Risk Management,Process Control, Access control, SAP security&Basis

TAHREEM IQBAL

SUMMARY

Accomplished GRC Consultant with extensive +1.5 year of experience designing, implementing, and optimizing Governance, Risk, and Compliance solutions for large enterprises. Proficient in SAP GRC, risk management, internal controls, and key compliance frameworks (including SOX, GDPR, and ISO 27001). Skilled in conducting risk assessments, controls testing, and segregation of duties reviews to align controls with industry standards. Collaborative and adaptable, turning complex requirements into actionable controls to help organizations proactively manage risk and achieve sustained compliance.

PROJECTS EXPERIENCE

Scope: Implemented SAP Process Control to streamline internal control processes, designing and configuring control catalogs, testing plans, and workflows for continuous control monitoring and self-assessments.

Established a robust framework for control testing, evaluation, and remediation, strengthening compliance oversight and governance. SAP - Process Control, CGA Pakistan May 2025 - present SAP - Solution Manager, Parco

Scope: Spearheaded the implementation of ITSM, IT Requirements, and Change Request Management (ChaRM) in SAP Solution Manager.

Led end-to-end configuration, testing, and training, ensuring a smooth rollout aligned with ITIL best practices and effective knowledge transfer. Nov 2024 - April 2025

Implemented SAP GRC Risk Management, including end-to-end configuration, compliance, and audit processes.

Designed and configured risk catalogs, key risk indicators (KRIs), and mitigation controls to establish a scalable framework.

Led compliance assessments, control testing, and internal audits, and provided training to enable stakeholders to effectively manage ongoing risk and compliance SAP - Risk Management, Packages Group of Companies, Buraq May 2024 - Nov 2024 Karachi, Sindh Pakistan, Mobile: +92-303-*******, Emai *****************@*****.*** www.linkedin.com/in/tahreem-iqbal-4408632b3

PERSONAL PROJECTS

SAP - ALM, Attock cement

The implementation of SAP Application Lifecycle Management (ALM) centralizes and streamlines the end-to-end application lifecycle — from requirements and solution design to testing, deployment, operations, and optimization — ensuring controlled, compliant, and scalable delivery across the SAP landscape

Aug 2024 - Sep 2024

SAP - Security

Played a key role in the brownfield implementation of SAP Security and SoD controls, focusing on role design, authorization concepts, and conflict mitigation. Activities included role optimization, functional specification, UAT, and post-implementation support to help maintain a secure and compliant authorization framework. April 2024- present

GRC CONSULTANT

Technical Skill

SAP Access Control – Role

mgmt, SoD analysis

SAP Process Control – Control

testing, workflows

SAP Risk Management – Risk

register, mitigation

Segregation of Duties (SoD) –

Rule sets, conflict checks

GRC Configuration –

Connector setup,

workflows

Audit Logs – Activity trace,

system logs

Threat Detection – Risk

alerts, anomaly tracking

SAP Fiori – Role-based

apps, UX

SAP BASIS – User admin,

transport mgmt, HDB

installation

SAP IAG – Cloud access

governance

SAP BTP – App dev, integration

GRC Training – End-user, admin

level

SAP ALM – Change control,

system monitoring

Technical Support Engineer at Sybrid

Resolve technical issues via phone, email, or chat and troubleshoot network problems. Provide support for network devices, systems, and infrastructure. Jan 2024 - Mar 2024

ADDITIONAL INFORMATION

UI/UX Design:

Experienced in user research, wireframing, prototyping, and UI design using Figma, Sketch, and Adobe XD.

Skilled in creating consistent, user-centric interfaces, conducting usability testing, and iterating based on feedback.

Networking and Cloud Computing:

Strong understanding of network configuration, routing, switching, firewalls, DNS, and VPN setup. Experienced in designing and managing secure network infrastructures. Familiar with cloud platforms like AWS, with hands-on knowledge of EC2, VPC, and IAM. Basic experience in containerization using Docker and Kubernetes, along with deployment and monitoring of cloud-based applications..

Linux:

Skilled in installation, configuration, and administration of Linux distributions (Ubuntu, CentOS).

Proficient in shell scripting (Bash, Perl), package management, and system troubleshooting.

Network Maintenance

Perform routine maintenance to ensure network reliability and uptime. Monitor network performance and proactively prevent downtime.

OTHER EXPERIENCE

EDUCATION

BS-Information Technology From Shaheed Benazir Bhutto University Jan 2020-Jan2024 CERTIFICATIONS

Networking and Cloud Computing -QUEST

Cloud Solution Architecture - hazza institute of Technology SAP - Introducing the Field of Cybersecurity in SAP SAP - Exploring Principles of SAP Governance - Risk and Compliance in the S/4HANA Public Cloud

Contact this candidate