ERP Security & GRC Specialist

Location: Toronto, ON, Canada
Employment Type: Contractor
Workplace Type : Hybrid
Job Status: Vacant

About our Toronto Office

Located in the heart of Toronto’s Financial District, this vibrant location places you at the center of Canada’s bustling economic hub.

Surrounded by world-class dining, cultural landmarks, parks, and harbor views, you’ll experience the energy of one of North America’s most diverse and thriving cities. 

Role Overview

Reporting to the Lead, ERP Security, the SAP GRC & IAG Specialist is responsible for the design, implementation, administration, and continuous improvement of SAP Governance, Risk and Compliance (GRC) and SAP Cloud Identity Access Governance (IAG) solutions. This role ensures secure and compliant access management across SAP landscapes while supporting risk mitigation, regulatory compliance, and internal control objectives.

Working closely with business collaborators, audit teams, SAP functional and technical teams, and cybersecurity partners, the analyst translates governance and compliance requirements into scalable SAP security and access control solutions. The role supports SAP S/4HANA, SAP cloud applications, and enterprise-wide identity and access management initiatives while ensuring alignment with IT General Controls (ITGC), Segregation of Duties (SoD), and compliance frameworks.

This position requires strong expertise in SAP GRC, SAP IAG, SAP Application Security, and cloud-based SAP security solutions, combined with excellent analytical, documentation, and collaborator management capabilities.

This is an initial one-year contract. 

Don't miss out on this outstanding opportunity to be part of one of Canada's leading mining companies and join our team!

Key Accountabilities

Safety & Compliance

• Be a courageous safety leader, adhere to and sponsor safety and environmental rules and procedures
• Support compliance with regulatory, audit, and internal control requirements across SAP platforms.
• Ensure Segregation of Duties (SoD), access governance, and user provisioning activities meet organizational standards.
• Participate in internal and external audits and support remediation of security and compliance findings.
• Maintain compliance with IT General Controls (ITGC), organisational change, and access management policies.

SAP Security, Governance & Compliance Strategy

• Support the development and execution of SAP security, governance, and compliance strategies.
• Provide mentorship on SAP GRC and SAP IAG guidelines, security standards, and access control frameworks.
• Collaborate with business and technical collaborators to define governance requirements and access control models.
• Support risk assessments and compliance initiatives across SAP applications and cloud solutions.
• Provide recommendations for continuous improvement of SAP security and compliance processes.
• Assist in defining role design standards and governance processes aligned with SAP security best practices.

SAP GRC & IAG Administration

• Configure, implement, and support SAP GRC Access Control and SAP Identity Access Governance (IAG) solutions.
• Manage access request workflows, role provisioning, risk analysis, risk remediation, and emergency access management processes.
• Perform Segregation of Duties (SoD) analysis and support controls remediation activities.
• Maintain risk rulesets, mitigation controls, and compliance monitoring processes.
• Support user access reviews, certifications, and periodic compliance assessments.
• Configure and maintain integration between SAP GRC, IAG, and connected SAP applications.
• Ensure the accuracy and efficiency of access governance and compliance controls.

SAP Application Security & Cloud Governance

• Support SAP application security initiatives across SAP S/4HANA and cloud-based SAP solutions.
• Provide security and compliance support for SAP Business Technology Platform (BTP), SAP Ariba, SAP Analytics Cloud (SAC), SAP Cloud ALM, and related SAP cloud services.
• Collaborate with security and architecture teams to implement secure access controls and identity governance processes.
• Evaluate and support authorization concepts, role design, and provisioning processes across hybrid SAP landscapes.
• Assist in implementing cloud security controls and governance frameworks.

Risk Management, Testing & Audit Support

• Conduct risk assessments, compliance reviews, and access control testing activities.
• Support business process and security control testing for audit and compliance initiatives.
• Perform root cause analysis and recommend corrective actions for identified control deficiencies.
• Document findings, risk assessments, remediation plans, and testing results.
• Support external and internal auditors by providing security, compliance, and control evidence.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, Business Technology Management, or a related field, or an equivalent combination of education and experience.
• 7 - 9 years of hands-on implementation and support experience with SAP GRC and SAP Identity Access Governance (IAG).
• Strong understanding of SAP GRC functionality, configuration, access controls, compliance processes, and governance frameworks.
• Proven ability to partner with business stakeholders, auditors, and technical teams to deliver effective governance and compliance solutions.
• Strong knowledge of SAP Application Security and authorization concepts.
• Experience working with IT General Controls (ITGC), Segregation of Duties (SoD), compliance monitoring, and audit requirements.
• Knowledge of SAP Cloud technologies, including SAP BTP, SAP Ariba, SAP Analytics Cloud (SAC), and SAP Cloud ALM.
• Experience performing process testing, control testing, and compliance assessments.
• Experience documenting business processes, controls, and governance requirements.
• Strong understanding of risk management, compliance, and internal control frameworks.
• Experience collaborating with business, audit, security, and technical partners.
• Demonstrated experience supporting SAP security, compliance, audit, and governance initiatives.
• Strong analytical, documentation, problem-solving, and collaborator leadership skills.
• Experience working with SAP cloud applications and hybrid SAP environments.
• Excellent verbal and written communication skills.

Nice-to-Have

• Experience with SAP S/4HANA security and authorization concepts.
• Knowledge of Identity and Access Management (IAM) solutions and integration frameworks.
• Experience with IT Service Management (ITSM) processes and service management tools.
• Familiarity with SAP Cloud Identity Services (IAS/IPS).
• Experience with user provisioning, role lifecycle management, and identity governance processes.
• Knowledge of cybersecurity, access certification, and privileged access management concepts.
• Experience working in regulated industries with strong oversight and regulatory adherence requirements.
• SAP GRC, SAP Security, Cybersecurity, or Risk Management certifications are considered an asset.

Why Teck

At Teck, your work matters—to the world, to our communities and to your future.

As a leading Canadian resource company, we focus on responsibly providing the metals essential for global development and the energy transition while caring for the people, communities and land that we love. We do this guided by our values that, together, form The Teck Way . At Teck, you’ll find purpose-driven work, a culture of respect and inclusion, and the opportunity to grow your career while helping build a better world.

Apply with us 

Take the next step in your career by applying for the ERP Security & GRC Specialist role. We review applications on a rolling basis and encourage you to apply, even if your background doesn’t match every requirement. We value diversity and are committed to an inclusive, barrier-free hiring process. Reasonable accommodations are available upon request.

Requisition ID: 54684 | Job Category: Technology | Employment Type: Contractor | Location: Toronto, Vancouver | Workplace Type: #LI - Hybrid