SAP SECURITY OFFICER

WINNIPEG, MB

• Competitive salary and benefits package.
• Defined-benefit pension plan.
• Nine-day work cycle which normally results in every other Monday off, providing for a balanced approach to work, family life and community.
• Flex-time and partially remote work schedule (providing the option to work remotely 3 days per 2 week period), depending on nature of work, operational requirements and work location.

• Act as the primary resource for the strategy setting, definition, implementation and monitoring of all SAP security and user admin standards and procedures.  Evaluate the effectiveness of standards and procedures.
• Mentor and direct work of junior SAP Security analysts.
• Set the direction for the SAP user administration duties in multiple development and production systems, using a role-based identity management approach while following segregation of duty internal controls, as well as creating and maintaining user master records.
• Co-ordinate and lead the SAP security work on projects.
• Provide on-going support, troubleshooting and resolution of SAP Security Access, SAP instances, software and services; Linux scripts/software; HANA and other related databases; SAP Desktop software, and printers.
• Provide advisory services to SAP Business Analysts, developers and management in the areas of security and system access in SAP.
• Act as the primary resource for the development, creation and maintenance of security authorization roles within SAP, using the SAP Profile Generator.  Ensure authorization role integrity throughout multiple SAP Systems and Clients.  Ensure that roles allow users to appropriately access functionality within the SAP system while limiting access to sensitive data.
• Create and maintain technical documentation as required.
• Maintain and administer Microsoft Access databases of SAP user information and SAP system usage, which includes downloads of data from SAP.
• Create regular and ad hoc reports using various tools and a variety of data sources for management and line of business as requested.
• Co-ordinate testing of authorization roles and work with Business Analysts to ensure that SAP users can only access appropriate functionality.
• Investigate and resolve SAP security access issues as they arise.
• Liaison with the user community to keep them informed of security issues related to SAP.
• Keep abreast of SAP security enhancements as they apply to the implementation at Manitoba Hydro.
• Provide on call support for the SAP infrastructure outside of regular working hours.
• Perform other related duties and responsibilities as required. 
• Support the development of security testing protocols. 
• Contribute to cutover planning. 
• Assist in the transition of users and roles from ECC to S/4HANA. 
• Implement SAP Identity Access Governance (IAG) or equivalent S/4HANA security tools—including Fiori role design, embedded analytics authorization, and cloud-based identity provisioning.
• Familiarity with SAP GRC Access Control integration with IAG and SAP Business Technology Platform (BTP) security concepts will be considered an asset.

• A four year degree from a university of recognized standing with five years of related ITS experience with at least three years of SAP security experience demonstrating the skills and qualities required by this position;
  OR
• A two year diploma from an institute of recognized standing and seven years of related ITS experience with at least five years of SAP security experience demonstrating the skills and qualities required by this position.
• Must have comprehensive knowledge of SAP security and authorizations.
• Must have demonstrated superior personal computer skills, including a high level of proficiency in various software applications, for example: Microsoft Access and Excel.
• Demonstrated ability to adapt and learn quickly in new situations.
• Proven ability to complete detailed work accurately.
• Possess initiative with the ability to conduct research and analysis.
• Possess an analytical nature and mature judgment with the ability to make and implement sound decisions.
• Tactful and diplomatic in dealing with others.
• Ability to handle confidential and sensitive information with discretion and integrity.
• Comprehensive knowledge of audit controls on business processes.
• Prepared to work overtime when required.
• Prepared to come in to work at any time during a 24-hour period to ensure system reliability.
• Prepared to be on-call on a rotational basis to provide a stable and reliable SAP infrastructure for the Corporation.
• Obtain and maintain a current Personnel Risk Assessment and a "Clear" security rating in accordance with Manitoba Hydro Policy P513.
• Critical Infrastructure Protection (CIP) Training is required and must be completed prior to transfer date and renewed annually. 
• Practical experience in the following:
  - SAP security and authorizations
  - SAP and support of SAP infrastructure components
  - Linux and Windows Operating Systems
  - HANA and Oracle databases
  - SAP S/4HANA security concepts—including IAG, Fiori role design, and cloud identity services
  - Working in hybrid ECC/S/4 environments and possess a forward-looking mindset to support Manitoba Hydro's digital transformation goals
  - SAP Analytics Cloud (SAC) security and integration with third-party identity providers