Role Description

We are seeking an experienced SAP Security & GRC Specialist to manage SAP security administration, user access governance, compliance, and risk management across SAP environments. The role requires deep expertise in SAP authorization concepts, role design, SoD analysis, and SAP GRC Access Control modules.

Key Responsibilities

- SAP Security Administration
- Design, build, and maintain SAP security roles using PFCG
- Perform mass maintenance of authorization objects and org‑level changes
- Execute user administration (creation, lock/unlock, password resets, access reviews)
- Troubleshoot authorization and security issues across SAP systems
- Support SAP Fiori, S/4HANA, BI/BW, GTP, and other SAP applications
- Manage transport requests for security roles via ChaRM

SAP GRC Management

- Administer SAP GRC Access Control modules:
- Access Risk Analysis (ARA)
- Access Request Management (ARM)
- Emergency Access Management (EAM)
- Business Role Management (BRM)
- Conduct Segregation of Duties (SoD) analysis and remediation
- Monitor compliance and audit requirements
- Support periodic User Access Reviews (UAR)

Compliance & Audit Support

- Work with internal/external auditors to provide security documentation and evidence
- Ensure compliance with SOX and corporate security policies




- Maintain audit‑ready documentation for security processes and controls

Project & Support Activities

- Participate in SAP implementation, upgrade, migration, and enhancement projects
- Collaborate with business teams to understand access requirements
- Provide production support and resolve security incidents
- Understand and support custom T‑codes and authorization objects

Required Skills & Qualifications

- 5+ years of SAP Security & GRC experience
- Strong knowledge of SAP authorization concepts and role design
- Experience with SAP GRC Access Control 10.x / 12.x
- Knowledge of SoD concepts and compliance frameworks
- Experience with S/4HANA and Fiori security
- Robust analytical and troubleshooting skills
- Excellent communication and stakeholder management

Technical Skills

- SAP S/4HANA Security
- SAP GRC Access Control
- SAP Fiori Security
- SAP HANA Database Security
- Role design & authorization objects
- SoD analysis
- SU01, PFCG, SUIM, ST01, STAUTHTRACE, SU53
- Firefighter ID management

Soft Skills

- Problem‑solving mindset
- Attention to detail
- Team collaboration
- Time management
- Strong documentation and reporting skills

📌 SAP Security Administrator & GRC Specialist (Calgary)
🏢 Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
📍 Calgary