Sap Grc Security

**+ years of experience in the SAP modules Security and SAP’s Governance Risk and Compliance (GRC 10.1 and 12.0) application. His experience includes assessment, design, implementations, production support, redesign and upgrade for SAP projects. These projects involved gathering business requirements, building security, designing system configuration and workflow, completing testing, and effectively enabling these applications for production.

Experience working in the SAP GRC segregation of duties space and has built SAP GRC segregation of duties rule set, performed testing of rule set and mitigating controls. SAP S4HANA Role and User Management, SAP ECC Role and User Management, SAP EWM Security Authorizations, SAP BI / BO Analysis Authorization and Role Management, SAP CRM and SRM Security, SAP HR Authorization, SAP Fiori Authorization, SAP HANA Security SAP GRC AC 10.0, 10.1 & 12.0 Quantum (Treasury Tool) and CLM (Content Mgmt. Tool). Worked on extensively on Internal and External Audit for all controls.

Led the team responsible for strategy,design and implementation for GRC 10.1 upgrade and Project activities included developing SAP security and GRC access control work plan and coordinating with project leadership and process teams.

Strong experience in BI Security with analysis authorizations and SAP HR authorization.

Good understanding and working experience on LDAP technologies, Active Directory (AD) includes managing user security with group policies, security groups, distribution and support for problems relating to Active Directory. Experience in IAM security fundamentals and technologies, user lifecycle management, provisioning and reconciliation, auditing, reporting and access certification, SOD, cloud security.

Experience in IAM to deploy, configure and implement its leading Identity Governance (IGA) solution based on customer requirements.

Experience with SAP HANA and its unique security needs to assist the BASIS team as our organization adopts this new SAP Technology.

Hands-on experience in SAP Security and BASIS including R/3, ECC, Solman, BI, HCM, Portal and GRC.

Knowledge with SAP Fiori, SAP Solution Manager, setup/operate CHARM and central monitoring. Understanding of Change management process to migrate changes to production systems.

Understanding on Global Rule set and customized ruleset

experience with SAP security design, build, deployment, and audits for standard role-based security for ECC, S/4HANA, HANA security.

6 years of industry experience in development, customization, configuration, deployment of any Identity Management and Governance products (Saviynt )

Led design workshops with the business to gather requirements for the GRC Access Control tool, Integrated the GRC with Service Snow (SNOW) tool for request submission, build the approval worlflow (MSMP, BRF+), performed testing and cutover, led end user training, and developed end user administrative documentation. Leveraged SuperUser Privilege Management (SPM) to handle all cutover activities and keep an audit trail of all tasks. Utilized Access Risk Analysis (ARA) and led remediation workshops with business end users to resolve SoD conflicts, performed data analysis, conducted role and user access redesign, and worked with internal audit to identify mitigating controls. Established policies and procedures to assist users interacting with the GRC tool to make certain that SoD remediation activities are executed on an on-going basis.

Led EWM Security Aspects of Data Flow and Processes, security aspects involved throughout the most widely-used processes and user administration and authentication aspects, Overview of the user synchronization strategy, RF device as user front end and ICF services. Trace and log files that contain security-relevant information.

Professional Summary

Project: Discount tires (Green field Active Control Implementation)

Payroll: Capgemini Contract

Role: SAP Security Consultant SME

Duration: Aug2023 to till date

Environment: SAP S/4 HANA-2011, GRC 10.1 to 12.0, implemented and enabled Fiori apps for GRC 12.0, ECC, BW, CRM, SCM, SRM, HANA, BPC, GTS, CLM and Quantum (Treasury tool)

Implemented GRC AC10.1, Configured GRC AC Access Risk Analysis (ARA) and Emergency Access Management (EAM) components.

Upgraded GRC Access Control from 10.1 to GRC 12.0 and updated the GRC ruleset accordingly.

Implemented the end-to-end security process (configured, testing, troubleshooting & support) for S4Hana 2011.

Implemented the strategy of creating /updating the existing business roles to new roles to transaction matrix which involved detail analysis of updating the SU24, SE93, PFCG and Security tables.

Updated the existing business processes by replacing the obsolete transactions to new SAP S4Hana version transaction after the approval from business process owners. IT manager and SOX team.

Worked with ABAP developers for the unit and compatibility testing for all the custom t-codes with the new S4 Hana version.

Customize SAP Fiori roles and updated and assigned to user per the department requirement.

Design and build plan for unit testing of SAP standard and custom transaction codes.

Updated the existing GRC 10.1 Ruleset (Functions) with the new transactions, objects and fields, field values and program to newer version to reflect the new and existing SODs analysis.

Set up security by Info Area, Info-Cube, Info-Object, QUERY and WORKBOOKS.

Configured roles and authorization objects to secure reporting users.

Limiting the Query access within the BEX Analyzer.

Implemented Info Object Security (field-level security) for Reporting Users and also created custom reporting authorization objects.

Securing the data presented in Queries by Hierarchy node.

Maintaining authorizations for Hierarchies.

Experience in IAG Security

Folder, Universe, Applications, Connections and Category level security implemented in BOBJ

Worked on HANA Roles/Privileges for end users and IT users

Worked on HANA Security roles on HANA Editor for Run Time roles activation

Imported the backend roles into BOBJ and mapped the respective groups.

Maintained Customer Tables for Coupled Transaction (Ztcodes)

User and authorization Management like Creation of profiles, granting authorizations.

Authorization traces and Analyzing SU53, ST01 screen shots to debug Authorization problems.

Direct contact with functional counterparts collecting current R3 security requirements

Post maintenance of Missing Authorization.

Experience in SU25, SU24

Experience in Cyber security

Add/maintain users and authorization profiles.

Experience in BTP Administration

Daily System health check and sending the Daily and weekly report to the clients.

Performing Transports on a daily basis.

Applying Support Packages and SAP Notes to the servers.

Project: Nokia Corporation, TX (Brownfield Implementation)

Duration: August 2018 to June 2023

Payroll: HCL Technologies (Full Time)

Role: SAP Security Consultant SME

Environment: GRC 10.1 –Access Control, Process Control, ECC, BI, HANA

Role: GRC Access Control and Security Lead

Responsibilities:

Implemented GRC AC10.1, Configured GRC AC Emergency Access Management (EAM), Access Risk Analysis (ARA) and Access Request Management (ARM) components.

Configured MSMP workflows for addressing various user request types in Access Request Management.

Successfully integrated LDAP active directory with SAP GRC Access control system.

Configured the MSMP Firefighter log report workflow for getting the logs to firefighter controllers.

Successfully implemented various MSMP Mitigation control workflows like mitigation control setup and assignment.

Configured various BRF+ rule kinds like Initiator rule, Agent rule, Routing rule and Notification and variable rule.

Successfully configured User Access Reviews (UAR) for assessing the user’s access in all production environments.

Implemented GRC Process Control 10.1 and Gathering inputs from Business for designing of automated controls.

Configuring the Process Control system as per the client requirement.

Building of Data Sources and Business Rules which included sub scenarios like Configurable and ABAP Reports.

Creating of Master Data – Regulations, Business Process Hierarchy, Organizations, Risk Templates

Used MDUG for mass uploading of Master Data into the system.

Experience in IAG.SSO and IDM

Experience in CyberArk Administration

Worked on First Level and Second Level Authorization concepts

Project: Japan Tobacco USA Inc, NJ

Duration: April 2017 to August 2018

Payroll: HCL Technologies (Full Time)

Role: SAP Security Consultant SME

Environment: GRC 10.1 –Access Control, Process Control, ECC, BI, HANA

Role: GRC Access Control and Security Lead

GRC Responsibilities:

Implemented GRC AC10.1, Configured GRC AC Emergency Access Management (EAM), Access Risk Analysis (ARA) and Access Request Management (ARM) components.

Configured MSMP workflows for addressing various user request types in Access Request Management.

Successfully integrated LDAP active directory with SAP GRC Access control system.

Configured the MSMP Firefighter log report workflow for getting the logs to firefighter controllers.

Successfully implemented various MSMP Mitigation control workflows like mitigation control setup and assignment.

Configured various BRF+ rule kinds like Initiator rule, Agent rule, Routing rule and Notification and variable rule.

Successfully configured User Access Reviews (UAR) for assessing the user’s access in all production environments.

Implemented GRC Process Control 10.1 and Gathering inputs from Business for designing of automated controls.

Configuring the Process Control system as per the client requirement.

Building of Data Sources and Business Rules which included sub scenarios like Configurable and ABAP Reports.

Creating of Master Data – Regulations, Business Process Hierarchy, Organizations, Risk Templates

Used MDUG for mass uploading of Master Data into the system.

Worked on First Level and Second Level Authorization concepts

Security Responsibilities:

Analyzed security design in ECC, SRM, SCM, CRM, Solution Manager 7.2, BI, BOBJ and HANA provided recommendations for improvement.

Responsible for gathering requirements to Design and build Business roles in SAP HANA development system.

Prepared HANA Security design document with Client’s role naming convention standards.

Designed and Build HANA Business, Non-Business roles and Analytical privileges in HANA Studio.

Set up UAT test users to test out HANA security roles.

Implemented Dynamic analytical privileges concept by using custom authorization table and custom stored procedures.

Implemented design time role concept to well organize the HANA custom roles.

Used delivery unit concept to transport HANA Design time roles across HANA landscape.

Worked on SAP Fiori Catalogues, Groups and Web services.

Experience in GRC (Access control & process Control)

Identifying and mapping authorization objects for SAP Fiori Web services.

Customize SAP Fiori roles and updated and assigned to user per the department requirement.

Created new SRM roles as per the Rule codes mentioned in Authorization Matrix.

Activating the BBPSTART services for enabling the end users WEBGUI logon without any intervention.

Created new derived roles based upon the Organizational value, purchasing organization for various countries.

Assignment of attributes and value limits to user using PPOMA_BBP,

Set up BOBJ security and authorization concept at folder level.

Set up authorization / security at info cube / info objects and creating new analysis authorizations

Worked with portal user / role administration.

Gathering business requirement to setting up BOBJ/ BI security with analysis authorization

Project Name: Unilever, India

Duration: November 2015 to April 2017

HCL Technologies (Full Time)

Role: SAP Security Consultant SME

Environment: ECC, GRC 5.3

Role: GRC Process Control and Access Control lead

Responsibilities:

Implemented GRC Process Control 10.1 and Gathering inputs from Business for designing of automated controls.

Configuring the Process Control system as per the client requirement.

Building of Data Sources and Business Rules which included sub scenarios like Configurable and ABAP Reports.

Creating of Master Data – Regulations, Business Process Hierarchy, Organizations, Risk Templates

Used MDUG for mass uploading of Master Data into the system.

Worked on First Level and Second Level Authorization concepts

Creation of Surveys, Questions and Manual Test Plans

Involved in Planning, Implementation & Support of Security administration for a complex and well-integrated SAP landscape with ECC 6.0, BI 7.0, and BOBJ, CRM, SRM and MDM securities.

Worked on GRC Access Control components like Access Risk Analysis, Emergency Access Management and Access Request Management.

Prepared HANA Security design document with Client’s role naming convention standards.

Handling all security issues and providing security support on timely manner along with attending regular security team calls.

Streamlined most of the SRM roles by restricting at organizational values like purchasing organization.

Allowing fixed supplier fields for Employee and Requisitioned roles in SRM system.

Created Various Value based analysis authorizations and Hierarchy level analysis authorizations for HR Specific Characteristic values in BI environment.

Created and maintained BI Reporting roles and Analysis authorization roles.

Allowing fixed supplier fields for Employee and Requisitioned roles in SRM system.

Restricting the Info types at various Authorization profiles level, personal area level and sub type levels in HR area.

Maintained various roles in HR system and Setting up Idoc movement jobs from CUA system to child systems.

Built and troubleshooting Analysis Authorizations using the transaction RSECADMIN.

Assigned the Analysis Authorizations to the role using the object S_RS_AUTH.

Project Name: Cement Australia, Brisbane (Onsite)

Duration: March 2012 to November 2015

Payroll: TATA Consultancy Service (Full Time)

Role: SAP Security Consultant SME

Environment: ECC, GRC 5.3

Role: GRC Process Control and Access Control lead

Responsibilities:

Working on SAP role and Profile management, like creation, deletion change of roles and T-Codes.

Created single roles, composite roles as per organizational structure

User maintenance on day-to-day basis

Extensively worked on profile generator (PFCG).

Troubleshooting Security issues at User and Role level

Analyzing traces and assigning the authorizations

Setup Password restrictions, maintained USR40

Working with Missing authorizations

Restrict table access through authorization groups

Redefining authorization objects in SU24

Worked on SECATT scripts for mass user creation and password reset.

Worked on GUI scripts for mass user creation and password reset.

Worked on SQVI (Quick Viewer)

BI Security:

Creating Analysis authorizations

Maintaining roles and authorization in BI7.0 using RSECADMIN

Based on logs from RSECADMIN resolved authorization issues

Saving Queries/workbooks to roles using BeX query Designer

Publishing web templates to a role

EP Administration:

Created users in Enterprise portal

Assigning Groups to users/User groups

Locking and Unlocking users in Enterprise Portal

User data export and import

Project Name: Mahindra Holidays & Resorts, India (SAP Implementation Green filed)

Duration: September 2011 to March 2012

Payroll: TATA Consultancy Service (Full Time)

Role: SAP Security Consultant

Environment: ECC, GRC 5.3

Role: SAP Security Consultant

Responsibilities:

Used (PFCG) Profile Generator for creation, modifying roles, composite roles, derived roles

Conducted meetings with business and functional team (SD, MM, FICO) to gather requirements for derived and composite roles to implement the role- based security

Analyzed the report in SU53 to find out the missing authorizations and resolve the User issues

Production Support for all SAP user’s authorization and access issues

Utilizing system trace (ST01), authority check (SU53), to analyze and fix Problems related to Security

Facilitated coordination between Help desk and technical teams.

Performed user administration activities, such as setting up user login IDs, resetting passwords, locking users, and unlocking users.

ASTEC Life science Limited, India (SAP Implementation Green filed)

April 2011 to August 2011

SAP Security/Basis

SAP R/3: My sap ERP 2005 (ECC6.0 EHP4) – 2 systems Landscape

Environment: HP Blade Servers, Windows 2008 and with DB2, Solution Manager 7.0 EHP1

Responsibilities

Installed and configured ECC 6.0 Ehp4 on Windows 2008 and DB2 Database

Installed and configured Solution Manager 7.0 EH1 in Two-system landscape with Development, Quality and Production system.

Performed Local and Remote client copy

Configured client settings and system change options as per the definition of the client strategy document of the project.

Implemented SAP Security for single roles and profiles

Configured RFC Authorization between Satellite and Solution Manager System.

Applied all support packs and performed Kernel upgrades.

Configured the Transport Management System.

SHV Energy Pvt Ltd, Nederland (SAP Implementation Green filed)

July 2006 to April 2011

SAP Security/Basis

SAP R/3: My sap ERP 2004(ECC5.0) – 3 systems Landscape

Environment: IBM Servers, AIX 5.3 and my SAPERP 2004(ECC5.0) With Oracle 10.2 0.2, Solution Manager 3.2

Responsibilities

Installed and configured ECC 5.0 on AIX 5.3 and Oracle 9.2.0.6 Database.

Installed application Servers App1 and App2

Installed and configured Solution Manager 7.0 Ehp1 for Support desk, monitoring in a three-system landscape with Development, Quality and Production system.

Set up the system landscape for the Change and Transport System.

Configured client settings and system change options as per the definition of the client strategy document of the project.

Configured SDCCN and Scheduled Automatic Session Manager. Create the BPs

Configured RFC Authorization between Satellite and Solution Manager System.

Centrally Configured Fire Fighter IDs and created control owners in Access Control

Perform SoD checks in GRC system.

Worked with transport management system called DGN.

User and Role level risk analysis is performed in GRC.

Applied all support packs and performed Kernel upgrades.

Configured the Transport Management System.

Scheduled standard background jobs for all the new systems.

Experience in ChaRM configuration

Configured transport routes and performed regular transports using STMS

Educational Qualification:

B Tech (Bachelor of Technology in Information Technology) – University of Madras, India.

DECE (Diploma Electronics & Communication Engineering), SBTET Hyderabad, India

Contact this candidate