SAP Security Analyst, Security Administrator, SAP GRC Consultant

User Administration with SU01, SU10 Assigning roles, Unlock, Password reset, User
activation, Parameter, Profiles Assignment/Removal on Approved Service/Change
Request.
Business Role Management (BRM) Configuring Role, Create Single, Composite and
Derived Roles.
Role Maintenance with PFCG, Creating Roles, Profiles, Role T-code Addition after
Testing, Authorization Changes after Testing, Creating Custom Role from Standard
Role, Role Mapping on GRC Net Weaver Portal on Approved Service/Change Request.
Requirement Gathering to Design, Build Test Roles for SAP Roll out, Work closely with
SAP Technical (Basis) and Functional team (Application Team)to ensure success of
SAP Solution.
Assisted Life Cycle Implementation of SAP ECC, SAP-GRC.
Investigation on incident/Audit queries using SUIM Reports, SE16 Tables for Change
logs of Users/Roles Access to Sensitive T-code and/or Critical Roles and Profiles.
GRC AC 10.0 Administration Access Request Analysis, Risk Analysis (Mitigation and
Remediation), Process Approve/Reject Access Request, UAR Request Validation.
Proficient with Ticketing Tool HP Service Manager (HPSM).
Extensively Used USR*, AGR* tables (SE16).
Maintained Assignment of Authorization Object SU24, Created Custom Authorization
Classes and Authorization Objects SU21.
Provide Production Support including ongoing support and maintenance of role,
Provide technical support for Role implementation and Redesign of Roles.
Configuring and Analysis of SM19 and SM20 Audit Logs.
Interpret, Analyze and Resolve Authorization Issues using SU53, SU56, ST01, ST03 to
Stimulate any Possible SoD conflicts.
Perform SoD Conflicts and propose options and solution to implement mitigating
controls and eliminate risks.
Report Extraction to support internal/external audit with SUIM, SA38 (User<->Access
Report Extraction Program), Collect Audit Artifacts from SAP Systems.
Monthly reporting of SM20 Audit Logs to Higher Management for 40+ Production
Systems, Highlight and close identified issues in audit logs as per SOP of GRC team,
generated monthly SoD reports for roles, Users and custom functions and
authorization object advising project teams and process owners on changes needed
to ensure access and security design are SoD compliant.
Assist in internal ISMS audit, and perform GAP Analysis, RISK Analysis, and surf possible
solutions for encountered issues.
Continuously seeking challenging position in SAP S/4HANA.

Key Responsibilities:
UAR Implementation
Role and User Administration.
Used of SAP tables for report (AGR* & USR*)
Troubleshoot of issue and providing appropriate solution based
on SU53/SUIM/Trace.
SAP Security Audit (SM20) Data Analysis.
Extracting report based on User and Role level. Creating Business
role.
Performed Risk Analysis both at User and Role level in GRC (SOD).

Key responsibilities:
Monitoring events and Investigating Incidents on a daily basis.
Change Management Process for Transporting Roles and
Tables, Security Objects and Maintaining the Change
Documents.
Central User Administration (CUA) Experience to Create Users,
Assign roles, and Maintenance.
Security Investigation and Incident Management closure in
the given agreed SLA.