NOVIPRO is a specialized consulting firm in digital transformation and cybersecurity, supporting Canadian organizations in identifying and securing top-tier technical talent. We are currently recruiting on behalf of a major organization in the manufacturing sector to fill a critical role in SAP Security and GRC Access Control.
Title: SAP Security and GRC Access Control Specialist
Contract Duration: 6 months
Workload: 35 hours per week
Work Arrangement: 100% remote within Canada (Eastern Time Zone)
Employment Type: Contract
Citizenship/Work Authorization: Must be legally authorized to work in Canada
Responsibilities
Administer and govern user access, role assignments, and authorization structures across multiple SAP landscapes, including ECC, S/4HANA, BW, and Fiori-based environments.
Design, build, and maintain SAP security roles in alignment with Segregation of Duties (SoD) principles and least-privilege access models.
Operate and optimize SAP GRC Access Control modules—Access Risk Analysis (ARA), Emergency Access Management (EAM), Business Role Management (BRM), and Compliant User Provisioning (CUP).
Configure and maintain risk analysis rules, access request workflows, and emergency access procedures.
Collaborate with cross-functional teams including business process owners, internal audit, and IT security teams to define and uphold access governance policies.
Perform periodic reviews of sensitive access and critical authorizations; analyze SAP security audit logs and address identified anomalies.
Support project delivery involving SAP role redesign, access remediation, or user migration during system upgrades or corporate acquisitions.
Enhance and document SAP security standards, methodologies, and internal control frameworks to ensure continued compliance with regulatory mandates (e.g., SOX, GDPR).
Required experience and expertise
Over 10 years of overall experience in cybersecurity, with a strong emphasis on enterprise-level identity and access governance.
5 to 10 years of direct experience in SAP security administration and GRC Access Control, including role design, SoD mitigation, and SAP security audits.
Expertise in SAP S/4HANA authorization models, including Fiori tile/group/catalog management and HANA database-level privileges.
Proven participation in SAP S/4HANA implementation or migration projects, with a focus on role architecture and access provisioning.
Strong proficiency in SAP authorization frameworks (PFCG, SU01, SUIM, ST01), user lifecycle management, and custom role modeling.
Hands-on experience with SAP GRC Access Control, particularly the ARA (Access Risk Analysis) and EAM (Emergency Access Management) modules.
Solid understanding of compliance and control standards such as SOX, GDPR, and ITGC.
Ability to work in a globally distributed, multicultural environment, adapting to cross-functional collaboration and remote coordination.
Assets:
SAP Certifications such as:
SAP Certified Technology Associate – System Security Architect
SAP Certified Associate – GRC Access Control
Remote SAP Security and GRC Access Control Specialist • Mississauga, Ontario
Mississauga (3 days a week onsite) Key Responsibilities & Deliverables: Integrate security controls into CI/CD pipelines (SAST, DAST, SCA, secrets scanning) Build and maintain security automa... Voir plus
A leading IT services firm is seeking an Information Control Testing Specialist to manage information risk and ensure compliance with security policies.You will work on global initiatives, conduct ... Voir plus
Purolator is one of Canada’s leading integrated freight, package, and logistics solutions providers, delivering dependable service to customers across the country.Security is a core enabler of Puro... Voir plus
Become a key player in network security as a Sales Engineering Specialist.Provide technical expertise that drives customer satisfaction and solution alignment, all while working remotely anywhere i... Voir plus
A leading IT security firm in Richmond Hill is looking for an IT Security Risk Analyst to support their Information Security Risk Management programs.The role requires expertise in risk assessments... Voir plus
A leading cybersecurity consultancy in Montreal is seeking a Governance, Risk & Compliance Consultant.The role requires 5-8 years of experience in IT security and risk management, with a deep under... Voir plus
A leading cybersecurity company is seeking a Domain Consultant in Vancouver to provide expertise in network security transformation.This role involves collaborating with sales teams and leading cus... Voir plus
A leading technology consulting firm is seeking an IT Security Analyst to support the IAM Governance team.The role involves overseeing access management and ensuring compliance with security measur... Voir plus
A leading consulting firm is looking for a Cyber Security Support Specialist in Bruce County, Canada.This primarily remote role involves developing technical documentation and supporting governance... Voir plus
AI data lab for training frontier models and evaluating AI agents.Experts contribute their diverse subject matter knowledge across domains such as finance, healthcare, STEM engineering, and more.AI... Voir plus
Looking for people to participate in taking online surveys for Fortune 500 brands.All you need to do is complete online surveys by sharing your opinion.You will help influence brand decisions on se... Voir plus
An established industry player is on the lookout for a dynamic Sales Manager to lead their sales team.This role is pivotal in driving revenue growth and fostering strong client relationships.The id... Voir plus
A consulting and technology expertise company is seeking an experienced Senior IT and Security Administrator specializing in Malware Protection technologies.The ideal candidate will have a strong b... Voir plus
Join a forward-thinking company as a Security Governance, Risk, and Compliance Specialist, where your expertise will be pivotal in enhancing security measures and compliance frameworks.In this role... Voir plus
A healthcare technology company is seeking an experienced Security Architect responsible for designing and implementing security within their architecture.The role involves collaborating with cross... Voir plus
At CDW, we make it happen, together.Trust, connection, and commitment are at the heart of how we work together to deliver for our customers.It’s why we’re coworkers, not just employees.Coworkers wh... Voir plus
Elevate your expertise at Arcadis by becoming a Senior Nuclear Practice Leader focusing on radiation risk and compliance.This role emphasizes leadership and mentorship within a growing team.As a Se... Voir plus
Seeking a Senior Security Development Engineer for a remote, permanent role focusing on Identity and Access Management.The position involves modernizing authentication systems and maintaining exist... Voir plus
IAM Security Architect (Hybrid) - Toronto.Our client, the top national telecommunication company is looking for a Senior IAM Security Architect.They drive large-scale, complex, and high-visibility ... Voir plus
Director, Enterprise Risk Management – IT Security & Cyber Risk.Sagen is Canada’s leading private mortgage insurance company making home ownership more accessible to first time homebuyers.For the p... Voir plus
