SAP Security Analyst
- Pay Rate: $75.00/hour, depending on experience
- Contract Length: 6 Months
- Location: Calgary, Alberta
Raise is currently hiring a SAP Security Analyst on behalf of our client. They’re expanding their team to meet growing needs, making this a unique opportunity to work with an industry leader. Our Client is a market leading financial institution
Note: The primary pay rate is based on T4 classification; however, we will also consider applications from candidates interested in an INC classification, where applicable.
Description
The SAP Security Analyst in this role will focus on enhancing and securing access to SAP systems. The majority of the work will include rationalizing, designing, and implementing SAP roles, maintaining SU24, and configuring identity and access management (IAM) solutions. They will be a part of our IAM Advancement initiatives, ensuring users have the correct access levels while maintaining compliance with security policies
Responsibilities
- The SAP Security Analyst is responsible for the integrity, compliance, and efficiency of the SAP authorization environment. The day-to-day duties focus on transitioning from manual security patches to a structured, automated, and audited framework.
- 1. Security Development & Role Engineering
- Role Rationalization: Analyze existing roles to identify redundancies and consolidate permissions to enforce the principle of least privilege.
- Design & Implementation: Create and modify complex SAP roles (Single, Composite, and Derived) based on functional requirements and business process scoping.
- Authorization Management: Perform high-level maintenance of SU24 to ensure that authorization objects are correctly proposed, reducing the need for manual field updates and improving role sustainability.
- 2. Identity & Access Management (IAM) Advancement
- IAM Integration: Configure and fine-tune IAM solutions to automate user provisioning and de-provisioning processes.
- Access Governance: Ensure users are assigned the correct access levels across the SAP landscape, minimizing the risk of SOD (Segregation of Duties) conflicts.
- System Enhancements: Participate in the continuous improvement of security protocols to stay ahead of emerging threats and evolving business needs.
- 3. Quality Assurance & Pipeline Management
- Transport Coordination: Manage the movement of security configurations through the landscape (Development > Quality Assurance > Production).
- Testing & Remediation: Conduct thorough unit and integration testing of roles to ensure zero disruption to business operations upon deployment.
- Defect Resolution: Identify and remediate authorization failures reported during project testing phases.
- 4. Documentation & Compliance
- Audit Readiness: Maintain a rigorous audit trail by documenting every change, remediation, and role update within the organization’s change management system.
- Standards Adherence: Ensure all security development follows the organization's specific technical standards and compliance frameworks.
- Technical Reporting: Create detailed technical documentation for complex security builds to assist with knowledge transfer and future troubleshooting.
- 5. Collaboration & Scoping
- Requirement Scoping: Work closely with business analysts and functional leads to translate business requirements into technical security specifications.
- Stakeholder Engagement: Act as a subject matter expert for SAP Security within the broader IAM project team, providing guidance on best practices for access control.
Qualifications
- 5+ years of dedicated experience in SAP Security Administration and Development, specifically within complex enterprise environments.
- Proven expertise in the full development lifecycle of SAP roles, including design, building, testing, and troubleshooting across various SAP modules.
- Advanced experience maintaining SU24 (Authorization Check Indicators) to streamline role maintenance and eliminate the need for manual authorization assignments.
- Demonstrated experience configuring Identity and Access Management (IAM) solutions and ensuring all security configurations meet strict internal and external audit standards.
- Documentation & Change Management- Exceptional ability to maintain meticulous change logs and technical documentation, ensuring every remediation is "audit-ready" and follows established transport pipeline protocols.
- Project Delivery – Experience working within an agile or project-based environment, specifically moving security configurations through development, quality assurance, and production landscapes.
- Education and Certifications
- Bachelor’s Degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- SAP Certifications: Preferred
- SAP Certified Technology Associate – SAP System Security and Authorizations.
- Experience or certification in SAP GRC (Governance, Risk, and Compliance) is highly preferred.
- Professional Designations: Preferred
- CISA (Certified Information Systems Auditor) or CISSP (Certified Information Systems Security Professional) is considered a significant asset.
- PMP (Project Management Professional) designation is valued for managing complex security remediation timelines.
Additional Information
A requirement for candidates to be considered for this role will be to complete a criminal and credit check (including Canadian Credit Risk Score)
Looking for meaningful work? We can help!
Raise is an established hiring firm with over 65 years of experience. We believe strongly in making the world a better place through work, which is why we’re a certified B Corporation and donate 10% of our profits to charity.
We strive to build teams that reflect the diversity of the communities we work in. We encourage all qualified applicants to apply, including people from traditionally underrepresented groups such as women, visible minorities, Indigenous peoples, people identifying as LGBTQ2SI, veterans, and people with visible/nonvisible disabilities.
We have a dedicated webpage for accommodations where you can learn more about what we offer and request accommodation: https://raise.jobs/accommodations/
In order to submit candidates for roles, our clients will sometimes require personal information to confirm the identity of applicants and their legal status to work. Raise will never ask you for personal or banking information unless you have been selected for a job. If you are ever unsure about the legitimacy of this or any other Raise job posting (or have any other questions), please contact us at +1 800-567-9675 or hello@raiserecruiting.com.
#WES
#LI-SC1