Summary

Enerflex is seeking an experienced SAP Security & GRC Analyst to support and enhance the security, governance, and compliance of our SAP landscape. This role plays a critical part in protecting the confidentiality, integrity, and availability of enterprise systems and data, while enabling business operations through well-designed, role-based security.

The successful candidate will bring strong expertise in SAP security and SAP GRC (Access Control), work closely with business and IT stakeholders, and actively support SOX and audit requirements through effective access governance and evidence-based controls. 

This role is based out of our 47 St SE office. 

Principle Responsibilities and Duties

• Own and maintain SAP security role design standards and access governance models, in alignment with business risk tolerance and audit requirements across the SAP landscape (SAP ECC, SuccessFactors, BW, FIORI, GRC, HANA Cloud, AEX, SAP BTP and SAP BDC).
• Troubleshoot and resolve authorization and access issues by working with business process owners to identify any required roles or role changes to meet the appropriate access requirements.
• Maintain user access request and provisioning mechanisms.
• Ensure access provisioning complies with governance and segregation of duties requirements.
• Administer and support SAP GRC Access Control, including EAM, ARM, ARA, UAR and BRM).
• Evolve the SAP GRC Access Control framework, ensuring alignment with SOX, business risk tolerance, and leading practices in access governance.
• Support segregation of duties analysis and sensitive access monitoring.
• Maintain compliance-related configurations and reporting.
• Collaborate with audit and compliance teams.
• Lead end-to-end SOX audit walkthroughs and provide audit evidence (e.g. user logs, role definitions, change management documentation, etc.).
• Support ongoing IT General Controls and ICFR compliance.
• Act as the security lead in cross-functional SAP projects representing application security and development including daily project configuration activities, unit testing, integration testing, Go-Live activities and post implementation support.
• Partner with functional analysts and business stakeholders to help identify business pain points and propose practical solutions.
• Participate in the planned S/4 migration security design.
• Contribute to security strategy guidelines and best practices.

Qualifications

• University degree or technical diploma with 5+ years of relevant experience.
• Strong SAP security and SAP GRC experience.
• Knowledge of segregation of duties and sensitive access concepts.
• Practical experience and knowledge of complex enterprise system environments including integrations to other functional business systems including identity and access management tools such as Microsoft Entra ID and SAP.
• Experience supporting SOX or ITGC audits considered an asset.
• Experience in manufacturing or oil & gas field services environments.
• Exposure to SAP cloud platforms as well as SAP S/4 for future transition activities.
• A security professional who takes ownership and approaches work with accountability, attention to detail, and a continuous improvement mindset.
• Someone who values collaboration, customer service, and building trusted relationships across IT and the business.
• Excellent communication and stakeholder engagement skills.
• Alignment with Enerflex values of integrity, commitment, and creativity.