Senior SAP Security & ITGC Specialist

Renew Cannabis Co.; Chicago, Northern (IL, KY); Hybrid; USD 120,000 - 170,000; Full time

Job summary

Verano Holdings Corp. in Chicago, IL, is seeking a Sr. Analyst to manage SAP Security, Access Management, and IT General Controls on SAP S/4HANA. You will design roles, enforce SoD, and govern Emergency Access while aligning with SOX and audit requirements.

This role partners with internal and external teams, drives control templates, and expands coverage to SAP Ariba and SuccessFactors as needed, ensuring timely evidence and strong governance across SAP products.

Qualifications

• 7+ years of hands-on SAP Security experience with strong role design, provisioning, and access-management depth.
• Experience with SAP GRC (Access Control 12.0) is a strong plus.
• Own and execute SAP-specific ITGCs at control-owner level; include reviews and logs.
• Remediate SOX/ITGC findings systemically and with audit support.
• Knowledge of Fastpath or similar tools for monitoring and SoD analysis.

Responsibilities

• Manage SAP role design, provisioning, and de-provisioning aligned to business roles and least-privilege principles.
• Design and maintain SoD ruleset; own analysis, mitigation, and remediation across SAP apps.
• Own Firefighter governance — request, approval, monitoring, and log review.
• Support integration of SAP security events with the enterprise SIEM.
• Serve as control owner for SAP-specific ITGCs and execute reviews and evidence collection.
• Maintain/improve control templates; ensure evidence retention and reviewer instructions.
• Track and remediate findings; collaborate with Internal/External Auditors.
• Lead collaboration with external AMS partners and cross-functional teams; expand coverage to SAP Ariba and SuccessFactors.

Skills

SAP Security

Access Management

SoD analysis

ITGC execution

Audit readiness

GRC tools

Tools

Fastpath

CSI

Pathlock

Job description

Verano Holdings Corp. in Chicago, IL, is seeking a Sr. Analyst to manage SAP Security, Access Management, and IT General Controls on SAP S/4HANA. You will design roles, enforce SoD, and govern Emergency Access while aligning with SOX and audit requirements.

This role partners with internal and external teams, drives control templates, and expands coverage to SAP Ariba and SuccessFactors as needed, ensuring timely evidence and strong governance across SAP products.