Security & GRC Consultant
Deloitte
Keywords
Governance Risk Management and Compliance
Human Resources
SuccessFactors
SAP NetWeaver Business Warehouse
SAPGovernance Risk and Compliance Analytics Software
SAP Security
Sap Fiori
Safety Principles
Skills
SAP GRC & Security (ECC, HR, BW, Successfactors, FIORI)
Project history
10/2022
-
03/2023
Client - Azure Power
Responsibilities -
* Worked on SOD Implementation project.
* Defined technical ruleset along with custom risks for different business processes as agreed with the business.
* Had good experience on role & user level remediation and assigned controls to mitigate risks.
* Played crucial role in Implementation of Quick Audit (Analytics) and Quick Manage (ARM) Tools in client environment.
* Designed multiple workflows for access requests, termination, and creation of user accounts in SAP through Quick Manage tool.
* Participated in thorough testing of both tools and prepared test cases with evidence.
* Participated in post Go-Live and Hyper Care activities.
* Traveled to client locations to implement solution.
* Trained end-users on Quick Manage and Quick Audit Tools.
Responsibilities -
* Worked on SOD Implementation project.
* Defined technical ruleset along with custom risks for different business processes as agreed with the business.
* Had good experience on role & user level remediation and assigned controls to mitigate risks.
* Played crucial role in Implementation of Quick Audit (Analytics) and Quick Manage (ARM) Tools in client environment.
* Designed multiple workflows for access requests, termination, and creation of user accounts in SAP through Quick Manage tool.
* Participated in thorough testing of both tools and prepared test cases with evidence.
* Participated in post Go-Live and Hyper Care activities.
* Traveled to client locations to implement solution.
* Trained end-users on Quick Manage and Quick Audit Tools.
05/2021
-
10/2022
Security & Basis Consultant
Capgemini
Client - Nyrstar
Responsibilities -
* Worked on user maintenance: creation, modification, locking, unlocking & deletion of user accounts
* Assignment/Removal of roles for the user accounts via CUA (SOLMAN) system
* Creation and modification of all roles (Single, composite and derived roles) as per requirement from business
* Tracing missing authorization objects using SU53 & recommending appropriate roles for end users
* Had good knowledge of security checks which were performed post system upgrade
* Mass user's maintenance using SU10 for roles assignment/removal to user accounts, locking/unlocking users
* Proficient in working with the Security tables - USR*, AGR*
* Handling the necessary role & object changes as per business requirements and transporting changes through CHARM
* Handled CPGRC tool - FIRECALL transactions creation for different functional teams
* Extensively used CPGRC tool to perform user analysis to identify SOD violation risks & Simulation feature to assess
the impact of potential SOD before assigning a role to user.
* Performing monthly activities - Monthly Fire call activity, DDIC user activity, Inactive user clean up, Unused role
cleanup, SCUL monitoring, duplicate ID and test ID monitoring, Terminated user deletion, Biweekly monitoring.
* Resolving authentication and authorization issues of end-users in BW/BI, BPC, ESS portals and success factors.
* Ticketing tool - ServiceNow
* Remote systems connections to SAP (OSS), providing and re-assigning developer
* SSCR keys, basis monitoring for specific T-codes
* Performed SLD CIM & CR update
* Implementing SNOTES
* Downloading software updates (CR & CIM zip les) from SAP service market place
* License Management
Responsibilities -
* Worked on user maintenance: creation, modification, locking, unlocking & deletion of user accounts
* Assignment/Removal of roles for the user accounts via CUA (SOLMAN) system
* Creation and modification of all roles (Single, composite and derived roles) as per requirement from business
* Tracing missing authorization objects using SU53 & recommending appropriate roles for end users
* Had good knowledge of security checks which were performed post system upgrade
* Mass user's maintenance using SU10 for roles assignment/removal to user accounts, locking/unlocking users
* Proficient in working with the Security tables - USR*, AGR*
* Handling the necessary role & object changes as per business requirements and transporting changes through CHARM
* Handled CPGRC tool - FIRECALL transactions creation for different functional teams
* Extensively used CPGRC tool to perform user analysis to identify SOD violation risks & Simulation feature to assess
the impact of potential SOD before assigning a role to user.
* Performing monthly activities - Monthly Fire call activity, DDIC user activity, Inactive user clean up, Unused role
cleanup, SCUL monitoring, duplicate ID and test ID monitoring, Terminated user deletion, Biweekly monitoring.
* Resolving authentication and authorization issues of end-users in BW/BI, BPC, ESS portals and success factors.
* Ticketing tool - ServiceNow
* Remote systems connections to SAP (OSS), providing and re-assigning developer
* SSCR keys, basis monitoring for specific T-codes
* Performed SLD CIM & CR update
* Implementing SNOTES
* Downloading software updates (CR & CIM zip les) from SAP service market place
* License Management
02/2020
-
05/2021
SAP GRC Consultant
Capgemini
Client - SAP
Responsibilities -
* ABAP & HANA System Connections and disconnections to GRC
* Role Maintenance in ARM - Mass Role Creation, modifications, approver changes, enabling & disabling role for
systems and deactivation of obsolete roles
* ARM Requests maintenance - Rerouting, forwarding, cancel, copy & status check of ARM requests.
* Provisioning Model a user like access to end users
* Daily reports - Clearing No Approver Found ARM requests, Missing/ Obsolete approvers report,
* Job Monitoring, AA checks, Health Status check and mass role expiration activity, insider detour activity
* Firefighter (EAM) setup in newly connected systems to GRC
* BRF+ (CAD) tables - approvers changes and cleanup activity.
* Roles are imported to the GRC system and map the Role Assignment and Role Content approvers
* Ticketing tool - SAP IT DIRECT
Responsibilities -
* ABAP & HANA System Connections and disconnections to GRC
* Role Maintenance in ARM - Mass Role Creation, modifications, approver changes, enabling & disabling role for
systems and deactivation of obsolete roles
* ARM Requests maintenance - Rerouting, forwarding, cancel, copy & status check of ARM requests.
* Provisioning Model a user like access to end users
* Daily reports - Clearing No Approver Found ARM requests, Missing/ Obsolete approvers report,
* Job Monitoring, AA checks, Health Status check and mass role expiration activity, insider detour activity
* Firefighter (EAM) setup in newly connected systems to GRC
* BRF+ (CAD) tables - approvers changes and cleanup activity.
* Roles are imported to the GRC system and map the Role Assignment and Role Content approvers
* Ticketing tool - SAP IT DIRECT
Local Availability
Open to travel worldwide
