Senior Cyber Security | SAP Security | GRC Consultant

SAP Security & Authorisations
Over 20 years of expertise in SAP Security and Authorisations, including role design, user provisioning, HR structural authorisations, SAP S/4HANA and HANA Authorisations, as well as SAP HR/HCM and SuccessFactors Security across multiple SAP modules and global enterprise environments.

SAP GRC / Access Control
Extensive hands-on experience with SAP GRC Access Control, including Emergency Access Management (EAM), SoD conflict identification and resolution, GRC risk analysis, and implementation of GRC 10 across large-scale organisations in regulated industries.

Information Security & Risk Management
Deep expertise in information security and IT risk management, including SOX compliance and controls mapping, IT risk assessment and remediation, security architecture and strategy, and managing end-to-end application security assessments across SaaS and IDAA platforms.

Identity & Access Management (IAM)
Broad knowledge of identity and access management principles, covering access request process design, critical access remediation, and user lifecycle management across SAP and JD Edwards platforms.

Segregation of Duties (SoD) Analysis
Proven ability to perform SoD analysis, define required authorisations with business process owners, identify risks, and develop mitigating controls for SoD violations across complex enterprise environments.

Application Security Assessment
Experience managing application security assessments across SaaS and IDAA platforms, completing end-to-end reviews and contributing to ongoing process enhancement within global ISRM functions.

GxP / FDA-Regulated Environments
Practical experience working in FDA- and GxP-regulated environments with controlled documentation processes, procedures, and compliance requirements in the MedTech sector.

Internal & External Audit Support
Coordination of annual SOX certification, reporting compliance status to internal and external IT audit and stakeholders, and working closely with audit teams to close audit items and maintain compliance.

Security Architecture & Strategy
Advising IT projects and teams on secure design, helping develop enterprise security strategies across people, process and technology, and implementing supporting policies, standards and controls.

Stakeholder Management & Workshops
Delivery of functional and technical documentation, design workshops, and security awareness training to stakeholders, business process owners, and end users across multiple organisations.