CTC007875 - SAP Security Analyst
Type d'emploi: Contract
Durée: One year
Mode de travail: Mixed
Description
Profile/Specialization: SAP Security, RBAC, Segregation of Duties & Reporting
Reporting to: IT Solutions Manager
Job Description:
The SAP Security Analyst is responsible for managing SAP access, ensuring compliance with security policies, and optimizing SAP authorizations while identifying and mitigating security vulnerabilities.
Key Responsibilities:
-
Analyze and process user access requests while ensuring segregation of duties.
-
Administer SAP security instances, create and maintain security authorizations.
-
Ensure compliance with security policies and procedures.
-
Identify, evaluate, and remediate security vulnerabilities and risks in SAP systems.
-
Review and resolve security issues related to SAP transport systems.
-
Proactively resolve access issues, anticipate risks, and implement solutions.
-
Act as a technical reference for SAP security within the organization.
-
Conduct security audits of users and roles to detect vulnerabilities and recommend corrective actions.
Required Qualifications:
-
University degree in IT or management (or equivalent experience).
-
Minimum 5 years of experience in a similar role.
-
Knowledge of identity and access management principles, as well as general information security concepts.
-
Proficiency in traditional SAP authorizations (ABAP) and ERP ECC6 modules (FI-CO/MM/SD/PP/etc.).
-
Expertise in SAP HCM security (structural authorizations).
-
Expertise in SAP Fiori authorizations.
-
Security experience with SAP S/4HANA, SAP SuccessFactors, SAP PI, SAP Solution Manager (CHARM, QGATE), SAP BusinessObjects (BOBJ), SAP CRM, SAP Cloud Platform (SCP), SAP BPC.
-
Experience with SAP GRC.
-
Strong analytical skills, critical thinking, and leadership.
-
Ability to promote optimal solutions for complex security challenges.
-
Team player with a customer-oriented mindset.
-
Ability to manage multiple tasks simultaneously.
-
Autonomy, rigor, and excellent writing skills.
-
Fluency in French (spoken and written) is mandatory; functional English is recommended.
Specific Details:
-
100% remote work, with occasional on-site presence in Montreal as needed.
-
Work in the Eastern Canada (EST) time zone.
-
Regular security audits to detect and correct vulnerabilities.