NOVIPRO is a specialized consulting firm in digital transformation and cybersecurity, supporting Canadian organizations in identifying and securing top-tier technical talent. We are currently recruiting on behalf of a major organization in the manufacturing sector to fill a critical role in SAP Security and GRC Access Control.
Title: SAP Security and GRC Access Control Specialist
Contract Duration: 6 months
Workload: 35 hours per week
Work Arrangement: 100% remote within Canada (Eastern Time Zone)
Employment Type: Contract
Citizenship/Work Authorization: Must be legally authorized to work in Canada
Responsibilities
Administer and govern user access, role assignments, and authorization structures across multiple SAP landscapes, including ECC, S/4HANA, BW, and Fiori-based environments.
Design, build, and maintain SAP security roles in alignment with Segregation of Duties (SoD) principles and least-privilege access models.
Operate and optimize SAP GRC Access Control modules—Access Risk Analysis (ARA), Emergency Access Management (EAM), Business Role Management (BRM), and Compliant User Provisioning (CUP).
Configure and maintain risk analysis rules, access request workflows, and emergency access procedures.
Collaborate with cross-functional teams including business process owners, internal audit, and IT security teams to define and uphold access governance policies.
Perform periodic reviews of sensitive access and critical authorizations; analyze SAP security audit logs and address identified anomalies.
Support project delivery involving SAP role redesign, access remediation, or user migration during system upgrades or corporate acquisitions.
Enhance and document SAP security standards, methodologies, and internal control frameworks to ensure continued compliance with regulatory mandates (e.g., SOX, GDPR).
Required experience and expertise
Over 10 years of overall experience in cybersecurity, with a strong emphasis on enterprise-level identity and access governance.
5 to 10 years of direct experience in SAP security administration and GRC Access Control, including role design, SoD mitigation, and SAP security audits.
Expertise in SAP S/4HANA authorization models, including Fiori tile/group/catalog management and HANA database-level privileges.
Proven participation in SAP S/4HANA implementation or migration projects, with a focus on role architecture and access provisioning.
Strong proficiency in SAP authorization frameworks (PFCG, SU01, SUIM, ST01), user lifecycle management, and custom role modeling.
Hands-on experience with SAP GRC Access Control, particularly the ARA (Access Risk Analysis) and EAM (Emergency Access Management) modules.
Solid understanding of compliance and control standards such as SOX, GDPR, and ITGC.
Ability to work in a globally distributed, multicultural environment, adapting to cross-functional collaboration and remote coordination.
Assets:
SAP Certifications such as:
SAP Certified Technology Associate – System Security Architect
SAP Certified Associate – GRC Access Control
Remote SAP Security and GRC Access Control Specialist • Levis, Quebec
A technology company in Canada is seeking a Staff Software Engineer specializing in Security to lead and mentor engineers within the Security & Privacy team.The successful candidate will drive appl... Show more
A technology firm is seeking a Technical Marketing Leader to create compelling product narratives and technical content.This remote role requires a strong engineering background and experience in t... Show more
Security Governance, Risk and Compliance Specialist.Having recognized the advantages of remote work, such as improved employee morale, increased productivity, and positive impacts on both employee ... Show more
A leading cybersecurity consultancy in Montreal is seeking a Governance, Risk & Compliance Consultant.The role requires 5-8 years of experience in IT security and risk management, with a deep under... Show more
An established industry player is on the lookout for a dynamic Sales Manager to lead their sales team.This role is pivotal in driving revenue growth and fostering strong client relationships.The id... Show more
Management Consultant / Business Strategy Specialist.AI data lab for training frontier models and evaluating AI agents.Experts contribute their diverse subject matter knowledge across domains such ... Show more
Looking for people to participate in taking online surveys for Fortune 500 brands.All you need to do is complete online surveys by sharing your opinion.You will help influence brand decisions on se... Show more
Experience Level: Level 4 (7-15 years).Support the DCO and/or wider team to develop or enhance risk, control changes or improvements specific to Technology, Information Security or Cyber Security.S... Show more
Become a key player in network security as a Sales Engineering Specialist.Provide technical expertise that drives customer satisfaction and solution alignment, all while working remotely anywhere i... Show more
A healthcare technology company is seeking an experienced Security Architect responsible for designing and implementing security within their architecture.The role involves collaborating with cross... Show more
Consults clients on cybersecurity threats, performing web application and mobile security assessments, and providing technical expertise to mitigate risks. Show more
A leading IT services firm is seeking an Information Control Testing Specialist to manage information risk and ensure compliance with security policies.You will work on global initiatives, conduct ... Show more
Be among the first 25 applicants.Cyderes (Cyber Defense and Response) is a pure-play, full life-cycle cybersecurity services provider with award-winning managed security services, identity and acce... Show more
Join a forward-thinking company as a Security Governance, Risk, and Compliance Specialist, where your expertise will be pivotal in enhancing security measures and compliance frameworks.In this role... Show more
Get AI-powered advice on this job and more exclusive features.Direct message the job poster from Coveo.Looking for exceptional talent to join us @ Coveo.Please note that this role is open hybrid, i... Show more
A leading consulting firm is looking for a Cyber Security Support Specialist in Bruce County, Canada.This primarily remote role involves developing technical documentation and supporting governance... Show more
A leading cybersecurity company is seeking a Domain Consultant in Vancouver to provide expertise in network security transformation.This role involves collaborating with sales teams and leading cus... Show more
A consulting and technology expertise company is seeking an experienced Senior IT and Security Administrator specializing in Malware Protection technologies.The ideal candidate will have a strong b... Show more
A leading technology consulting firm is seeking an IT Security Analyst to support the IAM Governance team.The role involves overseeing access management and ensuring compliance with security measur... Show more
An established industry player is seeking a Principal Consultant specializing in Enterprise Security.This role focuses on assisting clients in securing their digital environments and fostering trus... Show more
