Principal SAP Security Analyst

About the Role

Hasbro is seeking a Principal SAP Security Analyst to join our IT Security team in Montreal. This senior individual contributor position will assist in steering access governance, role development, compliance readiness, and security controls across SAP ECC, S/4HANA, SAP RISE, SAP Business Technology Platform, Identity Authentication Service, and Identity Provisioning Service.

 

We are shifting more SAP security responsibility internally and need someone who can guide complex tasks through knowledge, collaboration, and sound judgment. This role is not a people manager position, but it does provide technical direction to SAP analysts, access administrators, project teams, business partners, auditors, and implementation partners.

 

What You’ll Do

• Build SAP security architecture, standards, access models, and role design practices.
• Support our migration to SAP RISE, including role mapping, identity integration, access transition, privileged access, connectivity, and post-migration controls.
• Develop and enhance Role-Based Access Control models that uphold least-privilege, address business needs, and meet compliance requirements.
• Lead role cleanup, redesign, simplification, and Segregation of Duties remediation.
• Set up and maintain SAP Identity Access Governance and SAP Governance Risk and Compliance, covering connectors, workflows, risk rules, provisioning, access analysis, and reporting.
• Strengthen access provisioning, access reviews, emergency and privileged access oversight.
• Support SOX and IT General Controls by collecting evidence, conducting audit walkthroughs, resolving issues, and providing clear documentation.
• Review access risks, weak role builds, SoD conflicts, insecure configurations, and control gaps.
• Partner with finance, supply chain, HR, procurement, SAP application teams, enterprise architecture, identity teams, cybersecurity, compliance, audit, and external partners.
• Provide technical mentorship without formal people-management responsibility.

 

What You’ll Bring

• 6–8+ years of SAP security, access governance, role development, or related experience.
• Solid understanding of SAP ECC and S/4HANA authorization concepts.
• Experience in configuring or supporting SAP GRC and SAP Identity Access Governance.
• Familiarity with SAP BTP, IAS, IPS, and SAP RISE security considerations.
• Knowledge of Role-Based Access Control, Segregation of Duties, privileged access, user lifecycle management, and access reviews.
• Experience assisting with SOX, IT General Controls, internal audit, or external audit activities.
• Ability to guide complex initiatives, communicate clearly, and build trust with technical and business partners.

 

Preferred Experience

• SAP security certification or related SAP certification.
• Experience securing SAP RISE environments hosted on AWS or SAP-managed cloud infrastructure.
• Experience with S/4HANA migration, ERP modernization, hybrid SAP landscapes, or cloud identity integration.
• Experience in managing emergency access, conducting access certification, automating provisioning, and handling privileged access controls.
• Experience in a global enterprise environment with complex business processes and audit needs.

 

Equal Opportunity and Accommodation

Hasbro is committed to equality of opportunity in employment. We make employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, disability, veteran status, or any other legally protected status.

 

Reasonable accommodation is available for individuals with disabilities during the application process, interview process, and employment. Applicants who need accommodation should contact their recruiter or coordinator.

 

WE ARE AN EQUAL OPPORTUNITY / AFFIRMATIVE ACTION EMPLOYER
Hasbro is committed to equality of opportunity in all aspects of employment. We are committed to making all employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, or any other legally protected status.

 

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. If you have a disability and require assistance in this application process and need to request an accommodation, please contact your recruiter or coordinator.