Principal SAP Security Analyst
We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime.
Job Overview
Hasbro is seeking a Principal SAP Security Analyst to join our IT Security team in Montreal. This senior individual contributor position will assist in steering access governance, role development, compliance readiness, and security controls across SAP ERP Central Component (ECC), S/4HANA, SAP RISE, SAP Business Technology Platform (BTP), Identity Authentication Service (IAS), and Identity Provisioning Service (IPS).
We are bringing more SAP security responsibility in-house and need someone who can guide complex work with technical knowledge, collaboration, and sound judgment, helping keep access to our SAP systems well governed, compliant, and ready for our migration to SAP RISE. This role is not a people manager position, but it does provide technical direction to SAP analysts, access administrators, project teams, business partners, auditors, and implementation partners. Candidates who meet many, but not all, of the qualifications are encouraged to apply.
Location and Work Arrangement
This role is based at our Montreal, Quebec, Canada office and follows a hybrid schedule designed to support in-person collaboration. Employees are expected to work onsite on Tuesdays, Wednesdays, and Thursdays, with the flexibility to work remotely or onsite on Mondays and Fridays.
What You'll Do
- Build SAP security architecture, standards, access models, and role design practices.
- Support our migration to SAP RISE, including role mapping, identity integration, access transition, privileged access, connectivity, and post-migration controls.
- Develop and enhance Role-Based Access Control models that uphold least-privilege, address business needs, and meet compliance requirements.
- Lead role cleanup, redesign, simplification, and Segregation of Duties (SoD) remediation.
- Set up and maintain SAP Identity Access Governance and SAP Governance Risk and Compliance (GRC), covering connectors, workflows, risk rules, provisioning, access analysis, and reporting.
- Strengthen access provisioning, access reviews, emergency and privileged access oversight.
- Support Sarbanes-Oxley (SOX) and IT General Controls by collecting evidence, conducting audit walkthroughs, resolving issues, and providing clear documentation.
- Review access risks, weak role builds, SoD conflicts, insecure configurations, and control gaps.
- Partner with finance, supply chain, HR, procurement, SAP application teams, enterprise architecture, identity teams, cybersecurity, compliance, audit, and external partners.
- Provide technical mentorship without formal people-management responsibility.
What You'll Bring
- At least 6 years of relevant experience, or equivalent demonstrated experience, in SAP security, access governance, role development, or related work.
- Solid understanding of SAP ECC and S/4HANA authorization concepts.
- Experience in configuring or supporting SAP GRC and SAP Identity Access Governance.
- Familiarity with SAP BTP, IAS, IPS, and SAP RISE security considerations.
- Knowledge of Role-Based Access Control, Segregation of Duties, privileged access, user lifecycle management, and access reviews.
- Experience assisting with SOX, IT General Controls, internal audit, or external audit activities.
- Ability to guide complex initiatives, communicate clearly, and build trust with technical and business partners.
- Professional proficiency in French and English is required for this role. English is necessary to communicate and collaborate regularly with colleagues and leaders based in the United States who primarily work in English.
What Sets You Apart
- SAP security certification or related SAP certification.