NOVIPRO is a specialized consulting firm in digital transformation and cybersecurity, supporting Canadian organizations in identifying and securing top-tier technical talent. We are currently recruiting on behalf of a major organization in the manufacturing sector to fill a critical role in SAP Security and GRC Access Control.
Title: SAP Security and GRC Access Control Specialist
Contract Duration: 6 months
Workload: 35 hours per week
Work Arrangement: 100% remote within Canada (Eastern Time Zone)
Employment Type: Contract
Citizenship/Work Authorization: Must be legally authorized to work in Canada
Responsibilities
Administer and govern user access, role assignments, and authorization structures across multiple SAP landscapes, including ECC, S/4HANA, BW, and Fiori-based environments.
Design, build, and maintain SAP security roles in alignment with Segregation of Duties (SoD) principles and least-privilege access models.
Operate and optimize SAP GRC Access Control modules—Access Risk Analysis (ARA), Emergency Access Management (EAM), Business Role Management (BRM), and Compliant User Provisioning (CUP).
Configure and maintain risk analysis rules, access request workflows, and emergency access procedures.
Collaborate with cross-functional teams including business process owners, internal audit, and IT security teams to define and uphold access governance policies.
Perform periodic reviews of sensitive access and critical authorizations; analyze SAP security audit logs and address identified anomalies.
Support project delivery involving SAP role redesign, access remediation, or user migration during system upgrades or corporate acquisitions.
Enhance and document SAP security standards, methodologies, and internal control frameworks to ensure continued compliance with regulatory mandates (e.g., SOX, GDPR).
Required experience and expertise
Over 10 years of overall experience in cybersecurity, with a strong emphasis on enterprise-level identity and access governance.
5 to 10 years of direct experience in SAP security administration and GRC Access Control, including role design, SoD mitigation, and SAP security audits.
Expertise in SAP S/4HANA authorization models, including Fiori tile/group/catalog management and HANA database-level privileges.
Proven participation in SAP S/4HANA implementation or migration projects, with a focus on role architecture and access provisioning.
Strong proficiency in SAP authorization frameworks (PFCG, SU01, SUIM, ST01), user lifecycle management, and custom role modeling.
Hands-on experience with SAP GRC Access Control, particularly the ARA (Access Risk Analysis) and EAM (Emergency Access Management) modules.
Solid understanding of compliance and control standards such as SOX, GDPR, and ITGC.
Ability to work in a globally distributed, multicultural environment, adapting to cross-functional collaboration and remote coordination.
Assets:
SAP Certifications such as:
SAP Certified Technology Associate – System Security Architect
SAP Certified Associate – GRC Access Control
Remote SAP Security and GRC Access Control Specialist • Markham, Ontario
Shape the future of secure digital identity for leading financial services organisations.We are seeking a Security Architect with deep Customer Identity and Access Management (CIAM) expertise to su... Show more
Step into a critical leadership role as the Director of Access Request Control within our global security framework.This position emphasizes strategic compliance and operational excellence in manag... Show more
SAP Security Consultant needed to design security roles, conduct audits, and collaborate with teams.Requires 7-10 years of experience. Show more
Enterprise Security Specialist.Location: Stouffville, ON • Department: R&D • Reports to: Chief Technology Officer (CTO) • Salary: $120,000 - $135,000 • Openings: 1.Lead the development, implementat... Show more
Seeking a Senior Security Engineer to design and implement automation, dashboards, and integrations for GRC operations, focusing on audit readiness, policy enforcement, and customer trust workflows. Show more
Supports the security direction and posture of a health sciences center by managing governance, risk, and compliance initiatives.Recommends policy changes and assesses cybersecurity risks for vario... Show more
The OpportunityThe Tech Risk-SAP GRC team within EY's Business Consulting domain is looking for a dynamic person in the SAP Security, Controls, and SAP GRC space.This candidate will know how to... Show more
Seeking a GRC Senior Security Advisor for a financial institution in Toronto to manage risks and innovate security for emerging technologies like AI/GenAI and Cloud. Show more
Superprof is Canada's #1 tutoring platform, and we're actively recruiting passionate tutors! Whether you're a student, a professional, or simply someone who loves teaching, join the largest communi... Show more
We work across a broad project spectrum, supporting clients from initial engineering concepts through to energization and startup, always with a focus on efficiency and value.Protection and Control... Show more
FACILITY ACCESS CONTROL SUPERVISOR.Are you passionate about Safety & Security and seeking an opportunity to join ASP’s Commercial Security Team?.Incorporated has provided security and customer serv... Show more
Manage ERP security, user access, and compliance.Requires a Bachelor's degree and 3-5 years of experience with ERP systems like QAD, SAP, Oracle, or Dynamics. Show more
Seeking a Global Security Architect to define and govern end-to-end security solutions for global processes, data, people, and technology.Focus on cloud migration, secure containerization, and emer... Show more
Are you a seasoned Security Analyst passionate about Identity and Access Management? Apply Now!.Working with one of our top financial clients, this role calls for a Sr.Security Analyst - Identity a... Show more
As a Senior Security Analyst (SOC L3), you will be the top technical escalation point for security incidents, leading investigations and providing expert analysis across Microsoft security platform... Show more
Senior Cybersecurity Analyst responsible for governance, risk, and compliance in a logistics company.Develops policies, conducts assessments, and reports to senior leadership. Show more
Lead security initiatives for a database company, focusing on threat and data protection, product strategy, and KPI establishment.Requires 5+ years of experience and cloud familiarity. Show more
Leads ERP security and access management, ensuring compliance and monitoring user provisioning for a global technology firm. Show more
Leading security initiatives for a database technology company, focusing on threat and data protection, customer trust, and product strategy. Show more
The AIR MILES Reward Program is one of Canada’s most recognized loyalty programs, with over 10 million active collector accounts, representing more than half of all Canadian households.AIR MILES co... Show more
