SAP Security – S/4HANA Migration

Infosys Limited; Montreal (administrative region); Hybrid; CAD 120,000 - 180,000; Full time

Job summary

Infosys Limited is seeking an SAP Security Lead for S/4HANA migration. You will design, implement and govern security strategies, manage roles, authorizations, and SoD controls while aligning with SAP Activate and CALM. The role requires ensuring SOX and GDPR compliance and overseeing security during cutover.

The ideal candidate has 11+ years in IT, with deep SAP security expertise, experience with GRC Access Control and SAP Cloud ALM. Relocation to Mississauga area may be needed.

Qualifications

• 11+ years of Information Technology experience.
• Candidates authorized to work in Canada without employer-based visa sponsorship.
• Located within commuting distance of Mississauga, Ontario or willing to relocate.

Responsibilities

• Define and implement SAP Security strategy for S/4HANA migration aligned with SAP Activate phases.
• Design and maintain roles and authorizations ensuring least privilege and compliance.
• Manage SAP GRC Access Control for risk analysis and SoD remediation.
• Lead security workshops during Explore phase and finalize security blueprint.
• Monitor security KPIs and support security during cutover and hypercare.

Skills

SAP Security

GRC Access Control

SAP Cloud ALM CALM

SOX & GDPR compliance

Security testing

Stakeholder management

Project governance

S/4HANA security concepts

Education

Bachelor’s degree or foreign equivalent

Tools

SAP GRC Access Control

SAP Cloud ALM (CALM)

Job description

Infosys is seeking SAP Security Lead – S/4HANA Migration. The SAP Security Lead will be responsible for designing, implementing, and governing security strategies for SAP S/4HANA migration projects. This includes managing roles and authorizations, ensuring compliance with SoD policies, and integrating SAP GRC solutions. The role requires alignment with SAP Activate methodology, oversight of security during cutover, and adherence to regulatory standards such as SOX and GDPR. Experience in working on SAP Cloud ALM (CALM).
Required Qualifications:

• Candidate must be located within commuting distance of Mississauga, Ontario or be willing to relocate to the area. This position may require travel.
• Bachelor’s degree or foreign equivalent required from an accredited institution. Will also consider three years of progressive experience in the specialty in lieu of every year of education.
• At least 11 years of Information Technology experience.
• Candidates authorized to work for any employer in Canada without employer-based visa sponsorship are welcome to apply. Infosys is unable to provide immigration sponsorship for this role at this time.

Infosys is seeking SAP Security Lead – S/4HANA Migration. The SAP Security Lead will be responsible for designing, implementing, and governing security strategies for SAP S/4HANA migration projects. This includes managing roles and authorizations, ensuring compliance with SoD policies, and integrating SAP GRC solutions. The role requires alignment with SAP Activate methodology, oversight of security during cutover, and adherence to regulatory standards such as SOX and GDPR. Experience in working on SAP Cloud ALM (CALM).
Required Qualifications:

• Candidate must be located within commuting distance of Mississauga, Ontario or be willing to relocate to the area. This position may require travel.
• Bachelor’s degree or foreign equivalent required from an accredited institution. Will also consider three years of progressive experience in the specialty in lieu of every year of education.
• At least 11 years of Information Technology experience.
• Candidates authorized to work for any employer in Canada without employer-based visa sponsorship are welcome to apply. Infosys is unable to provide immigration sponsorship for this role at this time.

Required Skills

• Define and implement SAP Security strategy for S/4HANA migration aligned with SAP Activate phases.
• Design and maintain roles and authorizations for SAP modules ensuring least privilege and compliance.
• Manage SAP GRC Access Control for risk analysis, firefighter IDs, and SoD violation remediation.
• Experience in working on SAP Cloud ALM (CALM).
• Conduct security workshops during Explore phase and finalize security blueprint.
• Coordinate with functional teams for security requirements and WRICEF governance.
• Perform security testing during SIT/UAT and validate access controls before go-live.
• Ensure compliance with SOX, GDPR, and organizational security standards.
• Lead cutover activities for security including role transports and emergency access provisioning.
• Monitor and report on security KPIs and audit findings.
• Provide knowledge transfer and training to support teams on security processes.
• 10+ years of experience in SAP Security with expertise in roles and authorizations.
• Hands‑on experience in SAP GRC Access Control including ARA, ARM, and firefighter management.
• Strong understanding of SAP S/4HANA security concepts and Fiori authorization model.
• Knowledge of SAP Activate methodology and project governance.
• Experience in SoD risk management and compliance frameworks.
• Ability to manage security during cutover and hypercare phases.
• Excellent communication and stakeholder management skills

Preferred Skills

• Experience with SAP Cloud Platform security and integration.
• Knowledge of Identity Management solutions and Single Sign-On (SSO).
• Exposure to automation tools for role provisioning and compliance reporting.
• Familiarity with Agile methodology and DevOps practices in SAP projects.

Responsable SAP Sécurité – Migration SAP S/4HANA

Infosys recherche un(e) Responsable SAP Sécurité – Migration SAP S/4HANA. Le titulaire du poste sera responsable de la conception, de la mise en œuvre et de la gouvernance des stratégies de sécurité pour les projets de migration vers SAP S/4HANA. Cela comprend la gestion des rôles et autorisations, la conformité aux politiques de séparation des tâches (SoD), ainsi que l’intégration des solutions SAP GRC. Le rôle exige un alignement sur la méthodologie SAP Activate, la supervision des activités de sécurité pendant les phases de bascule (cutover) et le respect des normes réglementaires telles que SOX et le RGPD. Une expérience de travail avec SAP Cloud ALM (CALM) est également requise.

Qualifications requises

• Le candidat doit être situé à une distance raisonnable de déplacement de Mississauga (Ontario) ou être disposé à s’y relocaliser. Ce poste peut nécessiter des déplacements.
• Diplôme universitaire (baccalauréat) ou équivalent étranger obtenu auprès d’un établissement accrédité. Une expérience professionnelle progressive de trois ans dans la spécialité pourra être considérée en remplacement de chaque année d’études manquante.
• Minimum de 11 ans d’expérience en technologies de l’information.
• Les candidats autorisés à travailler au Canada pour tout employeur, sans nécessité de parrainage d’un visa de travail, sont encouragés à postuler. Infosys n’est actuellement pas en mesure de fournir de soutien à l’immigration pour ce poste.

Compétences requises

• Définir et mettre en œuvre la stratégie de sécurité SAP pour les projets de migration S/4HANA conformément aux différentes phases de la méthodologie SAP Activate.
• Concevoir, gérer et maintenir les rôles et autorisations SAP tout en garantissant le principe du moindre privilège et la conformité.
• Administrer SAP GRC Access Control, y compris l’analyse des risques, les identifiants Firefighter et la remédiation des violations SoD.
• Expérience de travail avec SAP Cloud ALM (CALM).
• Animer des ateliers sur la sécurité durant la phase Explore et finaliser le plan directeur de sécurité.
• Collaborer avec les équipes fonctionnelles afin de définir les exigences de sécurité et assurer la gouvernance des objets WRICEF.
• Réaliser les tests de sécurité lors des phases SIT et UAT et valider les contrôles d’accès avant la mise en production.
• Assurer la conformité aux exigences SOX, RGPD (GDPR) et aux standards de sécurité de l’organisation.
• Diriger les activités de sécurité lors du cutover, notamment le transport des rôles et la mise à disposition des accès d’urgence.
• Surveiller et communiquer les indicateurs de performance (KPI) de sécurité ainsi que les résultats d’audit.
• Assurer le transfert des connaissances et la formation des équipes de support sur les processus de sécurité.
• Plus de 10 ans d’expérience en sécurité SAP avec une expertise approfondie des rôles et autorisations.
• Expérience pratique de SAP GRC Access Control, notamment ARA, ARM et la gestion des comptes Firefighter.
• Solide compréhension des concepts de sécurité SAP S/4HANA et du modèle d’autorisation SAP Fiori.
• Connaissance de la méthodologie SAP Activate et de la gouvernance de projets.
• Expérience en gestion des risques de séparation des tâches (SoD) et des cadres de conformité.
• Capacité à gérer la sécurité durant les phases de cutover et d’hypercare.
• Excellentes compétences en communication et en gestion des parties prenantes.

Compétences souhaitées

• Expérience en sécurité SAP Business Technology Platform (BTP) / SAP Cloud Platform et intégrations associées.
• Connaissance des solutions de gestion des identités (IdM) et de l’authentification unique (SSO).
• Expérience des outils d’automatisation pour le provisionnement des rôles et la production de rapports de conformité.
• Familiarité avec les méthodologies Agile et les pratiques DevOps dans les projets SAP.

About UsInfosys is a global leader in next-generation digital services and consulting. We enable clients in more than 50 countries to navigate their digital transformation. With over four decades of experience in managing the systems and workings of global enterprises, we expertly steer our clients through their digital journey. We do it by enabling the enterprise with an AI-powered core that helps prioritize the execution of change. We also empower the business with agile digital at scale to deliver unprecedented levels of performance and customer delight. Our always-on learning agenda drives their continuous improvement through building and transferring digital skills, expertise, and ideas from our innovation ecosystem.
EEOInfosys provides equal employment opportunities to applicants and employees without regard to race; color; sex; gender identity; sexual orientation; religious practices and observances; national origin; pregnancy, childbirth, or related medical conditions; status as a protected veteran or spouse/family member of a protected veteran; or disability. Infosys provides equal employment opportunities to applicants and employees without regard to race; color; sex; gender identity; sexual orientation; religious practices and observances; national origin; pregnancy, childbirth, or related medical conditions; status as a protected veteran or spouse/family member of a protected veteran; or disability.