SAP Security & GRC Consultant (S/4HANA)

Job Title: SAP Security & GRC Consultant (S/4HANA)
Location: Montreal, QC or Toronto, ON
Duration: 12 months
Hybrid: 3 days onsite, 2 days remote

Job Description:

· We’re Finding Better WaysTM to deliver one of largest digital transformations and are looking for a SAP Security & GRC Consultant (S/4HANA) to help move our ERP landscape to SAP S/4HANA safely and confidently.

· Why this role?

· Own access readiness and security controls across S/4HANA, Fiori and BTP through every formal test and cutover gate.

· Partner across BASIS/BTP, integration, QA and third parties to keep critical user, vendor and support access unblocked at programme scale.

· Own end to end security evidence — from role remediation and emergency access to audit-ready gate packs.

· 12-month contract with possibility to extend.

· Montreal location preferred. Also open to remote candidates in Toronto who would be open to travel to Montreal as needed.

· This is a highly visible, critical role at the heart of go-live success—ensuring stability, security and business continuity during complex ERP transitions. You’ll operate in a safety-first, inclusive environment guided by care, courage and curiosity.

· If you’re an experienced SAP Security and GRC consultant who thrives in complex SAP transformations, we’d love to hear from you.

Position description

· Role family SAP S/4HANA security, GRC, access readiness and control assurance

· Programme context S/4HANA and BTP migration with regional support across SIT, UAT alignment, cutover and hypercare.

· Primary phase: Phase 1 mobilisation through SIT/SIT2, cutover readiness and hypercare.

· Location model: Regional hub aligned to Montreal/North America timezone coverage.

· Primary interfaces: Tech Platform Lead, Security, BASIS/BTP, Integration, QA & Readiness Assurance, Accenture, SMEs and third parties.

· Programme phase: SIT to hypercare

· Primary value: Access readiness and security controls

Position purpose:

· Provide SAP S/4HANA security and GRC consulting so SAP, BTP, vendor and support access is ready, controlled and evidenced for formal test and cutover gates.

· The role resolves access blockers and supports compliant security outcomes without slowing regional execution.

Core accountabilities:

· Own regional triage of SAP, BTP and integration access issues during SIT, cutover rehearsal and hypercare.

· Validate critical user, vendor, SME and support access before planned test and cutover windows.

· Consult on role remediation, emergency access, GRC controls, access evidence and segregation-of-duties impact assessment.

· Partner with BASIS/BTP and Integration teams on service users, certificates, destinations and connectivity access dependencies.

· Provide concise security status, risks and evidence for QA gates and leadership reporting.

Key deliverables:

· Access readiness checklist for each test and cutover gate.

· Security issue log with owner, impact, workaround, target date and escalation path.

· Evidence pack for critical access, service users and emergency access model.

· Cutover security inputs for freeze, emergency support, validation and hypercare handover.

Skills and experience:

· SAP security and GRC consulting experience across S/4HANA, Fiori, SailPoint ARM, role-based access control, segregation of duties and emergency access.

· Working knowledge of BTP security, identity providers, roles, destinations and service credentials.

· Experience supporting formal test phases, cutover rehearsals, go live and hypercare.

· Strong documentation and reporting discipline for quality gates and audit evidence.

Success measures:

· No planned test or cutover activity is blocked by avoidable access readiness gaps.

· Critical access issues are triaged within the regional working day.

· Security gate evidence is complete, traceable and accepted