Description:
Ontario Power Generation (OPG) is looking for a dynamic, strategic and results-driven professional to join our team in the role of Associate SAP Security Analyst.
Reporting to the Manager, IT Product Delivery, this position is responsible to support day-to-day and project-based security needs across a hybrid SAP landscape, including SAP S/4HANA, SAP ECC, SAP BTP, SAP Cloud ALM, BDC, and governance solutions such as SAP GRC and SAP IAG. This role will partner with business, compliance, and technical teams to deliver secure access, maintain strong controls, and support audit-ready processes while enabling delivery teams during implementations and releases.
Key Accountabilities
- Provide SAP security administration and operational support across SAP S/4HANA, SAP ECC, SAP BTP, SAP Cloud ALM, and other SAP platforms, including user provisioning, role maintenance, and access troubleshooting.
- Manage end-to-end access management processes, including access requests, approvals, provisioning, validation, periodic access reviews, and user support.
- Design, maintain, and enhance SAP security roles and authorizations using least-privilege principles while ensuring compliance with business and regulatory requirements.
- Analyze and resolve authorization issues, role conflicts, and user access problems, implementing sustainable solutions to improve security and operational effectiveness.
- Support Governance, Risk, and Compliance (GRC/IAG) activities, including Segregation of Duties (SoD) analysis, access risk assessments, provisioning workflows, emergency access management, and audit reporting.
- Participate in internal and external audit activities by preparing security documentation, providing access evidence, and supporting remediation of control findings.
- Collaborate with business, functional, technical, Basis, and IAM teams to integrate security requirements into SAP projects, enhancements, releases, and S/4HANA transformation initiatives.
- Develop and maintain security documentation, including role catalogs, access matrices, procedures, standards, and runbooks, while supporting continuous improvement of SAP security governance processes.
Qualifications
- Requires a 4-year university degree in Computer Science, Software Engineering, and minimum of over 2 years and up to and including 4 years is considered necessary to gain this experience.
- Requires experience in SAP security/authorizations supporting SAP S/4HANA and/or SAP ECC.
- Working experience supporting a multi-system SAP landscape with exposure to: BTP, BDC, Cloud ALM, GRC, and/or IAG.
- Practical experience with SAP authorization concepts (roles, profiles/authorizations, user administration, troubleshooting).
- Understanding of Segregation of Duties (SoD) principles and access governance controls.
- Strong communication skills with the ability to work effectively with business users, technical teams, and auditors.
- Strong organizational skills-able to manage multiple access requests, incidents, and project tasks concurrently.
- Hands-on experience with SAP IAG and/or SAP GRC Access Control (ARA, BRM, EAM/Firefighter, workflows).