Senior GRC Advisor
Calgary, Canada
Cenovus Energy
At Cenovus Energy, we energize the world to make people's lives better.About this opportunity:
The Senior GRC (Governance Risk and Controls) Advisor is responsible for implementing, maintaining and overseeing SAP Governance, Risk and Compliance (GRC) solutions. This role ensures regulatory compliance, risk mitigation, and secure access management across SAP systems, particular in SAP S/4HANA and ECC environment. The role will collaborate with Finance, Supply Chain, Plant Operations, HR and D&IT security teams to manage risks effectively, and act as a liaison to ensure continuous improvement in SAP GRC controls.
What you’ll do:
Lead the implementation, configuration, and optimization of SAP GRC Access Control (AC), Process Control (PC), and Risk Management (RM)
Conduct Segregation of Duties (SOD) analysis and implement remediation strategies for SAP users
Design and implement risk management strategies to mitigate financial fraud, cyber threats, and operational risks within SAP environment
Collaborate with internal and external auditors to facilitate SAP audits and address findings, defining and maintaining SAP security roles, authorizations, and user access provisioning
Ensure relevant performance management activities, such as measurement of Service Level Agreement (SLA), are maintained
Ensure documentation of application specifications and production of operational support manuals
Who you are:
Our ideal candidate will have the following minimum requirements:
Legally authorized to work in Canada
Post-secondary education in Computer Programming, Networking or Computer Science or Business
8+ years of SAP GRC Access Control and SAP Security experience
Understanding of the various integration components with SAP, like Active directory, OKTA, Workday, HR master data
Deep understanding of SOX compliance, NERC-CIP regulations, and cybersecurity practices
Understanding of segregation of duties (SoD), identify management, and SAP security architecture
Knowledge of SAP Identity and Access Management (IAM) and cloud-based SAP solutions
We acknowledge the value of transferrable skills and may consider equivalent combinations of experience and education should you not meet a specific requirement.
Note: The application deadline for this position is 11:59 PM MT April 11, 2025.
Internal candidates that are currently in a lower grade will be assessed based on their sustained job performance, how they demonstrate the expected organizational competency behaviors and values and in discussions with their current leader prior to resolving next steps.
Cenovus was ranked one of Canada’s Best Employers in 2025. We’re committed to being an employer of choice in our industry by offering a competitive total rewards package and employee programs and rewarding career development opportunities. Learn more.
#LI-SG1
If you require accessibility assistance to complete the on-line application or otherwise apply for an open position with Cenovus, its subsidiaries and affiliates, please email careeropportunities@cenovus.com
Who we are:
We’re an integrated energy company headquartered in Calgary with oil and natural gas production operations in Canada and the Asia Pacific region, and upgrading, refining and marketing operations in Canada and the United States. We’re committed to maximizing value by sustainably developing our assets in a safe, innovative and cost-efficient manner, integrating environmental, social and governance considerations into our business plans.
Find Cenovus on Facebook, X , LinkedIn, YouTube and Instagram.
At Cenovus, we embrace diversity of thought, experience and backgrounds to help us make better business decisions, address our challenges, seize opportunities and unlock innovative solutions. We’re committed to building a diverse, equitable and inclusive workplace where people feel respected, valued and engaged. We strive for a collaborative, physically and psychologically safe environment where you can be yourself, feel a sense of belonging and thrive. For more information, including details on our inclusion and diversity targets and networks, visit Cenovus.com.
The requirements of this posting may be modified to support business needs. Title and compensation administration will be based on the skills and capabilities of the successful incumbent.
Interested in this opportunity? Click the Apply link.
If you are a CURRENT EMPLOYEE please apply by going to our Internal Career Site
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Active Directory Audits Cloud Compliance Computer Science Finance Governance IAM Okta Risk management SAP SOX
Perks/benefits: Career development Competitive pay
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.