Security & GRC Consultant, Security & GRC Consultant, Security & GRC Consultant

Project: 1

Organization : Infosys
Client : Saudi Aramco
Role : Security & GRC Consultant.
Duration : Nov 2021 to dec 2023

Client profile
Saudi Arabian public petroleum and natural gas company based in Dhahran. As of 2020, it is one
of the largest companies in the world by revenue. Saudi Aramco has both the world's
second-largest proven crude oil reserves, at more than 270 billion barrels (43 billion cubic
metres), and largest daily oil production of all oil-producing companies. It is the single
greatest contributor to global carbon emissions of any company in the world since 1965. On 11
May 2022, Saudi Aramco became the largest (most valuable) company in the world by market cap.

Worked on Business blueprint for LAM, MDG and asset restructuring.
* Working role design for Mobile application access to users using BTP.
* Worked on Fiori restructuring from catalog groups to spaces and pages.
* Conducted Business workshop for requirement gathering.
* Working closely with the Functional team/ conducting workshops for requirement
gathering.
* Performing impact analysis before making any changing in the existing structure.
* Performed SOD matrix to make sure none of the role comes under Risk.
* Creation of New roles as per the Design.
* Supported and resolved all the issues raised during FUT, SIT, UAT.
* Performed validation on role level when ever our changes move to higher environments.
* Performed all the cutover activities.
* Creation Test id's and normal dialog id's using GUI scription.
* Creation of new derive roles using GUI scripting.
* Worked on various systems S/4 Hana, BW systems.
* Worked on ticketing tool Footprints.
* Resolving all the end user related hypercare tickets issues.

Project: 2

Organization : Accenture
Client : Sanofi
Role : Security & GRC Consultant.
Duration : April 2019 to Nov 2021

Client profile

Sanofi S.A. is a French multinational pharmaceutical company headquartered in Paris, France,
as of 2013 the world's fifth largest by prescription sales.the company was formed in 1973 and
the current incarnation was formed as Sanofi-Aventis in 2004.
* Working on 8 implementation projects (3 major and 5 minor) End-to-end.
* Performed all the cutover activities during Go-live.
* Experience on requirement gathering form functional streams.
* Experience on System upgradation HANA 2.0 i.e. 1610 to 1809.
* Knowledge on resource planning and estimations.
* Worked on Role build activity in S/4 Hana, MDG, GTS, BW and Fiori system.
* Experience on troubleshooting the Fiori app related issues and Authorization issues.
* Worked on Mass role build activities using custom program and SHDB as well.
* Experience in Mass user administrations using Su10, Custom program and SHDB.
* Experience in working on various tools like JIRA, Service now, Charm, HPLM,MS access.
* Experience in performing quality check using Microsoft tools like Excel, MS access.
* Involved in defect correction during FUT, SIT, UAT and Hypercare.
* Worked on generating security audit logs.
* Worked on OSS user role designed with Fiori tiles access.
* From GRC implementation prospective, have knowledge on GRC10.1 AC components like ARM,
ARA and EAM.
* Worked on Mass Access request creation behalf of Business users as a part of Cutover
(using stranded template and Custom T-code)
* Experience in Uploading/Updating/removal Business roles and Single role in GRC system.
* Worked on FFID provisioning form mass of users as part of technical cutover.
* Experience in troubling shooting EAM/FFID related issues.
* Experience in extracting the FFID log reports, Access request details.
* Handled access request creation, FFID provisioning, and SOD risk remediation.

Project: 3

Organization: JK Techno soft
Client : JK Tech EPC
Role : Security & GRC Consultant.
Duration : August 2017 to April 2019.

Client Profile

JK Technosoft is a part of J. K.Organisation with 3 headquarters in Delhi, Kanpur and Mumbai.
Run by the Singhania family since 1888. This is India's leading organization with revenue $4.0
billion (35000 crore rupees) and nearly 50,000 employees work under this organizations.
Roles & Responsibilities

* User administration involving creation/deletion/locking/unlocking/change password/ copy
and modifying users.
* Worked on mass user creation using T-code SU10.
* Creating single, master/derived roles as per the requirement from the business.
* Experience in performing mass user comparison and mass generation of roles.
* Worked on transporting single/mass roles.
* Generating reports using user/role/authorization related tables.
* Experience in analyzing user/role/authorization details using SUIM.
* Experience on joining multiple tables in order to generate queries.
* Worked on generating workload analysis report (Transaction analysis, user settlement
statistics).
* Experience in resolving Authorizations issues using ST01, STAUTHTRACE and SU53.
* Worked on analyzing the transaction codes to maintain authorization checks in SU24.
* Worked on generating security audit logs.
* Knowledge on SECATT.
* From GRC implementation prospective, have knowledge on GRC10.1 AC components like ARM,
ARA and EAM
* Worked as an administrator in ARM like creation of GRC request on behalf of Business
users.
* Uploading the roles as per the standard template provided by SAP.
* Involved in performing user/ role level mitigation.
* Worked on user level simulation and role level simulation.
* Performed user level risk analysis and role level risk analysis.
* Worked on performing admin delegation in NWBC.
* Maintaining access control owners in NWBC screen.
* Worked on creating companies in GRC for new organization roll out.
* Worked on adding new line items in existing Agent and Initiator rule.
* Worked on MSMP workflow for new organization rollout.
* Assigning owners to FFID and assigning FFID to Firefighter and Controller.
* Knowledge on GRC AC 10.1 Synchronization jobs.