Senior SAP Security & GRC Consultant

Position Summary

Our mining client is seeking a highly experienced Senior SAP Security & GRC Consultant to support its SAP S/4HANA environment and transformation initiatives. The ideal candidate will bring extensive hands-on expertise in SAP Security, role design, SAP Fiori Security, and SAP Governance, Risk, and Compliance (GRC).

The successful candidate will be responsible for designing, implementing, and maintaining secure, scalable, and compliant SAP authorization frameworks while ensuring alignment with business requirements and security best practices.

Work Mode : Onsite 4 days per week 

Location: Calgary, Alberta

Duration : 3-6 months plus extension

Role Type: Senior SAP Security & GRC Consultant

Key Responsibilities

• Design, implement, and support SAP S/4HANA security and authorization solutions across complex enterprise environments.
• Develop and maintain persona-based SAP security roles, including Business, Functional, Enabler, and Composite Roles.
• Configure and troubleshoot SAP authorization objects, role assignments, authorization traces, and access-related issues.
• Design and maintain SAP Fiori Security, including catalogs, spaces/pages, business roles, Launchpad content, and OData authorizations.
• Implement and support SAP GRC Access Control processes, including access risk analysis, Segregation of Duties (SoD), and remediation.
• Apply Role-Based Access Control (RBAC) principles to ensure appropriate user access and compliance with security policies.
• Conduct security assessments, identify authorization gaps, and recommend improvements to SAP security controls.
• Collaborate with SAP functional, technical, Basis, and business teams to ensure security requirements are incorporated into SAP S/4HANA implementations and upgrades.
• Support security testing, issue resolution, and remediation activities throughout project delivery.
• Develop and maintain SAP security documentation, role design standards, and governance procedures.

Required Qualifications

• 10+ years of hands-on SAP Security and GRC experience, including SAP S/4HANA implementations, upgrades, or transformation programs.
• Strong SAP S/4HANA Security expertise, including authorization concepts, role design, authorization objects, traces, and troubleshooting.
• Proven experience designing and supporting persona-based SAP roles, including Business, Functional, Enabler, and Composite Roles.
• Advanced SAP Fiori Security knowledge, including catalogs, spaces/pages, business roles, Launchpad content, and OData authorizations.
• Extensive hands-on experience with SAP GRC Access Control, RBAC, Segregation of Duties (SoD), risk analysis, and remediation.
• Strong understanding of SAP security governance, compliance frameworks, and access management best practices.
• Experience working with cross-functional SAP teams in large enterprise environments.
• Excellent analytical, troubleshooting, communication, and stakeholder management skills.

Nice to Have

• Experience supporting large-scale SAP S/4HANA transformation or migration programs.
• Knowledge of SAP GRC Access Request Management (ARM), Emergency Access Management (EAM), and Business Role Management (BRM).
• Experience with SAP security audits, compliance reviews, and risk mitigation.
• Previous experience in the mining, energy, or natural resources industry is an asset.