SAP GRC Consultant Resume

SUMMARY

Experience in SAP Risk and Compliance, SAP SOX Audits, SAP GRC 10.0, SAP GRC Process Control, IT Risk Management and Risk and Controls.
SAP GRC 5.3/10.0/10.1 Access control implementations for multiple clients.
Experience in SAP SOX audits, SAP Security, SAP Access Controls.
Experience in SOX Readiness Testing & Documentation of IT Controls, SOX Reperformance and Independent Testing for IT Controls. SAS70 Readiness and Type II reports.
Trained and certified in ISO27001, COBIT, and ITIL, SOX, CEH, LPT and various other compliances.

AREA OF EXPERTSISE

PROFESSIONAL EXPERIENCE

Confidential

SAP GRC Consultant

Responsibilities:

SAP GRC implementation for multiple clients across different verticals.
Travelled to multiple countries like Australia/Switzerland/Korea for projects.
SAP Security & Lead Authorization SME.
SAP SOX IT audit lead for General Motors.
Managed Global SAP SOX testing team for Confidential for General Motors.
Designed compliance activities involving SAP SOD Management, Fire Fighter, Access related issues for various clients.
SAP GRC Process control consultation for major pharma organization.
Onsite assignment in Australia for 6 months for GRC implementation for Australia’s largest communication provider
Main point of contact for all external audits globally.
IT Controls Testing for all SOX applications.
Experience on conducting Business financial audits on FICO, Order to Cash, Procure to Pay Cycles.
Represent clients on all audits including SOX, own and lead to remediation for any audit findings working with the relevant business owners.

Confidential

Lead for SAP GRC Risk & Compliance

Responsibilities:

Confidential

Senior Consultant

Responsibilities:

Responsible for independent testing of controls relating to SAP business processes, SAP GCC, IT controls, Database Testing, O/S Testing gained experience in SOX audits, SAP Basis Audits, SAP GRC access control implemented, Approva and Virsa tools for various client.
2 Months onsite in Greece worked for various clients on SAP ERP and Other various audits for SoX.
Performed SAP IT Post Implementation and Pre Implementation Audit.
Conducted various SAP GRC audits for several clients.
Provided consultation for organizations for GRC Module implementations.
Executed SoX readiness for a Large Shipping Industry in Europe.
Developed various tools required for maintaining IT compliances and risk for various industries.
Understand clients’ business environment and basic risk management approaches
Identify and evaluate complex business and technology risks, internal controls which mitigate risks, and related opportunities for internal control improvement
Provided reasonable assurance on the design, implementation and operating effectiveness of General Computer Controls (GCC) in Banking, Manufacturing and Financial organizations.
General Computer Controls. Segregation of Duties(SOD) for SAP R/3
Understand the general & specific risks and audit considerations with the R/3 system
Performed Controls Mapping of SAP R/3 Business Process controls as a part of remote execution project.
Conducted various SAS 70 Audits for multiple clients.

Confidential

IT - Security Analyst

Responsibilities:

Internal Control assessments of IBM Applications and Customer applications and devices.
Conduction SAP Security health checks for IBM Customers across entire Europe.
Focal point of contact for SAP Security Training.
Working with the IT security team which manages IBM Internal and Commercial accounts.
Maintaining security standards of 90000 devices to be checked across the globe yearly.
According to GSD331 and ITCS104.
Manual Health Check of devices operating systems and applications where we compare the output given by the Service manager with the GSD 331 or ITCS 104.
Managing SAP Security settings for various client’s globally.
SAS 70 preparations.
Vulnerability Assessments and Threat assessments for various UK clients using tools like NSA.
SAP Security maintaining standards
Performed security audits with recommendations to improve a client’s current infrastructure security.
Assist with any Audit / Business Controls activities as requested.

Confidential

IT - Security Analyst

Responsibilities:

Handled installation, configuration and troubleshooting activities for: MS Windows XP and Service Pack 2.
Network printing devices, MS Win2K Server and Workstation, Win 98 OS and TCP/IP