07/21/2025 updated
S.
60 % partially available
SAP Security and GRC Senior Consultant | CISM
Gurugram, India
Worldwide
Bachelor of Engineering (Computer and Communication)AuthenticationsRole-Based Access ControlSAP ApplicationsSAP BISAP GRCSAP HANASAP SecuritySAP BTPSAP FioriAuthorization Management
SAP Security Implementation
Expertise in designing and implementing secure SAP environments across ECC, S/4 HANA, Fiori, BI/BW and BTP landscapes with focus on role-based access control and authorization management.
Specialized in troubleshooting and fixing authorization issues.
GRC Implementation and Management
Proficiency in GRC modules including ARM, ARA, EAM, and BRM configurations with implementation of SOD principles for risk mitigation and compliance.
S/4 HANA Security Transformation
Experience leading ECC to S/4 HANA transformation projects with security design, authorization concept development, and impact analysis.
SAP BTP Security
Implementation of security design for SAP BTP environments including role-based access control configurations.
Identity and Access Management
Management of user authentication and authorization using SAP Identity Authentication Service (IAS), Identity Provisioning Service (IPS), and XSUAA services.
Compliance and Audit
Experience with SOX and SOC1 testing methodologies for ensuring operating effectiveness of controls in enterprise environments.
Business Process Security
Analysis of business needs and translation into secure, efficient roles designs using Signavio process flows and RACI Matrix.
Expertise in designing and implementing secure SAP environments across ECC, S/4 HANA, Fiori, BI/BW and BTP landscapes with focus on role-based access control and authorization management.
Specialized in troubleshooting and fixing authorization issues.
GRC Implementation and Management
Proficiency in GRC modules including ARM, ARA, EAM, and BRM configurations with implementation of SOD principles for risk mitigation and compliance.
S/4 HANA Security Transformation
Experience leading ECC to S/4 HANA transformation projects with security design, authorization concept development, and impact analysis.
SAP BTP Security
Implementation of security design for SAP BTP environments including role-based access control configurations.
Identity and Access Management
Management of user authentication and authorization using SAP Identity Authentication Service (IAS), Identity Provisioning Service (IPS), and XSUAA services.
Compliance and Audit
Experience with SOX and SOC1 testing methodologies for ensuring operating effectiveness of controls in enterprise environments.
Business Process Security
Analysis of business needs and translation into secure, efficient roles designs using Signavio process flows and RACI Matrix.
Experience
Professional experience5 - 10 years
Freelancer since2025
Languages
GermanBasic knowledgeEnglishFluent
Project history
Leading ECC to S/4 HANA Transformation projects, facilitating client workshops, designing roles for Fiori apps, troubleshooting authorization issues, implementing GRC modules, and managing SAP BTP security architecture.
Conducted SOX & SOC1 testing (reliance, re-performance, independent) for operating effectiveness of controls and participated in walkthroughs with clients for business processes.
Certificates
Certified Information Security Manager
ISACA2025