11/14/2022 updated
KS
100 % available
SAP Security & GRC Consultant, SAP Security & GRC Consultant, Basis and Security Consultant
Karachi, Pakistan
Pakistan
BAMicrosoft WindowsControles de AccesoActive DirectoryAddress Resolution ProtocolsUnixClient Server ModelsComputer SecurityIBM DB2Dynamic Host Configuration ProtocolLinuxNetwork Address TranslationDomain Name System (DNS)VMware ESX ServersFreeBSDGovernance Risk Management and Compliance
Drivers, Printer, Scanner, TCP/IP protocol suite (IP, ARP, ICMP, TCP, UDP, DNS, SMTP, FTP, TFTP, VPN, RDP, NAT/PAT, configure, DHCP Client/Server, Microsoft Windows Server 2012 Network Infrastructure, Active Directory, Group Policy, DHCP, IIS, Virtual Box, VMware, Hyper-V, VMWare ESXi, ECC 6.0 EHP8, SAP NetWeaver GUI 720,730,750,760, GRC 10x, 12, System Linux, UNIX, Windows Server 2008, Database Installation, SAP HANA, Oracle 12c, SE16, SUIM, ARA, ARM, BRM, EAM, RZ10/RZ11, SAP Security, user accounts, user management, SAP, Windows Server 2016, SAP GUI, SAP GRC, R/3, SAP Basis, local area network, Social Media, Facebook, Twitter, SAP Access Control 12.0, SAP NetWeaver 7.5, SAP NetWeaver 7.52, Cybersecurity, Oracle 12c/11i, Sybase, DB2, MS SQL, HANA, Linux, SAP R/3 6.0 Basis under Oracle/NT, UNIX tools, SunOS, NT, FreeBSD, MS Windows (Server Edition, Enterprise Edition, ECC 7.50, ECC 6.0, SAP R/3 v4.6c. S/4HANA, MS Office 2007/2010/2012/2016
Experience
Professional experience10+ years
Languages
EnglishGood
Project history
* User administration (creating, maintaining, deleting user accounts and assigning roles) managing user login
Parameters and passwords with RZ10 and RZ11.
* Under risk analysis and remediation, performed user and role analysis to identify existing SOD violations risk.
* Using ARA produced analytical Reports on User, Role and Profile.
* Performed Remediation and mitigation against various risks associated with Role and Users.
* User administration includes authorization and profile maintenance.
* Reviewed the GRC ruleset and updated the ruleset quarterly to include new changes in the SU24 data, addition of
new objects introduced during enhancement pack upgrades and to include new objects.
* Updated Role owners / approvers in the GRC CUP requests, redirected role owners/approvers in case of incorrect
information and coordinated over HIGH and CRITICAL risks and Role approvers for risk remediation.
* Performed Weekly Firefighter audit review that includes analyzing the report for proper ticket information on the
usage, sending reports to firefighter owners for their re-confirmation over the usage of the firefighter ID's by users
and updating the Audit repository over the firefighter owner's response.
* Created RFC connections for new Firefighter ID's maintained and monitored the firefighter access and maintained
the table entries for activation of Firefighter ID's with respect to Owners approvals.
* Run user reports on a weekly basis over GRC risk analysis for Critical and High risks. Evaluating false positives for
Critical and High risks and remediating true Critical and High risks with respect to the User report.
* Configured Security administration activities for GRC 12.0, uploaded customized GRC rule-set, configured ARA,
ARM, BRM, EAM, performed Role sync for satellite systems, configured ARM workflow for requesting approvals and
access privileges and configured Firefighter EAM for Super-privilege access.
* Identified business processes, analyzed SOD violations of individual business processes and recommended
redesign structure of roles based on SOD violations to minimize the Security risks.
* Performed User Access Risk Analysis, drafted a report on active and inactive users and recommended business for
a redesign approach over user management.
* Added mitigation control in GRC over Role management and User Access based on business decision.
Parameters and passwords with RZ10 and RZ11.
* Under risk analysis and remediation, performed user and role analysis to identify existing SOD violations risk.
* Using ARA produced analytical Reports on User, Role and Profile.
* Performed Remediation and mitigation against various risks associated with Role and Users.
* User administration includes authorization and profile maintenance.
* Reviewed the GRC ruleset and updated the ruleset quarterly to include new changes in the SU24 data, addition of
new objects introduced during enhancement pack upgrades and to include new objects.
* Updated Role owners / approvers in the GRC CUP requests, redirected role owners/approvers in case of incorrect
information and coordinated over HIGH and CRITICAL risks and Role approvers for risk remediation.
* Performed Weekly Firefighter audit review that includes analyzing the report for proper ticket information on the
usage, sending reports to firefighter owners for their re-confirmation over the usage of the firefighter ID's by users
and updating the Audit repository over the firefighter owner's response.
* Created RFC connections for new Firefighter ID's maintained and monitored the firefighter access and maintained
the table entries for activation of Firefighter ID's with respect to Owners approvals.
* Run user reports on a weekly basis over GRC risk analysis for Critical and High risks. Evaluating false positives for
Critical and High risks and remediating true Critical and High risks with respect to the User report.
* Configured Security administration activities for GRC 12.0, uploaded customized GRC rule-set, configured ARA,
ARM, BRM, EAM, performed Role sync for satellite systems, configured ARM workflow for requesting approvals and
access privileges and configured Firefighter EAM for Super-privilege access.
* Identified business processes, analyzed SOD violations of individual business processes and recommended
redesign structure of roles based on SOD violations to minimize the Security risks.
* Performed User Access Risk Analysis, drafted a report on active and inactive users and recommended business for
a redesign approach over user management.
* Added mitigation control in GRC over Role management and User Access based on business decision.
* Monitoring of ruleset, maintaining critical roles and profiles, creation of mitigation control and running and sod risk
analysis reports
* Creating mitigation controls for customized risks as per business process owners and auditor's suggestions,
Assigning mitigation controls to users.
* Performed user & Role analysis to find the existing SOD violation of users and roles.
* Scheduling background jobs for synchronizing authorization into Access control Repository and monitoring the jobs.
* Creating Fire fighter-id with Emergency access. Mapping firefighter-id's to Firefighters for a limited period with proper
approvals.
* Prepared business plans, project plans for system installation, configuration, Planning and designing.
* Lead team of six from forefront by evaluating the project scope and complexity, system strategies, software selection
and successfully deliver the project with installation and configuration of the SAP systems.
* Generating the MSMP workflow related business rules and defining the business rule framework by using BRF+
workbench. Customizing and maintain the MSMP workflows for Access control.
* Implementation of global SAP role structure, including standard business role, global process roles, derived roles
and associated SAP security process.
* Maintaining access control owners and change the approvers when they leave the organization. Performed
simulation for proactive SOD analysis.
* Performed configuration settings for Access risk Analysis (ARA), Emergency Access management (EAM) and
maintaining.
* Handling of tickets based on priority by using remedy and workbench tool.
* Assist security team with role level, risk analysis when needed related to creating/ updating and provisional roles
including user access validations and identifying false positives.
* Manage entire project in timely manner to meet deadlines.
analysis reports
* Creating mitigation controls for customized risks as per business process owners and auditor's suggestions,
Assigning mitigation controls to users.
* Performed user & Role analysis to find the existing SOD violation of users and roles.
* Scheduling background jobs for synchronizing authorization into Access control Repository and monitoring the jobs.
* Creating Fire fighter-id with Emergency access. Mapping firefighter-id's to Firefighters for a limited period with proper
approvals.
* Prepared business plans, project plans for system installation, configuration, Planning and designing.
* Lead team of six from forefront by evaluating the project scope and complexity, system strategies, software selection
and successfully deliver the project with installation and configuration of the SAP systems.
* Generating the MSMP workflow related business rules and defining the business rule framework by using BRF+
workbench. Customizing and maintain the MSMP workflows for Access control.
* Implementation of global SAP role structure, including standard business role, global process roles, derived roles
and associated SAP security process.
* Maintaining access control owners and change the approvers when they leave the organization. Performed
simulation for proactive SOD analysis.
* Performed configuration settings for Access risk Analysis (ARA), Emergency Access management (EAM) and
maintaining.
* Handling of tickets based on priority by using remedy and workbench tool.
* Assist security team with role level, risk analysis when needed related to creating/ updating and provisional roles
including user access validations and identifying false positives.
* Manage entire project in timely manner to meet deadlines.
* Performed SAP ECC 6.0 EHP 8.0 Installation on Windows Server 2016.
* Installing SAP GUI 7.50. Performed Post Installing Activities.
* Client Creation, Local Client Copy, Remote Client Copy, Client Export & Client Import Spool Administrator.
* Daily handling of security related Change Requests and providing appropriate decisions on issues, prioritization and
assignment.
* Identify and schedule the batch jobs for user, role and authorization sync.
* Configured MSMP workflows for different user provisioning scenarios like New, Change, Terminate, Lock and Unlock
user accounts
* Generated profile, SU24 change to Authorization Objects Creating Authorization Groups, Analysis of Critical
Authorizations Tables, Analyzing Missing Authorizations and security support
* Role creation Single, Composite, Master and Derived as per the specification documents.
* User management using SU10, Authentication and assigning Roles accordingly Configure SAP GRC Access Control
Suite to work with existing systems and applications.
* Implementation of User Access Review and Access Request Manager Components.
* Transfer user data from another user and assigning roles in independent R/3 systems as per client requirement.
* Copying from SAP standard roles transporting roles from development system to quality and finally into production
systems Deleting roles.
* Authorization Profiles: Generating authorization profiles, inserting missing authorizations, maintaining open
authorization fields and organizational values, ST01 trace.
* Knowledge of producing and analyzing reports in SAP using SUIM, SE16, SE16N and security related tables AGR*,
USR*, UST*, USH* And SUIM reports
* Installing SAP GUI 7.50. Performed Post Installing Activities.
* Client Creation, Local Client Copy, Remote Client Copy, Client Export & Client Import Spool Administrator.
* Daily handling of security related Change Requests and providing appropriate decisions on issues, prioritization and
assignment.
* Identify and schedule the batch jobs for user, role and authorization sync.
* Configured MSMP workflows for different user provisioning scenarios like New, Change, Terminate, Lock and Unlock
user accounts
* Generated profile, SU24 change to Authorization Objects Creating Authorization Groups, Analysis of Critical
Authorizations Tables, Analyzing Missing Authorizations and security support
* Role creation Single, Composite, Master and Derived as per the specification documents.
* User management using SU10, Authentication and assigning Roles accordingly Configure SAP GRC Access Control
Suite to work with existing systems and applications.
* Implementation of User Access Review and Access Request Manager Components.
* Transfer user data from another user and assigning roles in independent R/3 systems as per client requirement.
* Copying from SAP standard roles transporting roles from development system to quality and finally into production
systems Deleting roles.
* Authorization Profiles: Generating authorization profiles, inserting missing authorizations, maintaining open
authorization fields and organizational values, ST01 trace.
* Knowledge of producing and analyzing reports in SAP using SUIM, SE16, SE16N and security related tables AGR*,
USR*, UST*, USH* And SUIM reports