Remote SAP Security and GRC Access Control Specialist

Location: West Vancouver

NOVIPRO  is a specialized consulting firm in digital transformation and cybersecurity, supporting Canadian organizations in identifying and securing top-tier technical talent. We are currently recruiting on behalf of a major organization in the manufacturing sector to fill a critical role in SAP Security and GRC Access Control.

Title:

SAP Security and GRC Access Control Specialist

Contract Duration:  6 months

Workload:  35 hours per week

Work Arrangement:  100% remote within Canada (Eastern Time Zone)

Employment Type:

Contract

Citizenship/Work Authorization:  Must be legally authorized to work in Canada

Responsibilities

Administer and govern user access, role assignments, and authorization structures across multiple SAP landscapes, including ECC, S/4

HANA, BW, and Fiori-based environments.

Design, build, and maintain SAP security roles in alignment with Segregation of Duties (SoD) principles and least-privilege access models.

Operate and optimize SAP GRC Access Control modules—Access Risk Analysis (ARA), Emergency Access Management (EAM), Business Role Management (BRM), and Compliant User Provisioning (CUP).

Configure and maintain risk analysis rules, access request workflows, and emergency access procedures.

Collaborate with cross-functional teams including business process owners, internal audit, and IT security teams to define and uphold access governance policies.

Perform periodic reviews of sensitive access and critical authorizations; analyze SAP security audit logs and address identified anomalies.

Support project delivery involving SAP role redesign, access remediation, or user migration during system upgrades or corporate acquisitions.

Enhance and document SAP security standards, methodologies, and internal control frameworks to ensure continued compliance with regulatory mandates (e.g., SOX, GDPR).

Required experience and expertise

Over 10 years of overall experience in cybersecurity, with a strong emphasis on enterprise-level identity and access governance.

5 to 10 years of direct experience in SAP security administration and GRC Access Control, including role design, SoD mitigation, and SAP security audits.

Expertise in SAP S/4

HANA authorization models, including Fiori tile/group/catalog management and HANA database-level privileges.

Proven participation in SAP S/4

HANA implementation or migration projects, with a focus on role architecture and access provisioning.

Strong proficiency in SAP authorization frameworks (PFCG, SU01, SUIM, ST01), user lifecycle management, and custom role modeling.

Hands-on experience with SAP GRC Access Control, particularly the ARA (Access Risk Analysis) and EAM (Emergency Access Management) modules.

Solid understanding of compliance and control standards such as SOX, GDPR, and ITGC.

Ability to work in a globally distributed, multicultural environment, adapting to cross-functional collaboration and remote coordination.

Assets:

SAP Certifications such as:

SAP Certified Technology Associate – System Security Architect

SAP Certified Associate – GRC Access Control