ERP Security, the SAP GRC and IAG Analyst is responsible for supporting SAP application security, governance, risk, and compliance activities across SAP landscapes. This role assists in maintaining secure and compliant access controls, supporting SAP GRC and Identity Access Governance (IAG) processes, and ensuring alignment with organizational security and compliance requirements.
Working closely with business users, SAP functional teams, auditors, cybersecurity teams, and technical stakeholders, the analyst helps administer SAP security roles, access governance processes, and compliance controls. The role supports SAP S/4HANA and cloud-based SAP applications while contributing to access management, risk mitigation, audit readiness, and continuous improvement initiatives.
This position requires foundational experience in SAP Security, SAP GRC, and Identity Access Governance (IAG), along with strong analytical, documentation, and stakeholder communication skills.
Key AccountabilitiesSafety & Compliance
• Ensure adherence to corporate security, privacy, compliance, and IT governance policies.
• Support compliance with audit requirements, access management standards, and IT General Controls (ITGC).
• Assist with Segregation of Duties (SoD) monitoring, mitigation activities, and access reviews.
• Follow established security, change management, and compliance processes.
• Support audit evidence collection and remediation activities.
SAP Security Administration & Access Management • Support the administration and maintenance of SAP security roles, profiles, and user access.
• Assist with user provisioning, access modifications, deprovisioning, and role assignments.
• Perform access analysis and support role design activities in accordance with security standards.
• Assist in maintaining security documentation, role matrices, and access governance procedures.
• Support periodic user access reviews and certification activities.
• Collaborate with business and technical teams to ensure appropriate access controls are maintained.
SAP GRC & IAG Administration• Support the ongoing administration and maintenance of SAP GRC and Identity Access Governance (IAG) solutions.
• Assist with access requests, approvals, provisioning workflows, and risk analysis activities.
• Perform Segregation of Duties (SoD) reviews and support remediation efforts.
• Maintain risk documentation, mitigation controls, and compliance records.
• Assist with process testing and validation of governance and compliance controls.
• Support integration and monitoring activities related to SAP GRC and IAG environments.
SAP Security Governance & Documentation• Gather, analyze, and document business and technical requirements related to SAP Security and GRC processes.
• Maintain security procedures, standards, and operational documentation.
• Document and support IT Service Management (ITSM) processes related to SAP Security and GRC operations.
• Assist in developing process flows, work instructions, and compliance documentation.
• Support security and compliance reporting activities.
Must-Have Qualifications• 2-3 years of experience in SAP Application Security and SAP GRC implementation or support.
• Understanding of SAP security concepts, authorization objects, role design, and access management processes.
• Foundational knowledge of SAP Governance, Risk, and Compliance (GRC) solutions.
• Ability to understand, analyze, and document business and technical requirements.
• Experience d
The base compensation range for this role in the posted location is: CAD 100,000- 120,000
Capgemini provides compensation range information in accordance with applicable national, state, provincial, and local pay transparency laws. The base compensation range listed for this position reflects the minimum and maximum target compensation Capgemini, in good faith, believes it may pay for the role at the time of this posting. This range may be subject to change as permitted by law.
The actual compensation offered to any candidate may fall outside of the posted range and will be determined based on multiple factors legally permitted in the applicable jurisdiction.
These may include, but are not limited to: Geographic location, Education and qualifications, Certifications and licenses, Relevant experience and skills, Seniority and performance, Market and business consideration, Internal pay equity.
It is not typical for candidates to be hired at or near the top of the posted compensation range.
In addition to base salary, this role may be eligible for additional compensation such as variable incentives, bonuses, or commissions, depending on the position and applicable laws.
Capgemini offers a comprehensive, non-negotiable benefits package to all regular, full-time employees. In the U.S. and Canada, available benefits are determined by local policy and eligibility and may include:
- Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave
- Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)
- Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)
- Life and disability insurance
- Employee assistance programs
- Other benefits as provided by local policy and eligibility
