Abdirizak, Mursal
Mobile: 763-***-****.
Email: *********@*****.***
Professional Qualifications
• Over 14 years of experience of SAP in
SAP R/3/ECC S4 HANA Basis/Security
& GRC
• Worked at 3M company in MN as Sap
Security position as a contractor for
three years
• Worked as a Sap Security
Administrator for Dahabshiil Company
in Dubai, UAE
• Accustomed to providing support for
a 24X7 environment.
• In-depth understanding of multiple
operating systems
• Efficient in time management and
able to multitask
• Expert for a wide variety of
networking tasks including installing,
configuring, analyzing, maintaining,
troubleshooting, and repairing all
network, VMware, database servers
and server infrastructure
• Extremely expert knowledgeable of
Cisco networks as well as their
installation and maintenance
• Outstanding experience in Quality
Assurance more than 3 years,
specializing in manual and automatic
software testing which includes Black
Box, White Box and Grey Box methods
as well as Beta, Unit, Smoke,
Functional, Integration / End-To-End,
Volume, Regression and User
Acceptance
• Over 3 years of Quality Assurance
and Software Testing experience
defining best practices, processes,
test strategy and methodology
• Experienced in all the stages of the
SDLC (Software Development Life
Cycle).
• Demonstrated excellence in
Maintaining overall test framework
along with key phases of test planning,
test design, building, automating,
executing tests, and reporting results.
• Extensive experience in Manual and
Automated testing.
Technical Skills
ERP: SAP R/3 4.7EE, ECC 6.0, Net
Weaver (SOLMAN 4.0).
Operating System: Windows NT,
Windows 2003/2008 Server, SUSE
LINUX10.
Database: Oracle 9i/10g, 11g & MSSQL
2005, 2008, GRC10
ECC, ERP, SAP FICO, SAP MM, SAP PP,
Sap PI, SAP BASIS, SAP HCM HR
modules including OM/PA, eCareer,
EHS etc, Sap SD.ECC 6.0, Windows
server 2003, Oracle 10g.Functional
knowledge of SAP ECC, GTS, CRM,
BW, Portal, Solution Manager and GRC
modules and the critical access
requirements
Routing/WAN: STATIC, DEFAULT,
DYNAMIC: RIP, EIGRP, OSPF, RIP, IS-IS,
BGP, PPP, HDLC, MPPP, VPN, MPSLS,
S-DWAN, I-WAN, SMNT, NETFLOW,
NAT, QOS, ACL, VLAN ACL AND PORT
SECURITY.
Switching:VLAN, TRUNK, VTP, STP,
Ether channel, INTERVLAN, RSTP AND
MSTP.
Security:ACL, VLAN ACL, AND PORT
SECURITY
Platforms: Cisco IOS(11.x, 12.x), PIX
IOS(6.x, 7.x), CAT-OS UNIX, LINUX,
Programming language: C++,AND
HTML
Infrastructure services: DHCP, DNS,
SMTP, FTP, TFTP
LAN technologies: Ethernet, Fast
Ethernet, Gigabit Ethernet, & 10
Gigabit Ethernet
WAN technologies: Frame Relay, ISDN,
ATM, MPLS, leased lines & exposure to
PPP, DS1, DS3, OC3, T1 /T3 & SONET
Operating Systems: Cisco IOS,
Windows Server 2003/2000/NT and
Workstation 98/XP/2000
Hardware: Catalyst 2960/ 3550 /
3750/ 4500 / 6500 series switches,
3845/ 3745/ 2821/2600 Series Cisco
routers, Cisco ASA 5520, PIX 535,
Checkpoint r65, Nortel 3120 router,
Nortel 8300/4548.
Network Tools:Alter Point, NetQOS
Management: ITIL training
Testing Tools: Manual testing, Quality
Center, Test Director 6.x/7.x,
Documented, SQL, DML
Operating Systems: Windows, s
2000/2003/NT/XP,07, and 8 DOS,
UNIX, Linux
Packages: MS Office, MS Access, and
MS Excel
Graphic User Interface Tools: Visual
Basic 40/5.0
Test Strategies: Integration, System,
Regression, User-Acceptance, Smoke,
and Black Box
Software: Configuration, Installation,
and Troubleshooting, Window 2000/
XP Pro, Window 98, Window NT,
Server 2000/2003, Exchange 2000,
Linux Red hut and Fedora, Video Card,
Hard Drive, CD/ DVD drivers
SAP Configuration SAP HANA SAP
Basis Master Data SAP Solutions
SAP-SD SAP GRC Access Control
SAP ERP SAP Materials Management
(SAP MM) SAP Products Career
Management Technical Support
Transportation Management DLP
Data Governance Microsoft 365 Data
Analysis Data Visualization Tableau
Financial Accounting SAP S/4HANA
Sap Fiori Bookkeeping Cloud
Accounting QuickBooks Online Data
Management Microsoft Excel
QuickBooks Office 365 Spreadsheets
Microsoft Office SAP BI SAP
NetWeaver Business Warehouse (SAP
BW) Customer Relationship
Management (CRM) AutoCAD Plant
3D Windows iOS iPad iPhone
Accounts Receivable (AR) Business
Intelligence (BI) Microsoft Power BI
Accounting SAP Business One Small
Business IT Solutions Google Sheets
Financial Statements General Journal
Accounts Payable ABAP
Education
Bachelor of Computer Application
(BCA)@ Mogadishu University,
Mogadishu, Somalia
Certificate of SQL Server (SSMS),
Dakota County Technical College,
Rosemount, Minnesota
Certifications
>Introduction ti cyber security and
tools
IBM
>SAP ERP Essential Training
>Learning SAP MM (Materials
Management)
>IT Service Desk Careers and
Certifications: First Steps
>SAP Transportation Management
Overview
>Microsoft 365: Manage Governance
and Compliance
>Tableau Essential Training
>SAP S/4 HANA Financial Accounting
Overview
>Learning SAP Fiori: End User
>QuickBooks Online Essential Training
>QuickBooks and Excel: Importing and
Exporting Transactions
>Excel Essential Training (Office 365/
Microsoft 365)
>Office 2019 New Features
>Introduction to SAP BI/BW
>AutoCAD Plant 3D Essential Training:
Admin
>Troubleshooting Common PC Issues
for Users
>iOS 11: iPhone and iPad Essential
Training
>SAP Accounts Receivable Boot Camp
>Power BI Essential Training (2019)
>SAP Financials Essential Training
>SAP Business One Essential Training
>Google Sheets Essential Training
>SAP BI/BW: Project Design and
Implementation
>S/4 Finance: Fiori General Journal
Boot Camp
>Introduction to SAP OpenUI5 Apps
>SAP Accounts Payable Boot Camp
>ABAP for SAP Users
>Learning SAP SD (Sales and
Distribution)
>Cybersecurity Compliance Framework
& System Administration
Coursera Certified Courses
Professional Experience
Sap Security &GRC Admin(ECC/HR/BI/
SCM/PI/Fiori/ S4HANA DB/FICO), TMs,
MM, across multi modules of SAP
environments. @(Dahabshiil Co.) Jan
2007-present
• Creating roles with different T-codes
with Missing authorization different
objects and functional module.
• Working on profile roles.
• Maintaining Organization levels.
• Using user trace.
• Restriction access reports and T-
codes via Role.
• Creation of Composite and Derive
role.
• Offshore security working
procedureCUA configuration and user
management, Security Upgrade
Troubleshooting of Security and
Authorization related issue User
Administration and Authorization
Management GRC Knowledge &
experience
• SAP Security administration and
maintenance
• Design, Configuration & Testing of
SAP Security Roles
• Creating/ Maintaining the ORG Fields
in Objects
• Adequately securing programs,
transactions and tables
• Role Download/ Upload, Mass
Generation/ Mass Transport.
• Mass Assignment and Re-assignment
of Roles/ Users
• Mapping of Missed Authorization
Object in T-codes.
• Mapping of T-code with Reports and
Programs.
• Monitoring Central User
Administration (CUA).
• Maintaining (Create, Delete, Change,
Copy) SINGLE, COMPOSITE and
DERIVE Role in Customer Namespace.
• Locking critical transactions using
SM01.
• Assigning HR ESS/MSS access to the
user as per requirement.
• Analyzing SU53 screen shots to
debug authorization problems.
• Analyzing ST01 trace log to fix the
authorization bugs.
• Extensively used t-codes SU01,
SUIM, SU10, PFCG, SE16N, SWI5,
RSABAPSC, SE38/SA38, SE80, SE93,
SE97, ST01, SE01/09/10, STMS, SM36,
SM37, PFUD, SUPC, PA20, PA30,
PPOSE, PO13, RSA1, SCMA & SM
WORKCENTER (in SolMan).
• Identifying the missing authorizations
using SU53/ST01 trace and maintaining
them in suitable role and SU56 to find
security problem.
• Troubleshooting performance issues
& adjustment of SAP profiles.
• Locking critical transactions using
SM01.
• Years of experience delivering full
cycle SAP Security.
• Experience with GRC Access Control
and SOD Controls
• Experience with SOX compliance
• Excellent organizational, analytical,
written/verbal communication and
presentation skills
• Strong interpersonal skills which
provide the ability to establish and
build working relationships with
individuals throughout the organization
required
• Internal / external audit experience
• Global project experience
• SAP support and project rollout
experience
• Involved in post installation and
Configuration of GRC activities.
• End-to-end implementation of GRC
Access Control Suite 10.0 and
configured all the components in it as
when required.
• Checking the log report as and when
required for audit purposes.
• Worked with the Business Process
Owners to restrict sensitive
transactions and security
authorizations, and ensured
segregation of duties (SOD) over all
fields of business areas.
• Undergone internal training on GRC
Access Control suite.
• Extensive experience in analyzing
and processing SOD issues using
VIRSA 4.0 Compliance Calibrator, GRC
5.3/ 10.0/ 10.1 Access Control tools
such as RAR/ARA, SPM/EAM, CUP/
ARM, ERM/BRM components.
• Excellent understanding of Sarbanes-
Oxley Act (SOX), Payment Card
Industry (PCI) controls, policies and
procedures.
• Successfully configured SAP GRC
Access Control 10.0/10.1 components.
• Involved in Configuration and
customization of Multi-Stage Multi-
Path (MSMP) workflows, BRF Plus
Rules.
• Hands on experience in Rule Set
Customizations, Configuring Mitigation
Controllers, Approvers, Monitors in
ARA.
• Successfully defined best practice
methods for usage of security controls
for SAP GRC Access Controls.