Job description

We take play seriously. We’re looking for curious adventurers ready to find their party, fueled by imagination and drive to build what’s never been built before. At Hasbro and Wizards of the Coast, you’ll collaborate with passionate teams to reimagine our iconic brands and create experiences that spark joy, connection, and community through the magic of play. This is your chance to shape legendary play that lasts a lifetime. About the Role Hasbro is seeking a Principal SAP Security Analyst to join our IT Security team in Montreal. This senior individual contributor position will assist in steering access governance, role development, compliance readiness, and security controls across SAP ECC, S/4HANA, SAP RISE, SAP Business Technology Platform, Identity Authentication Service, and Identity Provisioning Service. We are shifting more SAP security responsibility internally and need someone who can guide complex tasks through knowledge, collaboration, and sound judgment. This role is not a people manager position, but it does provide technical direction to SAP analysts, access administrators, project teams, business partners, auditors, and implementation partners. What You’ll Do Build SAP security architecture, standards, access models, and role design practices. Support our migration to SAP RISE, including role mapping, identity integration, access transition, privileged access, connectivity, and post-migration controls. Develop and enhance Role-Based Access Control models that uphold least-privilege, address business needs, and meet compliance requirements. Lead role cleanup, redesign, simplification, and Segregation of Duties remediation. Set up and maintain SAP Identity Access Governance and SAP Governance Risk and Compliance, covering connectors, workflows, risk rules, provisioning, access analysis, and reporting. Strengthen access provisioning, access reviews, emergency and privileged access oversight. Support SOX and IT General Controls by collecting evidence, conducting audit walkthroughs, resolving issues, and providing clear documentation. Review access risks, weak role builds, SoD conflicts, insecure configurations, and control gaps. Partner with finance, supply chain, HR, procurement, SAP application teams, enterprise architecture, identity teams, cybersecurity, compliance, audit, and external partners. Provide technical mentorship without formal people-management responsibility. What You’ll Bring 6–8+ years of SAP security, access governance, role development, or related experience. Solid understanding of SAP ECC and S/4HANA authorization concepts. Experience in configuring or supporting SAP GRC and SAP Identity Access Governance. Familiarity with SAP BTP, IAS, IPS, and SAP RISE security considerations. Knowledge of Role-Based Access Control, Segregation of Duties, privileged access, user lifecycle management, and access reviews. Experience assisting with SOX, IT General Controls, internal audit, or external audit activities. Ability to guide complex initiatives, communicate clearly, and build trust with technical and business partners. Preferred Experience SAP security certification or related SAP certification. Experience securing SAP RISE environments hosted on AWS or SAP-managed cloud infrastructure. Experience with S/4HANA migration, ERP modernization, hybrid SAP landscapes, or cloud identity integration. Experience in managing emergency access, conducting access certification, automating provisioning, and handling privileged access controls. Experience in a global enterprise environment with complex business processes and audit needs. Equal Opportunity and Accommodation Hasbro is committed to equality of opportunity in employment. We make employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, disability, veteran status, or any other legally protected status. Reasonable accommodation is available for individuals with disabilities during the application process, interview process, and employment. Applicants who need accommodation should contact their recruiter or coordinator. WE ARE AN EQUAL OPPORTUNITY / AFFIRMATIVE ACTION EMPLOYER Hasbro is committed to equality of opportunity in all aspects of employment. We are committed to making all employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, marital status, or any other legally protected status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. If you have a disability and require assistance in this application process and need to request an accommodation, please contact your recruiter or coordinator. #StudiosWizards Employees may be eligible for annual and long-term incentives as part of their overall compensation package, depending on role, location, and eligibility. Benefits and programs may include: Health & Wellness Time Off to Recharge Financial Well-being Life & Family Support Volunteer and Community Initiatives Learning & Development Exclusive Perks Please review our Applicant Privacy Notice to learn how we collect, use, and protect your personal information in connection with the application process.

Requirements

Must-haves

What You’ll Do
Build SAP security architecture, standards, access models, and role design practices.
Support our migration to SAP RISE, including role mapping, identity integration, access transition, privileged access, connectivity, and post-migration controls.
Develop and enhance Role-Based Access Control models that uphold least-privilege, address business needs, and meet compliance requirements.
Lead role cleanup, redesign, simplification, and Segregation of Duties remediation.
Set up and maintain SAP Identity Access Governance and SAP Governance Risk and Compliance, covering connectors, workflows, risk rules, provisioning, access analysis, and reporting.
Strengthen access provisioning, access reviews, emergency and privileged access oversight.
Support SOX and IT General Controls by collecting evidence, conducting audit walkthroughs, resolving issues, and providing clear documentation.
Review access risks, weak role builds, SoD conflicts, insecure configurations, and control gaps.
Partner with finance, supply chain, HR, procurement, SAP application teams, enterprise architecture, identity teams, cybersecurity, compliance, audit, and external partners.
Provide technical mentorship without formal people-management responsibility.
What You’ll Bring

Nice-to-haves

SAP security certification or related SAP certification.
Experience securing SAP RISE environments hosted on AWS or SAP-managed cloud infrastructure.
Experience with S/4HANA migration, ERP modernization, hybrid SAP landscapes, or cloud identity integration.
Experience in managing emergency access, conducting access certification, automating provisioning, and handling privileged access controls.
Experience in a global enterprise environment with complex business processes and audit needs.
Equal Opportunity and Accommodation
Reasonable accommodation is available for individuals with disabilities during the application process, interview process, and employment. Applicants who need accommodation should contact their recruiter or coordinator.
#StudiosWizards
Employees may be eligible for annual and long-term incentives as part of their overall compensation package, depending on role, location, and eligibility. Benefits and programs may include:
Health & Wellness
Time Off to Recharge
Financial Well-being

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aws

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Vision

Wellness