Our Client is seeking an SAP GRC Specialist to ensure the integrity, security, and compliance of SAP (SAP S/4 HANA and other tool suite) systems by managing access controls, risk assessments, and audit processes. This role collaborates with IT security, audit, and business teams to implement and maintain GRC solutions that align with organizational policies, industry standards and regulatory requirements.
While this role is remote, must be Canadian Citizen to apply and work within Canada at all times.
Bachelor’s Degree required in computer or applied science, business, or a related field.
8-10 years of progressive experience in the area of GRC and Admin roles with earlier experience leading similar teams.
Experience in SAP authorization and access control, managing user roles, authorizations, and profiles.
Familiarity with various SAP modules such as FI (Financial Accounting), HR (Human Resources), MM (Materials Management), and PM (Plant Maintenance) and assets.
Knowledge of Governance, Risk, and Compliance modules, including Access Control, Process Control, and Risk Management.
Strong application security foundational/implementation expertise in SAP S/4HANA, SAP GRC Access Control and SAP IAG Bridge scenario.
Ability to troubleshoot and resolve security and configuration defects/issues that are part of SAP S/4HANA, Fiori, SAP GRC Access Control and SAP IAG.
Experience in leading/ being part of security workshops and discussions with project/business users.
Design and implement new authorization concepts along with business departments and IT stakeholders.
Strong knowledge of Internal Controls, SoD(s), and its implications in SAP Application security.
Work with Controls Governance and IT teams to ensure a holistic approach is taken to remediate Corporate Audit findings related to SoD(s).
Able to work cross-functionally with business and technical teams to achieve cohesive solutions.
Anticipates challenges and mitigates them before they affect the project.
Clearly and effectively communicates technical concepts to both technical and non-technical stakeholders.
Detailed-oriented, pays close attention to the intricacies of technical implementation, ensuring high-quality outcomes.
Previous project experience in SAP S/4HANA transformation projects.
Knowledge of audit/compliance, privacy and regulatory requirements and its applications in SAP application security design.
Experience in creating Business Rules using BRF+ and MSMP workflows, configurations, analyzing and Identifying issues in MSMP workflows and recommending solutions for the same.
Must have in-depth knowledge and experience in SAP GRC Access control functionalities ARM, ARA, EAM and BRM and Process Control functionalities – CCM and Manual Control monitoring.
Independently handle the Configurations, maintain Master data both in Access control and Process Control. Including MDUG template preparation and upload.
Administration of SAP GRC configuration, SOD rule sets, workflows and maintaining approvers for user provisioning, emergency access.
Expertise in design and deliver SAP IAG solution tailoring to organization’s requirements.
Would be an asset to have certifications like SAP GRC certifications, CRISC, CISA, or similar.
