAP Security & GRC.
• Strong knowledge of SAP authorization concepts.
• Experience with SAP GRC Access Control 10.x / 12.x.

Responsibilities

• Manage SAP security administration and compliance.
• Design and maintain SAP security roles.
• Troubleshoot authorization issues.

Skills

SAP Security & GRC experience

SAP authorization concepts

SAP GRC Access Control

SoD concepts

S/4HANA security

Analytical skills

Communication

Tools

PFCG

SU01

ST01

Job description

Role Description

We are seeking an experienced SAP Security & GRC Specialist to manage SAP security administration, user access governance, compliance, and risk management across SAP environments. The role requires deep expertise in SAP authorization concepts, role design, SoD analysis, and SAP GRC Access Control modules.

Key Responsibilities

• SAP Security Administration
• Design, build, and maintain SAP security roles using PFCG
• Perform mass maintenance of authorization objects and org‑level changes
• Execute user administration (creation, lock/unlock, password resets, access reviews)
• Troubleshoot authorization and security issues across SAP systems
• Support SAP Fiori, S/4HANA, BI/BW, GTP, and other SAP applications
• Manage transport requests for security roles via ChaRM

SAP GRC Management

• Administer SAP GRC Access Control modules:
• Access Risk Analysis (ARA)
• Access Request Management (ARM)
• Emergency Access Management (EAM)
• Business Role Management (BRM)
• Conduct Segregation of Duties (SoD) analysis and remediation
• Monitor compliance and audit requirements
• Support periodic User Access Reviews (UAR)

Compliance & Audit Support

• Work with internal/external auditors to provide security documentation and evidence
• Ensure compliance with SOX and corporate security policies
• Maintain audit‑ready documentation for security processes and controls

Project & Support Activities

• Participate in SAP implementation, upgrade, migration, and enhancement projects
• Collaborate with business teams to understand access requirements
• Provide production support and resolve security incidents
• Understand and support custom T‑codes and authorization objects

Required Skills & Qualifications

• 5+ years of SAP Security & GRC experience
• Strong knowledge of SAP authorization concepts and role design
• Experience with SAP GRC Access Control 10.x / 12.x
• Knowledge of SoD concepts and compliance frameworks
• Experience with S/4HANA and Fiori security
• Strong analytical and troubleshooting skills
• Excellent communication and stakeholder management

Technical Skills

• SAP S/4HANA Security
• SAP GRC Access Control
• SAP Fiori Security
• SAP HANA Database Security
• Role design & authorization objects
• SoD analysis
• SU01, PFCG, SUIM, ST01, STAUTHTRACE, SU53
• Firefighter ID management

Soft Skills

• Problem‑solving mindset
• Attention to detail
• Team collaboration
• Time management
• Strong documentation and reporting skills