PROFESSIONAL EXPERIENCE

Confidential

SAP Security/GRC Consultant

Responsibilities:

• Working on User administration and Role administration in ECC environments.
• Troubleshoot the issues in ECC and other landscapes by using ST01/STAUTHTRACE.
• Troubleshoot the issues in GRC 10.1.
• Extracting Risk analysis reports from GRC and providing them to Auditors.
• Working on Mappings of FFID’s to Owners and Controllers by using Mass maintenance as part of GRC EAM.
• Working different kind of GRC ARM requests to provision the access to Business & IT users.
• Working on Service Now and AOP tool which can be used for Enhancements.
• Provide GRC related trainings to Business people who deals with NWBC.
• Troubleshoot the GRC ARM requests if they get fails.
• Enhancements to GRC 10.1 based on client requirement.

Confidential

SAP Security/GRC Consultant

Responsibilities:

• As it is has come from other vendor, supported it from Transition phase.
• Involved in Secondary, primary and steady state phases of the project.
• Worked on User administration and Role administration in ERC.
• Worked on CHARM solution manager tool for transporting the changes across land scape.
• Performed risk analysis by using CPGRC tool for role modifications and role assignments in Production systems by using /n/SYMSOFT/RA
• Provided emergency access to users based on approvals from Business by using /n/SYMSOFT/FIRECALL.
• Worked on SOX internal audit.
• Troubleshoot the issues in ECC and other landscapes by using ST01.
• Worked on User administration activities in SFC - shop Floor Control(Portal) systems.

Confidential

SAP Security/GRC Consultant

Responsibilities:

• Working on Role administration and User administration by using t-code PFCG and SU01.
• Working Firefighter administration like assigning FFID’s to FF users and sending logs to FF Controller.
• Extracting Audit reports from SAP systems and sending them to client for verification.
• Working on Weekly, Monthly and Quarterly Audit reports.
• User administration and troubleshooting issues on BW portal.
• Working on User administration through SAP ARM.
• Working on Role import in SAP GRC.
• Providing Developer access keys and object keys to ABAP team members from Service market place.
• Working OSS connections.
• Mapping of Firefighter ID’s to Controllers, owners and Firefighters in NWBC.

Confidential

SAP Security/GRC Consultant

Responsibilities:

• Worked on system monitoring activities.
• Working as a team member and supporting all modules of GRC Access Control 10.1Which includes ARA, EAM,and ARM.
• Involved in post installation of EAM,ARM and ARA.
• Involved in EAM configuration.
• Created Firefighter id’s for different modules.
• Mapping of Firefighter ID’s to Controllers, owners and Firefighters in NWBC.
• Deleted Retired connectors from GRC system.
• Provided training to business users.
• Creating Mitigation Monitors, Mitigation approvers and Risk owners.
• Creation of Mitigation control ids.
• Mass role import for end user selection.
• Creating ARM requests based on business requirement, cancelling requests.
• Involved in GRC 10.1 upgrade testing.
• Troubleshoot issues after upgrading GRC10.1 from 10.0.
• Working on HR related Authorization objects and fields.
• Assignment of roles to user positions.
• User management, Role creation in Portal system(Central process Scheduler)
• Used t-code PFCG to create Single, Composite and Derived role creation as per Business requirement.
• Worked on ST01 and SU53 to analyze the issues.
• Used (PFCG) Profile Generator for creation, modifying roles, composite roles, derived roles
• Conducted meetings with business and functional team (SD, MM,FICO) to gather requirements for derived and composite roles to implement the role- based security
• Analyzed the report in SU53 to find out the missing authorizations and resolve the User issues
• Worked on SAP Check Indicator Defaults and Field values, reduced the scope of Authorization checks using transaction SU24 and maintained check indicators for Transaction codes.
• Production Support for all SAP user’s authorization and access issues
• Utilizing system trace (ST01), authority check (SU53), to analyze and fix Problems related to Security
• Provided developer key and object keys to the ABAP team from service market place.
• Facilitated coordination between Helpdesk and Technical teams.
• Performed user administration activities, such as setting up user login IDs, resetting passwords, locking users, and unlocking users.
• Created and modified Single Roles, Composite Roles and Derived Roles using Profile Generator to meet business requirements by making sure users get proper authorizations
• Extensively worked on Authorization objects, fields, authorizations, authorization profiles.
• Critical Authorization objects such as S TABU DIS,S PROGRAM,S DEVELOP are restricted Worked on AGR*,USH*,USR* tables.
• Register Object, Create developer access key, User id’s and opened OSS connections.
• Assignment of structural authorizations to user, providing Info type and Wage type access.
• Worked on Workplace, ESS,MSS.
• Troubleshoot HR issues like Payroll run, Time administration, HR online.
• Creating new roles for created planning books in SCM(APO) and solving authorization issues in SCM.
• Involved in SAP ECC upgradation.
• User management, role creation and assignments in portal systems.