SAP Analyst

Position: ERP Security & GRC Analyst

Rate: Negotiable

Location: Hybrid/VANCOUVER, BC

Closing Date: October 28, 2026 8:00 AM MST

POSITION SUMMARY:

Role Description: ERP Security & GRC Analyst

Role Overview

Reporting to the Lead, ERP Security, the SAP GRC and IAG Analyst is responsible for supporting SAP application security, governance, risk, and compliance activities across SAP landscapes. This role assists in maintaining secure and compliant access controls, supporting SAP GRC and Identity Access Governance (IAG) processes, and ensuring alignment with organizational security and compliance requirements.

Working closely with business users, SAP functional teams, auditors, cybersecurity teams, and technical partners, the analyst helps coordinate SAP security roles, access governance processes, and compliance controls. The role supports SAP S/4HANA and cloud-based SAP applications while contributing to access management, risk mitigation, audit readiness, and continuous improvement initiatives.

This position requires foundational experience in SAP Security, SAP GRC, and Identity Access Governance (IAG), along with strong analytical, documentation, and collaborator communication skills.

Responsibilities

Safety & Compliance

• Be a courageous safety leader, adhere to and sponsor safety and environmental rules and procedures
• Support compliance with audit requirements, access management standards, and IT General Controls (ITGC).
• Assist with Segregation of Duties (SoD) monitoring, mitigation activities, and access reviews.
• Follow established security, change coordination, and governance processes.
• Support audit evidence collection and remediation activities.

SAP Security Administration & Access Management

• Support the coordination and continual support of SAP security roles, profiles, and user access.
• Assist with user provisioning, access modifications, deprovisioning, and role assignments.
• Perform access analysis and support role design activities in accordance with security standards.
• Assist in maintaining security documentation, role matrices, and access governance procedures.
• Support periodic user access reviews and certification activities.
• Collaborate with business and technical teams to ensure appropriate access controls are maintained.

SAP GRC & IAG Administration

• Support the ongoing administration and maintenance of SAP GRC and Identity Access Governance (IAG) solutions.
• Assist with access requests, approvals, provisioning workflows, and risk analysis activities.
• Perform Segregation of Duties (SoD) reviews and support remediation efforts.
• Maintain risk documentation, mitigation controls, and compliance records.
• Assist with process testing and validation of governance and compliance controls.
• Support integration and monitoring activities related to SAP GRC and IAG environments.

SAP Security Governance & Documentation

• Gather, analyze, and detail organizational and technical needs related to SAP Security and GRC processes.
• Maintain security procedures, standards, and operational documentation.
• Document and support IT Service Management (ITSM) processes related to SAP Security and GRC operations.
• Assist in developing process flows, work instructions, and compliance documentation.
• Support reporting efforts focused on protection measures and regulatory standards.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Business Technology Management, or a related field, or an equivalent combination of education and experience.
• 2-3 years of experience in SAP Application Security and SAP GRC implementation or support.
• Understanding of SAP security concepts, authorization objects, role building, and processes for managing user permissions.
• Foundational knowledge of SAP solutions for governance, risk management, and compliance.
• Ability to interpret, examine, and detail business and technical requirements.
• Experience providing detailed IT service procedures connected to SAP Security and GRC or equivalent experience.
• Strong analytical, documentation, fix, and problem-solving skills.
• Experience collaborating with business users alongside technical teams to support access management and compliance activities.
• Ability to collaborate effectively with business, technical, and security collaborators.
• Good interpersonal, communication, and relationship-management skills.
• Demonstrated ability to document processes, analyze requirements, and support governance initiatives.
• Experience supporting compliance, audit, and identity management strategic direction activities.
• Ability to work effectively in a team-oriented environment.
• Experience within SAP S/4HANA or SAP cloud environments is seen as a positive attribute.

Nice-to-Have

• Exposure to SAP solutions for managing identity access controls.
• Knowledge of SAP S/4HANA security and authorization concepts.
• Familiarity with SAP cloud technologies such as SAP BTP, SAP Ariba, SAP Analytics Cloud (SAC), and SAP Cloud ALM.
• Understanding of Segregation of Duties (SoD), IT General Controls (ITGC), and compliance frameworks.
• Knowledge of identity and access management (IAM) concepts and solutions.
• Experience with security testing, user access reviews, and audit support activities.
• Familiarity with SAP Cloud Identity Services (IAS/IPS).
• Experience working in regulated industries with strong compliance and audit requirements.
• SAP Security or SAP GRC certifications are considered an asset.

Notes on Location:

HYBRID in Vancouver, BC

Estimated Start Date: NOV 2026

Estimated End Date: NOV 2027

Rate Range: Negotiable

Based on Experience and Competitiveness