ERP Security & GRC Specialist

Job Description

Location

Toronto, ON, Canada

Employment Type

Contractor

Workplace Type

Hybrid

Job Status

Vacant

About our Toronto Office

• Located in the heart of Toronto’s Financial District, this vibrant location places you at the center of Canada’s bustling economic hub.
• Surrounded by world-class dining, cultural landmarks, parks, and harbor views, you’ll experience the energy of one of North America’s most diverse and thriving cities.

Role Overview

Reporting to the Lead, ERP Security, the SAP GRC & IAG Specialist is responsible for the design, implementation, administration, and continuous improvement of SAP Governance, Risk and Compliance (GRC) and SAP Cloud Identity Access Governance (IAG) solutions. This role ensures secure and compliant access management across SAP landscapes while supporting risk mitigation, regulatory compliance, and internal control objectives.

Working closely with business collaborators, audit teams, SAP functional and technical teams, and cybersecurity partners, the analyst translates governance and compliance requirements into scalable SAP security and access control solutions. The role supports SAP S/4HANA, SAP cloud applications, and enterprise-wide identity and access management initiatives while ensuring alignment with IT General Controls (ITGC), Segregation of Duties (SoD), and compliance frameworks.

This position requires strong expertise in SAP GRC, SAP IAG, SAP Application Security, and cloud-based SAP security solutions, combined with excellent analytical, documentation, and collaborator management capabilities.

• This is an initial one-year contract.
• Don't miss out on this outstanding opportunity to be part of one of Canada's leading mining companies and join our team!
• Key Accountabilities

Safety & Compliance

• Be a courageous safety leader, adhere to and sponsor safety and environmental rules and procedures
• Support compliance with regulatory, audit, and internal control requirements across SAP platforms.
• Ensure Segregation of Duties (SoD), access governance, and user provisioning activities meet organizational standards.
• Participate in internal and external audits and support remediation of security and compliance findings.
• Maintain compliance with IT General Controls (ITGC), organisational change, and access management policies.
• SAP Security, Governance & Compliance Strategy
• Support the development and execution of SAP security, governance, and compliance strategies.
• Provide mentorship on SAP GRC and SAP IAG guidelines, security standards, and access control frameworks.
• Collaborate with business and technical collaborators to define governance requirements and access control models.
• Support risk assessments and compliance initiatives across SAP applications and cloud solutions.
• Provide recommendations for continuous improvement of SAP security and compliance processes.
• Assist in defining role design standards and governance processes aligned with SAP security best practices.
• SAP GRC & IAG Administration
• Configure, implement, and support SAP GRC Access Control and SAP Identity Access Governance (IAG) solutions.
• Manage access request workflows, role provisioning, risk analysis, risk remediation, and emergency access management processes.
• Perform Segregation of Duties (SoD) analysis and support controls remediation activities.
• Maintain risk rulesets, mitigation controls, and compliance monitoring processes.
• Support user access reviews, certifications, and periodic compliance assessments.
• Configure and maintain integration between SAP GRC, IAG, and connected SAP applications.
• Ensure the accuracy and efficiency of access governance and compliance controls.
• SAP Application Security & Cloud Governance
• Support SAP application security initiatives across SAP S/4HANA and cloud-based SAP solutions.
• Provide security and compliance support for SAP Business Technology Platform (BTP), SAP Ariba, SAP Analytics Cloud (SAC), SAP Cloud ALM, and related SAP cloud services.
• Collaborate with security and architecture teams to implement secure access controls and identity governance processes.
• Evaluate and support authorization concepts, role design, and provisioning processes across hybrid SAP landscapes.
• Assist in implementing cloud security controls and governance frameworks.
• Risk Management, Testing & Audit Support
• Conduct risk assessments, compliance reviews, and access control testing activities.
• Support business process and security control testing for audit and compliance initiatives.
• Perform root cause analysis and recommend corrective actions for identified control deficiencies.
• Document findings, risk assessments, remediation plans, and testing results.
• Support external and internal auditors by providing security, compliance, and control evidence.

Qualifications

Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Business Technology Management, or a related field, or an equivalent combination of education and experience.

• 7 - 9 years of hands-on implementation and support experience with SAP GRC and SAP Identity Access Governance (IAG).
• Strong understanding of SAP GRC functionality, configuration, access controls, compliance processes, and governance frameworks.
• Proven ability to partner with business stakeholders, auditors, and technical teams to deliver effective governance and compliance solutions.
• Strong knowledge of SAP Application Security and authorization concepts.
• Experience working with IT General Controls (ITGC), Segregation of Duties (SoD), compliance monitoring, and audit requirements.
• Knowledge of SAP Cloud technologies, including SAP BTP, SAP Ariba, SAP Analytics Cloud (SAC), and SAP Cloud ALM.
• Experience performing process testing, control testing, and compliance assessments.
• Experience documenting business processes, controls, and governance requirements.
• Strong understanding of risk management, compliance, and internal control frameworks.
• Experience collaborating with business, audit, s