ERP Security & GRC Analyst

Job Description

Location

Vancouver, BC, Canada

Employment Type

Contractor

Workplace Type

Hybrid

• About our Vancouver Office
• Located in the heart of downtown Vancouver, between the Pacific Ocean and the Coast Mountains, Teck’s Corporate Office sits in one of Canada’s most culturally diverse cities.

Surrounded by world-renowned nature and globally inspired cuisine, the office brings together many of Teck’s corporate functions - all working toward Teck’s purpose of providing the essential resources the world relies on.

Role Overview

Reporting to the Lead, ERP Security, the SAP GRC and IAG Analyst is responsible for supporting SAP application security, governance, risk, and compliance activities across SAP landscapes. This role assists in maintaining secure and compliant access controls, supporting SAP GRC and Identity Access Governance (IAG) processes, and ensuring alignment with organizational security and compliance requirements.

Working closely with business users, SAP functional teams, auditors, cybersecurity teams, and technical partners, the analyst helps coordinate SAP security roles, access governance processes, and compliance controls. The role supports SAP S/4HANA and cloud-based SAP applications while contributing to access management, risk mitigation, audit readiness, and continuous improvement initiatives.

This position requires foundational experience in SAP Security, SAP GRC, and Identity Access Governance (IAG), along with strong analytical, documentation, and collaborator communication skills.

• This is an initial one-year contract.
• Don't miss out on this outstanding opportunity to be part of one of Canada's leading mining companies and join our team!
• Responsibilities

Safety & Compliance

• Be a courageous safety leader, adhere to and sponsor safety and environmental rules and procedures
• Support compliance with audit requirements, access management standards, and IT General Controls (ITGC).
• Assist with Segregation of Duties (SoD) monitoring, mitigation activities, and access reviews.
• Follow established security, change coordination, and governance processes.
• Support audit evidence collection and remediation activities.
• SAP Security Administration & Access Management
• Support the coordination and continual support of SAP security roles, profiles, and user access.
• Assist with user provisioning, access modifications, deprovisioning, and role assignments.
• Perform access analysis and support role design activities in accordance with security standards.
• Assist in maintaining security documentation, role matrices, and access governance procedures.
• Support periodic user access reviews and certification activities.
• Collaborate with business and technical teams to ensure appropriate access controls are maintained.
• SAP GRC & IAG Administration
• Support the ongoing administration and maintenance of SAP GRC and Identity Access Governance (IAG) solutions.
• Assist with access requests, approvals, provisioning workflows, and risk analysis activities.
• Perform Segregation of Duties (SoD) reviews and support remediation efforts.
• Maintain risk documentation, mitigation controls, and compliance records.
• Assist with process testing and validation of governance and compliance controls.
• Support integration and monitoring activities related to SAP GRC and IAG environments.
• SAP Security Governance & Documentation
• Gather, analyze, and detail organizational and technical needs related to SAP Security and GRC processes.
• Maintain security procedures, standards, and operational documentation.
• Document and support IT Service Management (ITSM) processes related to SAP Security and GRC operations.
• Assist in developing process flows, work instructions, and compliance documentation.
• Support reporting efforts focused on protection measures and regulatory standards.

Qualifications

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Business Technology Management, or a related field, or an equivalent combination of education and experience.

• 2-3 years of experience in SAP Application Security and SAP GRC implementation or support.
• Understanding of SAP security concepts, authorization objects, role building, and processes for managing user permissions.
• Foundational knowledge of SAP solutions for governance, risk management, and compliance.
• Ability to interpret, examine, and detail business and technical requirements.
• Experience providing detailed IT service procedures connected to SAP Security and GRC or equivalent experience.
• Strong analytical, documentation, fix, and problem-solving skills.
• Experience collaborating with business users alongside technical teams to support access management and compliance activities.
• Ability to collaborate effectively with business, technical, and security collaborators.
• Good interpersonal, communication, and relationship-management skills.
• Demonstrated ability to document processes, analyze requirements, and support governance initiatives.
• Experience supporting compliance, audit, and identity management strategic direction activities.
• Ability to work effectively in a team-oriented environment.
• Experience within SAP S/4HANA or SAP cloud environments is seen as a positive attribute.

Nice-to-Have

• Exposure to SAP solutions for managing identity access controls.
• Knowledge of SAP S/4HANA security and authorization concepts.
• Familiarity with SAP cloud technologies such as SAP BTP, SAP Ariba, SAP Analytics Cloud (SAC), and SAP Cloud ALM.
• Understanding of Segregation of Duties (SoD), IT General Controls (ITGC), and compliance frameworks.
• Knowledge of identity and access management (IAM) concepts and solutions.
• Experience with security testing, user access reviews, and audit support activities.
• Familiarity with SAP Cloud Identity Services (IAS/IPS).
• Experience working in regulated industries with strong compliance and audit requirements.
• SAP Security or SAP GRC certifications are considered an asset.

Why Teck

At Teck, your work matters—to the