SAP SECURITY OFFICER

WINNIPEG, MB

Manitoba Hydro is consistently recognized as one of Manitoba's Top Employers!

Great Benefits

• Competitive salary and benefits package.
• Defined-benefit pension plan.
• Nine-day work cycle which normally results in every other Monday off, providing for a balanced approach to work, family life

and community.

• Flex-time and partially remote work schedule (providing the option to work remotely 3 days per 2 week period), depending on

nature of work, operational requirements and work location.

Manitoba Hydro is a leader among energy companies in North America, recognized for providing highly reliable service and
exceptional customer satisfaction. Join our team of Manitoba's best as we continue to build a company that supports innovation,
commitment, and customer service, while actively supporting a diverse, equitable and inclusive workplace.

Under the general direction of the SAP Technical Services Lead, you will be the key resource for the administration of security and
authorization activities for the SAP systems, composed by the current SAP ECC operation and the S/4HANA ecosystem which is
currently being implemented.

As part of the team, will be the key technical specialist responsible for the development, implementation and maintenance of security
authorization roles in SAP and will also oversee SAP user administration and system access duties. Will consult with SAP users in
regard to user administration and authorization issues and will work closely with other Security, Logistics, Financial & HR and
Technical staff in Corporate Information Systems and Energy Information Systems Departments.

In addition to supporting the ECC environment, the SAP Security Officer will contribute to Manitoba Hydro's SAP S/4HANA
implementation project. This includes participating in the design, configuration, and deployment of security models within the
S/4HANA landscape, ensuring alignment with existing ECC strategies while adopting S/4HANA best practices.

This is a term opportunity for a period of approximately 6 - 12 months.

Responsibilities:

• Act as the primary resource for the strategy setting, definition, implementation and monitoring of all SAP security and user

admin standards and procedures. Evaluate the effectiveness of standards and procedures.

• Mentor and direct work of junior SAP Security analysts.
• Set the direction for the SAP user administration duties in multiple development and production systems, using a role-based

identity management approach while following segregation of duty internal controls, as well as creating and maintaining user
master records.

• Co-ordinate and lead the SAP security work on projects.
• Provide on-going support, troubleshooting and resolution of SAP Security Access, SAP instances, software and services;

Linux scripts/software; HANA and other related databases; SAP Desktop software, and printers.

• Provide advisory services to SAP Business Analysts, developers and management in the areas of security and system access

in SAP.

• Act as the primary resource for the development, creation and maintenance of security authorization roles within SAP, using

the SAP Profile Generator. Ensure authorization role integrity throughout multiple SAP Systems and Clients. Ensure that
roles allow users to appropriately access functionality within the SAP system while limiting access to sensitive data.

• Create and maintain technical documentation as required.
• Maintain and administer Microsoft Access databases of SAP user information and SAP system usage, which includes

downloads of data from SAP.

• Create regular and ad hoc reports using various tools and a variety of data sources for management and line of business as

requested.

MANITOBA HYDRO IS COMMITTED TO DIVERSITY AND EMPLOYMENT EQUITY

Reference Code: CO57115161-01

• Co-ordinate testing of authorization roles and work with Business Analysts to ensure that SAP users can only access

appropriate functionality.

• Investigate and resolve SAP security access issues as they arise.
• Liaison with the user community to keep them informed of security issues related to SAP.
• Keep abreast of SAP security enhancements as they apply to the implementation at Manitoba Hydro.
• Provide on call support for the SAP infrastructure outside of regular working hours.
• Perform other related duties and responsibilities as required.
• Support the development of security testing protocols.
• Contribute to cutover planning.
• Assist in the transition of users and roles from ECC to S/4HANA.
• Implement SAP Identity Access Governance (IAG) or equivalent S/4HANA security tools—including Fiori role design,

embedded analytics authorization, and cloud-based identity provisioning.

• Familiarity with SAP GRC Access Control integration with IAG and SAP Business Technology Platform (BTP) security

concepts will be considered an asset.

Qualifications:

• A four year degree from a university of recognized standing with five years of related ITS experience with at least three years

of SAP security experience demonstrating the skills and qualities required by this position;
OR

• A two year diploma from an institute of recognized standing and seven years of related ITS experience with at least five years

of SAP security experience demonstrating the skills and qualities required by this position.

• Must have comprehensive knowledge of SAP security and authorizations.
• Must have demonstrated superior personal computer skills, including a high level of proficiency in various software

applications, for example: Microsoft Access and Excel.

• Demonstrated ability to adapt and learn quickly in new situations.
• Proven ability to complete detailed work accurately.
• Possess initiative with the ability to conduct research and analysis.
• Possess an analytical nature and mature judgment with the ability to make and implement sound decisions.
• Tactful and diplomatic in dealing with others.
• Ability to handle confidential and sensitive information with discretion and integrity.
• Comprehensive knowledge of audit controls on business processes.
• Prepared to work overtime when required.
• Prepared to come in to work at any time during a 24-hour period to ensure system reliability.
• Prepared to be on-call on a rotational basis to provide a stable and reliable SAP infrastructure for the Corporation.
• Obtain and maintain a current Personnel Risk Assessment and a "Clear" security rating in accordance with Manitoba Hydro

Policy P513.

• Critical Infrastructure Protection (CIP) Training is required and must be completed prior to transfer date and renewed annually.

• Practical experience in the following:

• SAP security and authorizations

• SAP and support of SAP infrastructure components

• Linux and Windows Operating Systems

• HANA and Oracle databases

• SAP S/4HANA security concepts—including IAG, Fiori role design, and cloud identity services

• Working in hybrid ECC/S/4 environments and possess a forward-looking mindset to support Manitoba Hydro's digital

transformation goals

• SAP Analytics Cloud (SAC) security and integration with third-party identity providers

Salary Range

Starting salary will be commensurate with qualifications and experience. The range for the classification is $41.98-$57.92 Hourly,
$80,437.76-$110,992.96 Annually.

Apply Now!

Visit www.hydro.mb.ca/careers to learn more about this position and to apply online.

The deadline for applications is NOVEMBER 3, 2025.

We thank you for your interest and will contact you if you are selected for an interview.

This document is available in accessible formats upon request. Please let us know if you require any accommodations
during the recruitment process.

Reference Code: CO57115161-01

#IND1