SAP Security and GRC Consultant, SAP Security and GRC Consultant, SAP Security Consultant

Team Size 3
Environment ECC 6.0, GRC 12.0, SAP FIORI
Duration May 2020 - April 2022
Location Bangalore, INDIA



Responsibilities:

* Implemented GRC 12.0 Access Control Sub-component ARM (Access Request Management) and EAM
(Emergency Access Management).
* Worked on configuration for ABAP and Portal system.
* Worked on PD Profile and Portal Group Provisioning.
* Worked on BRM - provisioning functionality for update assignments.
* Worked on Emergency Access Management for ABAP systems.
* Maintaining of owner's and Controller's in access control owners and mapping the owner's and
controller's to FFID.
* Performed the test cases for EAM and ARM.
* Worked on the User Access Review.
* Created test scenarios for GRC changes and performed the test cases.



GRC AC 12.1

* Monitoring of GRC request and closure after resolution.
* Risk analysis, User level and Role Level
* Scheduling background jobs.
* Mitigation in case of SOD.
* GRC Roll Out at multiple location
* Creation of OGR Unit.
* Mapping of Approvers, Monitors in Access Control Owner.
* Creation Of New Mitigation Control ID as per new Roll Out

Project Warner Bros. Entertainment Inc.
Designation SAP Security and GRC Consultant
Team Size 5
Environment ECC 6.0, GRC AC 12.0, SAP FIORI
Duration November 2017 - Apr 2020
Location Mumbai, INDIA


* Designed and Implemented GRC 12.0 Access Control Sub-component ARM (Access Request Management),
EAM (Emergency Access Management) and ARA (Access Risk Analysis).
* Worked on Emergency Access Management for ABAP systems.
* As per the requirement implemented EAM for portal systems with webdynpro links, FIORI and for
HANA DB systems
* Implemented EAM for Winshuttle.
* As part of the requirement worked on Migration of Approva Biz Rights Rule set to GRC Rule set.
* Worked on GRC Security role design
* Worked on the custom email notifications for the workflows needed.
* Worked on several technical documents related to EAM.
* Worked on SOP documents for EAM.
* Worked on non-prod EAM documents.
* Worked on KO's documents for the helpdesk.
* Worked on Post Installation and configuration documents.
* Worked on all the Cut over tasks related to the project.
* Conducted training and workshops for business users.
* Conducted trainings sessions for client as well as existing security team.
* Managed user login parameters and password parameters.
* Analyzing Missing authorizations and providing the appropriate solutions.
* Worked on Authorization Objects S_TABU_DIS and S_TABU_NAM.
* Protected Tables and Programs using Authorization Groups.
* Worked on Authorization Objects S_RS_COMP and S_RS_COMP1.
* Configuring of EAM on user-based Firefighter ID'S.
* Adding firefighter IDs to firefighter
* Generating log reports related to firefighter ID'S.
* Generated mass profiles using SUPC.

Team Size 3
Environment ECC 6.0
Duration Feb 2015 - Oct 2017
Location Hyderabad, INDIA


* Creating and maintaining of roles using profile Generator
* Worked on Authorization Groups and assigned tables to the groups.
* Mass user maintenance for business convenience.
* Worked on roles administration like creating, modifying, deleting and assigning to users based
on request.
* Good working knowledge of AGR* and USR* tables.
* Resolving missing authorizations using SU53, ST01 and STAUTHTRACE to the users.
* Transporting the change requests throughout the Landscape.
* Locking and changing validity date of expired users.