Principal SAP Security Analyst

We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime.

Hasbro is seeking a Principal SAP Security Analyst to join our IT Security team in Montreal. This senior individual contributor position will assist in steering access governance, role development, compliance readiness, and security controls across SAP ECC, S/4HANA, SAP RISE, SAP Business Technology Platform, Identity Authentication Service, and Identity Provisioning Service.

We are shifting more SAP security responsibility internally and need someone who can guide complex tasks through knowledge, collaboration, and sound judgment. This role is not a people manager position, but it does provide technical direction to SAP analysts, access administrators, project teams, business partners, auditors, and implementation partners.

• Build SAP security architecture, standards, access models, and role design practices.

• Support our migration to SAP RISE, including role mapping, identity integration, access transition, privileged access, connectivity, and post-migration controls.

• Develop and enhance Role-Based Access Control models that uphold least-privilege, address business needs, and meet compliance requirements.

• Lead role cleanup, redesign, simplification, and Segregation of Duties remediation.

• Set up and maintain SAP Identity Access Governance and SAP Governance Risk and Compliance, covering connectors, workflows, risk rules, provisioning, access analysis, and reporting.

• Strengthen access provisioning, access reviews, emergency and privileged access oversight.

• Support SOX and IT General Controls by collecting evidence, conducting audit walkthroughs, resolving issues, and providing clear documentation.

• Review access risks, weak role builds, SoD conflicts, insecure configurations, and control gaps.

• Partner with finance, supply chain, HR, procurement, SAP application teams, enterprise architecture, identity teams, cybersecurity, compliance, audit, and external partners.

• Provide technical mentorship without formal people-management responsibility.

• 6–8+ years of SAP security, access governance, role development, or related experience.

• Solid understanding of SAP ECC and S/4HANA authorization concepts.

• Experience in configuring or supporting SAP GRC and SAP Identity Access Governance.

• Familiarity with SAP BTP, IAS, IPS, and SAP RISE security considerations.

• Knowledge of Role-Based Access Control, Segregation of Duties, privileged access, user lifecycle management, and access reviews.

• Experience assisting with SOX, IT General Controls, internal audit, or external audit activities.

• Ability to guide complex initiatives, communicate clearly, and build trust with technical and business partners.

• SAP security certification or related SAP certification.

• Experience securing SAP RISE environments hosted on AWS or SAP-managed cloud infrastructure.

• Experience with S/4HANA migration, ERP modernization, hybrid SAP landscapes, or cloud identity integration.

• Experience in managing emergency access, conducting access certification, automating