NOVIPRO is a specialized consulting firm in digital transformation and cybersecurity, supporting Canadian organizations in identifying and securing top-tier technical talent. We are currently recruiting on behalf of a major organization in the manufacturing sector to fill a critical role in SAP Security and GRC Access Control.
Title: SAP Security and GRC Access Control Specialist
Contract Duration: 6 months
Workload: 35 hours per week
Work Arrangement: 100% remote within Canada (Eastern Time Zone)
Employment Type: Contract
Citizenship/Work Authorization: Must be legally authorized to work in Canada
Responsibilities
Administer and govern user access, role assignments, and authorization structures across multiple SAP landscapes, including ECC, S/4HANA, BW, and Fiori-based environments.
Design, build, and maintain SAP security roles in alignment with Segregation of Duties (SoD) principles and least-privilege access models.
Operate and optimize SAP GRC Access Control modules—Access Risk Analysis (ARA), Emergency Access Management (EAM), Business Role Management (BRM), and Compliant User Provisioning (CUP).
Configure and maintain risk analysis rules, access request workflows, and emergency access procedures.
Collaborate with cross-functional teams including business process owners, internal audit, and IT security teams to define and uphold access governance policies.
Perform periodic reviews of sensitive access and critical authorizations; analyze SAP security audit logs and address identified anomalies.
Support project delivery involving SAP role redesign, access remediation, or user migration during system upgrades or corporate acquisitions.
Enhance and document SAP security standards, methodologies, and internal control frameworks to ensure continued compliance with regulatory mandates (e.g., SOX, GDPR).
Required experience and expertise
Over 10 years of overall experience in cybersecurity, with a strong emphasis on enterprise-level identity and access governance.
5 to 10 years of direct experience in SAP security administration and GRC Access Control, including role design, SoD mitigation, and SAP security audits.
Expertise in SAP S/4HANA authorization models, including Fiori tile/group/catalog management and HANA database-level privileges.
Proven participation in SAP S/4HANA implementation or migration projects, with a focus on role architecture and access provisioning.
Strong proficiency in SAP authorization frameworks (PFCG, SU01, SUIM, ST01), user lifecycle management, and custom role modeling.
Hands-on experience with SAP GRC Access Control, particularly the ARA (Access Risk Analysis) and EAM (Emergency Access Management) modules.
Solid understanding of compliance and control standards such as SOX, GDPR, and ITGC.
Ability to work in a globally distributed, multicultural environment, adapting to cross-functional collaboration and remote coordination.
Assets:
SAP Certifications such as:
SAP Certified Technology Associate – System Security Architect
SAP Certified Associate – GRC Access Control
Remote SAP Security and GRC Access Control Specialist • Burlington, Ontario
A leading consulting firm is looking for a Cyber Security Support Specialist in Bruce County, Canada.This primarily remote role involves developing technical documentation and supporting governance... Voir plus
A logistics company in Mississauga seeks a Senior Cybersecurity Analyst overseeing governance, risk management, and compliance aspects of the security program.The role involves developing policies,... Voir plus
A leading IT services firm is seeking an Information Control Testing Specialist to manage information risk and ensure compliance with security policies.You will work on global initiatives, conduct ... Voir plus
A cybersecurity consulting firm is seeking a Senior Cyber Security Architect in Mississauga to provide enterprise-level security architecture leadership.The ideal candidate will possess 8-12 years ... Voir plus
Become a key player in network security as a Sales Engineering Specialist.Provide technical expertise that drives customer satisfaction and solution alignment, all while working remotely anywhere i... Voir plus
McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare.We are known for delivering insights, products, and services that make quality care more accessibl... Voir plus
Join a forward-thinking company as a Security Governance, Risk, and Compliance Specialist, where your expertise will be pivotal in enhancing security measures and compliance frameworks.In this role... Voir plus
Security Governance, Risk and Compliance Specialist.Having recognized the advantages of remote work, such as improved employee morale, increased productivity, and positive impacts on both employee ... Voir plus
A leading cybersecurity consultancy in Montreal is seeking a Governance, Risk & Compliance Consultant.The role requires 5-8 years of experience in IT security and risk management, with a deep under... Voir plus
A leading cybersecurity company is seeking a Domain Consultant in Vancouver to provide expertise in network security transformation.This role involves collaborating with sales teams and leading cus... Voir plus
A leading technology consulting firm is seeking an IT Security Analyst to support the IAM Governance team.The role involves overseeing access management and ensuring compliance with security measur... Voir plus
An established industry player is on the lookout for a dynamic Sales Manager to lead their sales team.This role is pivotal in driving revenue growth and fostering strong client relationships.The id... Voir plus
A consulting and technology expertise company is seeking an experienced Senior IT and Security Administrator specializing in Malware Protection technologies.The ideal candidate will have a strong b... Voir plus
A healthcare technology company is seeking an experienced Security Architect responsible for designing and implementing security within their architecture.The role involves collaborating with cross... Voir plus
At CDW, we make it happen, together.Trust, connection, and commitment are at the heart of how we work together to deliver for our customers.It’s why we’re coworkers, not just employees.Coworkers wh... Voir plus
A cybersecurity company is seeking a remote Domain Consultant specializing in network security transformation.This role requires over 6 years in pre-sales within Zero Trust and Networking, excellen... Voir plus
McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare.We are known for delivering insights, products, and services that make quality care more accessibl... Voir plus
Looking for people to participate in taking online surveys for Fortune 500 brands.All you need to do is complete online surveys by sharing your opinion.You will help influence brand decisions on se... Voir plus
This position is designed for a senior‐level subject matter expert (SME) who brings both deep hands‐on engineering capability and strategic architectural leadership.You will lead the design and evo... Voir plus
Seeking a Senior Security Development Engineer for a remote, permanent role focusing on Identity and Access Management.The position involves modernizing authentication systems and maintaining exist... Voir plus
