NOVIPRO is a specialized consulting firm in digital transformation and cybersecurity, supporting Canadian organizations in identifying and securing top-tier technical talent. We are currently recruiting on behalf of a major organization in the manufacturing sector to fill a critical role in SAP Security and GRC Access Control.
Title: SAP Security and GRC Access Control Specialist
Contract Duration: 6 months
Workload: 35 hours per week
Work Arrangement: 100% remote within Canada (Eastern Time Zone)
Employment Type: Contract
Citizenship/Work Authorization: Must be legally authorized to work in Canada
Responsibilities
Administer and govern user access, role assignments, and authorization structures across multiple SAP landscapes, including ECC, S/4HANA, BW, and Fiori-based environments.
Design, build, and maintain SAP security roles in alignment with Segregation of Duties (SoD) principles and least-privilege access models.
Operate and optimize SAP GRC Access Control modules—Access Risk Analysis (ARA), Emergency Access Management (EAM), Business Role Management (BRM), and Compliant User Provisioning (CUP).
Configure and maintain risk analysis rules, access request workflows, and emergency access procedures.
Collaborate with cross-functional teams including business process owners, internal audit, and IT security teams to define and uphold access governance policies.
Perform periodic reviews of sensitive access and critical authorizations; analyze SAP security audit logs and address identified anomalies.
Support project delivery involving SAP role redesign, access remediation, or user migration during system upgrades or corporate acquisitions.
Enhance and document SAP security standards, methodologies, and internal control frameworks to ensure continued compliance with regulatory mandates (e.g., SOX, GDPR).
Required experience and expertise
Over 10 years of overall experience in cybersecurity, with a strong emphasis on enterprise-level identity and access governance.
5 to 10 years of direct experience in SAP security administration and GRC Access Control, including role design, SoD mitigation, and SAP security audits.
Expertise in SAP S/4HANA authorization models, including Fiori tile/group/catalog management and HANA database-level privileges.
Proven participation in SAP S/4HANA implementation or migration projects, with a focus on role architecture and access provisioning.
Strong proficiency in SAP authorization frameworks (PFCG, SU01, SUIM, ST01), user lifecycle management, and custom role modeling.
Hands-on experience with SAP GRC Access Control, particularly the ARA (Access Risk Analysis) and EAM (Emergency Access Management) modules.
Solid understanding of compliance and control standards such as SOX, GDPR, and ITGC.
Ability to work in a globally distributed, multicultural environment, adapting to cross-functional collaboration and remote coordination.
Assets:
SAP Certifications such as:
SAP Certified Technology Associate – System Security Architect
SAP Certified Associate – GRC Access Control
Remote SAP Security and GRC Access Control Specialist • Newmarket, Ontario
As a Senior Security Analyst (SOC L3), you will be the top technical escalation point for security incidents, leading investigations and providing expert analysis across Microsoft security platform... Voir plus
The Tech Risk-SAP GRC team within EY’s Business Consulting domain is looking for a dynamic person in the SAP Security, Controls, and SAP GRC space.This candidate will know how to help clients ident... Voir plus
A leading security consulting firm is seeking a Security Specialist remotely to ensure compliance with safety protocols.The role requires strong skills in interpreting protection plans, evaluating ... Voir plus
A leading database technology company in Toronto is hiring a Security Product Manager to lead initiatives safeguarding customer trust.The role involves developing product strategies, collaborating ... Voir plus
London Health Sciences Centre (LHSC) is a world-class academic health sciences centre located in the southwestern Ontario city of London.Just two hours from Toronto and two hours from Detroit, Lond... Voir plus
As a Senior Associate in Enterprise Technology Risk Solutions, you will assist clients in developing analytics and technology solutions that detect, monitor, and predict risk.You will focus on esta... Voir plus
The Security GRC Specialist will manage the risk management lifecycle, monitor findings, and report metrics to senior leadership. Voir plus
Senior Cybersecurity Analyst responsible for governance, risk, and compliance in a logistics company.Develops policies, conducts assessments, and reports to senior leadership. Voir plus
The OpportunityThe Tech Risk-SAP GRC team within EY's Business Consulting domain is looking for a dynamic person in the SAP Security, Controls, and SAP GRC space.This candidate will know how to... Voir plus
Password is growing faster than ever.We’ve surpassed $400M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up with iconic partn... Voir plus
This position is designed for a senior‑level subject matter expert (SME) who brings both deep hands‑on engineering capability and strategic architectural leadership.You will lead the design and evo... Voir plus
About the job SAP Security Support Analyst - ECCRole:SAP Security Support Analyst - ECCType:ContractDuration:6 months to start + long term renewalsRate:$45-50 CDN/hr C2C depending on overall experi... Voir plus
Experienced GRC Consultant needed for a technology solutions firm to lead cybersecurity audits and assessments, enhancing client security postures remotely. Voir plus
A technology solutions firm in Canada seeks an experienced Managing Consultant in Governance, Risk, and Compliance.This role involves leading cybersecurity audits and assessments for various client... Voir plus
A leading global technology company is seeking an ERP Security Specialist responsible for managing ERP security, including user access provisioning and monitoring compliance with segregation of dut... Voir plus
Join a forward-thinking company as a Security Governance, Risk, and Compliance Specialist, where your expertise will be pivotal in enhancing security measures and compliance frameworks.In this role... Voir plus
As Director of Access Request Control, your primary objective is to establish and maintain a robust access request control framework that ensures compliance with regulatory requirements and drives ... Voir plus
Seeking an ERP Security Specialist to manage ERP security, user access, and compliance.Requires a Bachelor's degree and 3-5 years of ERP security experience. Voir plus
Are you a seasoned Security Analyst passionate about Identity and Access Management? Apply Now!.Working with one of our top financial clients, this role calls for a Sr.Security Analyst - Identity a... Voir plus
Why Colliers?Accelerate your success at Colliers.As one of Canada's leading commercial real estate services firms, we are driven by our mission to accelerate success for our people, clients, an... Voir plus
