Engineering Management
Resume:
NISHA KRISHNAN
SAP Security Consultant
******.********@*****.***
PROFESSIONAL EXPERIENCE:
SAP SECURITY CONSULTANT with over 6 years of experience R/3, APO systems.
Carried out three SAP Security rollout projects, two version upgrades, partially supported in GRC 10.0
implementation and multiple support projects.
Ability to design and develop authorization concept for ECC R/3 and Rolling out the concept to different entities.
Develop profiles/roles which including complex design restrictions.
GRC 10.0 Access control configuration for all modules – Access Risk Analysis (ARA), Access Request Management (ARM), Super user Privilege Management (SPM) and Business Role Management (BRM).
Co-ordinate comprehensive testing of all profiles and authorizations to ensure accuracy and segregation of duties.
Designed a comprehensive security Matrix that documented the security design and controlled the user requests in the production environment.
Expertise on CUA user administration, troubleshooting Authorization issues with SU53, ST01.
Expertise in Designing role concept, Role development and User Management tasks.
Expertise in using CATT scripts and LSMW for mass user creation, maintenance and role assignment.
Experience in Authorization objects and Analysis authorization.
Good Exposure on Internal audits.
Good Experience in Design and Development of Authorization Concept for ECC BW systems as per Business requirements.
Knowledge in SAP GRC Access Control 5.3 Components RAR/ERM/CUP/ SUPM.
Knowledge in SAP HR Authorization concepts.
Knowledge in SAP Basis activities.
Knowledge in ITIM.
TRAININGS:
Completed GRC AC 10.1 training.
Internal Training on SAP Security and SAP Basis – Conducted by Robert Bosch.
SKILLS:
ERP : SAP R/3 ECC 6.0 / 4.7
SAP Tools : Customization tools like eWorks, ServUs, Identity Manager, RB-AIS (AUDIT Information System)
Reporting Tools: Remedy 7 (Incident and Change management),HP Quality Centre.
SAP PROJECT EXPERIENCE:
Employer Robert Bosch Engineering And Business Solutions Limited
Duration February 2014 – August 2015
Client Robert Bosch GMBH – Division Gasoline systems
Role Authorization Consultant
Creation and configuration of connectors for all types of backend systems.
Design and implementation of AC workflows involving user creation, change, lock/unlock, termination.
Configuration of HR triggers for new hire, position change and termination scenarios.
Configuration of BRM methodologies for various role types.
Configuration of FF ID’s for EAM
Building of rules for customized objects along with the Global ruleset rules.
Configuration of Alert generation and Batch risk analysis.
Documentation of all configuration activities for training and sign off
End user trainings.
Co-Ordinating and gathering the requirements from Business, Functional consultants for preparing the rule-sets, Approver information, levels of approvals, role naming convention for configuring GRC AC10 Modules.
Good exposure in generating the SAP License Data report.
Prepared numerous reports and coordinated with process owners to make the company SOX compliant.
Working on IDM (Identity Management) on Enterprise portal for user creation and Mass user creation.
Prepare documentation for the design plan, review specifications for modifications.
Employer Robert Bosch Engineering And Business Solutions Limited
Duration January 2012 – April 2013
Client Robert Bosch S. de R.L. de C.V., Mexico- Division Electric Drives Rollout(carried onsite at
Mexico)
Role Authorization Consultant – ICO tasks
Collecting business requirements by attending process-scoping workshops with members from all other modules. Comparing the requirements of plant to what is applicable in the UBK-RM.
Responsible for gathering and continually improving cross-functional business area knowledge to generate effective security controls.
Defining and recommending changes to the UBK-RM (i.e. new processes, enhancements) to meet the requirements specific to new plant using se16 tables and Defining the specifications for such changes and acting as an interface to the development team
Training key users on the processes to be followed after go-live.
Creating the roles and users required which localize the processes to local conditions (e.g. local departments, local laws, and local organizational units).
Created Mass users using LSMW. Created Mass roles using Catt scripts. User group creations done using SUGR.
Support during Integration testing.
CUA / CCA check for the roles created.
Post Go-Live Support
Preparation of the end user documents and Identifying roles and responsibilities of user departments to ensure implementation of the authorization concept as per Bosch guidelines.
Planning the cut-over strategy (i.e. strategy for changeover to new system) in conjunction with the Business heads for the Go-live. Check for jobs scheduled using sm36,sm37 transactions.
Maintenance of Quarterly Mitigation control for mitigating Risks against users in Compliance calibrator as per Business Owner request.
Employer Robert Bosch Engineering And Business Solutions Limited
Duration November 2011 – May 2012
Client Robert Bosch GMBH - Division Solar Energy Rollout
Role Authorization Consultant
Design, Developing, Testing and Implementing SAP Security Roles, Profiles and Authorizations for various landscapes using Profile Generator as per Business requirements
Trouble shooting support for the users authorization failures in all SAP applications using SU53, ST01 and resolving the Security issues and support in integration testing of Roles/Profiles.
Analyzing User's master record for roles and authorizations using SUIM and AGR* / USR * Tables to assign proper roles in case of authorization failure and SOD conflicts
Developing various kind of roles (Master - derived / Composite role ) with different set of organizational levels as per Business requirements using PFCG and transporting to QA / PRD via transport management SE03,SE10/STMS and SE01 (transport management tool)
Administering Users and role assignments in different system and in their clients by Central User Administration (CUA) and troubleshooting the role distribution via SCUL
Segregation of Duties (SOD) analysis for users and roles and advising Business owners for Role assignment.
Generating critical access review report and monthly SOD report with mitigated risks for SOX Internal Control Compliance.
Maintenance of Quarterly Mitigation control for mitigating Risks against users in Compliance calibrator as per Business Owner request.
Employer Robert Bosch Engineering And Business Solutions Limited
Duration May 2011 – February 2012
Client Robert Bosch LLC, Indiana- Division Electric Drives Rollout
Role Authorization Consultant – ICO tasks
Collecting business requirements by attending process-scoping workshops with members from all other modules. Comparing the requirements of plant to what is applicable in the UBK-RM.
Defining and recommending changes to the UBK-RM (i.e. new processes, enhancements) to meet the requirements specific to new plant using se16 tables and Defining the specifications for such changes and acting as an interface to the development team.
Training key users on the tools used such as ServUs and IDM and processes to be followed after go-live.
Creating the roles and users required which localize the processes to local conditions (e.g. local departments, local laws, and local organizational units).
Created Mass users using LSMW scripts. Created Mass roles using Catt scripts.
Preparation of the end user documents and Identifying roles and responsibilities of user departments to ensure implementation of the authorization concept as per Bosch guidelines.
Support during Go-live of the projects by ending already existing user sessions SM04 and AL08 transactions.
Employer Robert Bosch Engineering And Business Solutions Limited
Duration March 2011 – May 2011
Client Robert Bosch GMBH – Divion PA-ATMO for ERP Upgrade from 4.6c to ECC6 (carried
from Onsite – Germany)
Role Security Consultant
Concept phase training and discussions to be done during the upgrade.
Discussions with the key-users on the Object level changes to be done for transactions in su24 for the upgrade and modifications in the same.
Checking for maintained t-codes and other customized tcodes using USOBT,USOBT_C AND USOBX tables.
Analyzing User's master record for roles and authorizations using SUIM and AGR*, USR * Tables to assign proper roles in case of authorization failure and SOD conflicts.
Upgraded all roles used in the system from 4.6C to ECC6.
Discussed and highlighted the importance/necessities of ECC6 objects with user department heads, system owner and process owners which are needed for day to day business.
Changing single roles/composite roles in the SAP system and transportation of the same
Testing phase with corrective authorization solutions.
Co-ordination and communication with the process owners, support users and end users to solve the authorization related issues.
Implementation of E-works (workflow for role creation and modification)
Post Go-Live support.
Employer Robert Bosch Engineering And Business Solutions Limited
Duration June 2010 – November 2010
Client Robert Bosch GMBH – Division Gasoline systems for Version Upgrade
Role Authorization Consultant
Discussions regarding Authorization concepts status
Modification of Roles via pfcg and Transport orders to be moved to Production during upgrade
Confirmation of Jobs Scheduled to be run during Go-Live using sm36, sm37 transactions.
Creating roles/composite roles using pfcg and handling Transport Management System for R/3 and BW and APO systems.
User master comparison done using pfud transaction.
Identify Critical combinations(CCA and CUA) and authorizations using RB-AIS tool.
Implementation of E-works (workflow for role creation and modification)
Employer Robert Bosch Engineering And Business Solutions Limited
Duration July 2009 – August 2015
Client Support Projects- for Chasis Controls and Brakes, Gasoline Systems,RBIN,ATMO, SE
Role Authorization Consultant
Creating single roles/composite roles for R/3, BW and APO systems
Implementation of E-works (workflow for role creation and modification)
User creation and role assignment using su01 and su10 transactions.
Unlocking User IDs and password reset.
User administration and authorization allocation
Creation/Deletion of User IDs via ServUs tools for EMEA systems.
Solving Authorization Issues/Errors faced by users through SU53 and ST01.
Role assignment for user manually or via ServUs.
Providing authorization solutions via help desk tickets.
EDUCATIONAL QUALIFICATION:
Bachelor of Engineering in Computer Science and Engineering with a CGPA of 7.52 from Coimbatore Institute of Technology, Coimbatore.
Higher Secondary with 87.8% from Vidhya Vikas Higher Secondary School, Tiruchengode.
High School with 87.5% from Stanes Higher Secondary School, Coimbatore.
PERSONAL DETAILS:
Languages Known English, Tamil, Kannada
Visa Type L2 with EAD
Contact this candidate