SAP Security & GRC Senior Associate
Job Summary
Line of Service
AssuranceIndustry/Sector
Not ApplicableSpecialism
Conduct and ComplianceManagement Level
Senior AssociateJob Description & Summary
A career in our Enterprise Technology Risk Solutions practice within the Risk Services team will provide you with the opportunity to assist clients to better leverage enterprise technologies to drive a higher return on investment and improve risk management. Using advanced technology were able to focus on establishing the right controls processes and structures for our clients to ensure that verdicts are based on accurate information and assure that information provided to third parties is accurate complete and can be trusted.Our team helps business leaders develop into data driven organizations that adopt a comprehensive evidence based strategy combined with the execution support to deliver results. Youll focus on finding value and enabling sustainable information performance by using data tools analytics complex modeling data visualization simulation economics optimization information management business intelligence and industry expertise.
As part of this mission we are seeking to hire an experienced SAP Security and GRC Consultant to strengthen our Enterprise Technology Risk Solutions practice. This role will focus on designing implementing and supporting SAP Security and Governance Risk and Compliance solutions across complex SAP landscapes including S/4HANA. The consultant will work closely with clients to establish robust access controls mitigate technology and compliance risks and embed security by design into enterprise systems enabling trusted compliant and datadriven decision-making.
The Opportunity:
As aDigital Risk Solutions Senior Associateunlock your potential and embrace the chance to drive meaningful outcomesthatllelevate your career. Your role will include butisntlimited to:
Work on large-scale technology transformation projects across end-to-endSAPtransformations
Provide risk advisory services to clients in key technology areas such as SAP S/4 HANABTP Security IAGSuccessFactors Ariba SAP Governance Risk and Compliance (GRC) primarily focused on:
DesignSAP Security andSAPGRC frameworks from the ground up in greenfieldand brownfieldS/4HANA implementations
ImplementendtoendSAP security designincluding:Role concept and role naming standards Authorization object design and access strategy and Fiori catalog group and role design
Technically build SAP S/4HANA roles as per the design and approach established
Address any access issues / authorization issues identified during implementation phase.
Perform security assessments on the role design of the client system andproviderecommendation orremediationssuggestion.
Define configure and implementprocess control and risk management modules of SAP GRC.
Design and develop SAP BTP security (role collection) andintegratingIAGwith onpremise SAP GRC.
Configure and integrate on premise SAP GRC to IAG bridge to cater to hybrid SAPlandscape.
Experience supporting audits access reviews and control testing is an added asset Ability to balance security compliance and business enablement
Ability to balance security compliance and business enablement
Clear communication with technical functional and business stakeholders
Bring strong leadership and project management skills to engagement teams working in dynamic and cross-functional teams for large-scale and multi-national engagements
Define configure and implement SAP GRC Access Control aligned to the target SAP landscape including:
Access Request Management (ARM): Design and configureendtoendaccess request processes including workflow design MSMP configuration BRFplus rules user access provisioning and Segregation of Duties (SoD) check stages
Access Risk Analysis (ARA): Configure ARA framework including risk ruleset design and customization definition of Segregation of Duties (SoD) frameworks and development of mitigation strategies
Emergency Access Management (EAM): Configure the EAM module and design Firefighter processes to ensure controlled and auditable emergency access
Business Role Management (BRM): Design and configure BRM to support role lifecycle management and alignment with target role design standards
What Youll Bring:
Your skills knowledge and experiences are what set you apart.Hereswhat we look for:
Bachelors orMasters degree in Business Information Technology Finance Data Science or Computer Science degree
Stronghandsonexpertisein SAP S/4HANA Security Fiori Security and SAP GRCaccess control are
Deep understanding of SAPs Segregation of Duties (SoD) internal controls and compliance requirements (e.g. SOX)
Experience and knowledge of controls integration security design/implementation and GRC integration related to SAP S/4 HANA SuccessFactors BTPworkzoneAriba SAPGRC process control and risk management modules arean asset.
Completion of relevant certifications (e.g.CISSP PMP CRISC CISM or CISA designation) is an asset
Certifications fromSAP(e.g.SAP S/4 HANABTPadministratorSuccessFactors Ariba SAP Governance Risk and Compliance (GRC))isan asset.
Implementation and configuration experience on process control and risk management modules of SAP GRC is highly appreciable.
Relevant experience including key areas such as Consulting (e.g.SAP S/4HANAimplementationBTP security configuration IAG implementationproject management IT consulting risk consulting cyber security etc.) Assurance (internal and/or external audit) or relevant industry roles (e.g. risk management IT cyber security finance and accounting project management system implementation)
Business development: getting involved with new opportunities taking a proactive role in raising awareness of the firms services and level of commitment to the local market developing and maturing relationships with internal staff and clients developing proposals identifying and pursuing opportunities to increase the practices penetration in the public and private sector
Provide high performance (e.g.clear vision/target/purpose open communication promoting flexibilitycollaborationand accountability) to deliver high quality to clients and a rewarding experience to staff. A demonstrated commitment to valuing differences and working alongside diverse people and perspectives
PwC Canada is committed to cultivating an inclusive hybrid work environment. Exact expectations for your team can be discussed with your interviewer
This position ensures continuity and upholds our standards of excellence following the departure of a valued team member.
The salary range for this position is $65600 - $109300. The posted salary range represents the expected hiring range for PwC locations in major city centres. Given our national recruiting approach ranges may vary for positions in other locations. At PwC Canada base salary is determined by your skills experience qualifications and work addition to base salary eligible employees may have opportunities to participate in variable incentive pay programs which are designed to reward individual and firm-wide achievements. We are committed to offering competitive compensation and adhere to all relevant pay transparency legislation. During the hiring process our Talent Acquisition team will provide details about our comprehensive total rewards package.
Whyyoulllove PwC
Wereinspiring and empowering our people to change the world. Powered by the latest technologyyoullbe a part of diverse teams helping public and private clients build trust and deliver sustained outcomes. This meaningful work and our continuous development environment will take your career to the next level. We reward your impact and support your wellbeing through a competitive compensation package inclusive benefits and flexibility programs that will help you thrive in work and life. Learn more about our Application Process and Total Rewards Package at: Canada acknowledges that we work and live across Turtle Island on the land that is now known as Canada which are the lands of the ancestral treaty and unceded territories of the First NationsMétisand Inuit Peoples. We recognize the systemic racismcolonialismand oppression that Indigenous Peoples have experienced and still go through and we commit to allyship and solidarity.
Education (if blank degree and/or field of study not specified)
Degrees/Field of Study required:Degrees/Field of Study preferred:Certifications (if blank certifications not specified)
Required Skills
Optional Skills
Accepting Feedback Accepting Feedback Active Listening Analytical Thinking Artificial Intelligence (AI) Platform Auditing Methodologies Cloud Engineering Communication Compliance and Governance Compliance and Standards Compliance Auditing Corporate Governance Creativity Cybersecurity Governance Cybersecurity Risk Management Data Quality Data Quality Assessment Data Quality Assurance Testing Data Validation Embracing Change Emotional Regulation Empathy Governance Framework Inclusion Information Assurance 16 moreDesired Languages (If blank desired languages not specified)
Travel Requirements
Not SpecifiedAvailable for Work Visa Sponsorship
NoGovernment Clearance Required
NoJob Posting End Date
April 21 2026Were committed to providing accommodation throughout the application interview and employment process. If you require accommodation to be at your best please let us know during the application process.The use of artificial intelligence (AI) in recruiting is just getting started so we know you have questions about how and why we use it. At certain points during our recruiting process we rely on AI to improve your experience. This could be during resume review or curating personalized job recommendations asking you clarifying questions via a chatbot or during our interview scheduling to improve your experience. Our use of AI helps ensure we combat bias by evaluating candidates equally and fairly without seeing identity information such as your name or gender for example). AI also helps us better predict successful hires by reviewing all applicants for a role and the relationship between your skills experience and likely success at PwC Canada. While AI supports parts of our recruitment process final hiring decisions always involve human review. For more information about our use and protection of your data please refer to our Privacy Policy ( tenons à répondre à vos besoins tout au long du processus de demande demploi dentrevue et dembauche. Si vous avez besoin de mesures dadaptation pour être parfaitement à laise faites-le-nous savoir à létape de la demande demploi.Lutilisation de lintelligence artificielle (IA) dans le domaine du recrutement en est à ses balbutiements. Nous savons que vous pourriez vous demander comment et pourquoi nous y avons recours. À certains stades de notre processus de recrutement nous comptons sur lIA pour améliorer votre expérience. Par exemple pendant lexamen du curriculum vitæ ou lélaboration dune liste de recommandations personnalisées un agent conversationnel pourrait vous demander des précisions ou fixer avec vous un rendez-vous pour lentrevue. LIA nous aide à mieux lutter contre les préjugés car lévaluation des candidats se fait de façon juste et équitable sans que les informations didentification comme le nom ou le sexe soient connues. Elle nous permet également de mieux repérer les bons candidats pour un poste et dévaluer le lien entre leurs compétences leur expérience et leurs chances de réussir chez PwC Canada. Bien que lIA facilite certaines étapes de notre processus de recrutement les décisions finales dembauche sont toujours prises par des personnes. Pour en savoir plus sur lutilisation et la protection de vos données personnelles consultez notre politique sur la protection des renseignements confidentiels ( Experience:Senior IC
About Company
At PwC, our purpose is to build trust in society and solve important problems. We’re a network of firms in 155 countries with over 284,000 people who are committed to delivering quality in assurance, advisory and tax services. Find out more and tell us what matters to you by vis ... View more