Sap Security Analyst
Resume:
Robert Nichols
Summary:
** ***** ** ********** ************ and designing SAP security solutions for a wide variety of companies and industries in the role of consultant.
SAP Implementations and upgrades including on S4 HANA and using Fiori Apps.
Perform SAP Security Production Support
Perform SAP S4 HANA Security
GRC - Work extensively in GRC such as checking SOD conflicts and running various reports
CA Identity Portal – Identity and Access Management (IAM)
Completed formal training from SAP in all areas of SAP security and authorizations.
Extensive experience with user administration, role design such as task-based role design, audit response/preparation.
IT Controls –Ensuring / working with procedures policies and activities performed to meet IT objectives, manage risks, comply with regulations and conform to standards for each company and project. Includes working to automate or combine human and automated activities.. requirements were driven by the companies individually
Writing Controls – we had specific standards for SOPs, or to have roles, naming conventions etc for users and roles and other policies needed to pass audit requirements.
Mitigation – used GRC for mitigation to determine when an SOD violation actually already had a mitigating factor. I used GRC for these reports and analyses.. and to determine the proper SME to get the migitationg a0pprogved within a set timeframe or else access would be removed.
20+ years experience working with auditors. I was the security lead – their point of contact for all audits. For example at IBM for D&T or any of the other big five at the time We could provide auditors with any information they needed such as what roles contain access to XXXX for example. I’m aware of how to communicate with auditors. Answer their questions honestly and directly and add NO further voluntary detail unless asked. If you don’t’ know, you tell them you’ll find the answer and get back to them. And you don’t start trying to clean up a system before the audit is done..etc.. just examples//
Professional experience:
Nestle – Redmond, WA Nov 2020 to May 2021
Senior SAP Security Consultant (w-2 Contractor working for ACS on behalf of Wipro).
HANA S4 SAP Security
SODs / GRC
SAP Security Support of production\
Run Security Reports and make changes and suggestions based on report results.
Boeing, Bellevue, WA Jul 2019 to Mar 2020
Senior SAP Security Consultant (Contract)
SAP Center of Excellence (COE) for HCL America and Connexions at Boeing
S4 HANA Role Design with Fiori Apps (catalogs, groups, tiles)
Implementation and upgrade support
S4 HANA Role Design, builds and rollouts
HANA Studio
SAP Security production support
Puget Sound Energy, Bellevue, WA Jun 2018 – Jul 2019
Senior SAP Security Analyst
Manage SAP Security for a variety of teams and projects simultaneously.
Use CA Identity and Access Management (IAM) for tracking and performing requests, whether manually done or through auto-provisioning.
Role Provisioning - Use the profile generator (pfcg) to design, develop, and maintain roles and profiles for all SAP landscapes.
End user Provisioning / De-provisioning (User Administration – create, maintain, unlock, reset, offboard users).
Perform security audits, develop project plans to roll out new security roles as the company’s business processes and SAP authorization concepts need to change.
Provide guidance and assistance, handling day-to-day support of SAP for multiple SAP landscapes, including but not limited to PI, CRM. BW, ECC, EWM, IWM, Gateway, etc.
Design Role-based security and manage migration of roles/profiles through development, QAS and Production across multiple landscapes.
GRC admin, SAP HANA security admin, Perform SAP Production Support
Provide diagnoses of security issues and make recommendations to my internal customers and management for corrective action(s).
Actively participate in the development and maintenance of global Security Policies and Procedures for SAP.
IBM, Dallas, TX (Multiple locations) Jan 2001 – Jun 2018
SAP Security administrator/consultant
Use the profile generator to design, develop, and maintain roles and profiles for all versions of SAP. Also familiar with manual profiles for earlier versions.
Perform security audits, develop project plans to roll out new security roles as companies business processes and SAP authorization concepts need to change. Also perform upgrades from and to various versions.
Provide guidance and assistance, handling day-to-day support of SAP for multiple customers on multiple SAP versions.
Design Role-based security and manage migration of profiles through development, QAS and Production in various global environments
Provide diagnoses of security issues and make recommendations to customers and management for corrective action(s).
Actively participate in the development and maintenance of global Security Policies and Procedures for SAP.
Experience using AIS and the security audit log.
Work with Customers, including IT managers, Business Analysts, Basis Team members, Configurators, and other functional areas of SAP development on issues related to SAP security.
Respond to security related incidents and, when necessary, perform analysis of potential security breaches.
Create and maintain user master records as necessary.
Symmetry Corporation, USA (Multiple locations) Nov 2000 - Dec 2000
Contract SAP Security Consultant
Successfully led an SAP Security upgrade within the client’s required timeframe.
Ensured client’s ability to meet their deadlines by developing an SAP Security upgrade strategy based on the client’s specific needs (by scoping out project, developing a project plan, negotiating customer buy-in, and rolling out the upgrade – both pre and post upgrade tasks included).
Saved client time on accomplishing future tasks by developing CATT scripts to automate redundant tasks
Lucent Technologies, USA (Multiple locations) Feb 1998 – Nov 2000
SAP Security Team Lead / Business Analyst
Developed security strategies for global projects. For example: successfully led SAP security implementations as the company rolled out a new U.S. division, a division in Germany, and a division in Singapore. This included documenting policies and procedures as they pertained to those new divisions. Project manager on all matters of SAP security for these projects.
Used the profile generator to develop, maintain, and generate activity groups. Used PD Org within the HR module to create and maintain positions and jobs. Developed, maintained, and deleted user master records as needed.
Diagnosed and resolved SAP security issues as required.
Developed SAP security pre and post upgrade strategy from 3.1x to 4.6x. Performed client copies.
Approved transports for Production.
Documented SAP Security Policies and Procedures
Successfully managed and completed a project to train IBM help desk personnel on mundane, redundant SAP security tasks, such as how to lock/unlock users and reset passwords
SAP Training Business Analyst
Performed basis and security functions in SAP training system. Developed on-line help for SAP.
Monitored/ approved CTSs and configuration changes to the training system. Developed data load scripts for SAP training courses using LoadRunner.
Developed documentation and courses Trained end users.
DA Consulting Group, USA Jan 1997 – Feb 1998
Project Lead
Managed consultants and senior consultants in the development of SAP documentation and training materials. Completed all dataload requirements for SAP courses.
Key Skills:
S4 HANA, Fiori, GRC, have worked on role design for PL2PR and O2C as well as P2P Hana Studio, etc.
Key Courses and Training:
Completed all available SAP courses regarding SAP security and authorizations, including HR security and structural authorizations.
Completed SAP security review.
Completed IBM internal course: Project Management Orientation Completed Data Privacy Awareness course
Education:
University of North Texas, United States of America 1995
Bachelor’s Degree - BA in English - Technical Writing
Languages:
English - Fluent
German - OK
French - Basic
Contact this candidate