SUMMARY

• Total 13+ years of IT experience which includes 3 years in SAP HCM and 10+ years of experience with primary focus on SAP Security strategy, Governance Risk & Compliance implementation projects specialized in design and implementation of SAP New dimensional products.
• Led several work streams on large and complex business transformation projects supporting the security strategy, design, building, testing and deployment of complex role Based Access Control Solutions for various clients..
• IT Professional experience in applications analysis, design, development, testing, gap analysis, implementation, upgrade, maintenance, support, training and programming of turnkey projects
• Experience covers more than 4 full life cycle implementations using ASAP Methodology including blue print phases, post - implementation support, upgrade, production support and custom enhancements
• Lead all initiatives of SAP Security Implementation/Deployment/Design/Upgrade/Redesign, Support & Operations of all SAP Security & GRC (5.3/10/0/10.1 ) Projects.
• Lead and moderate project meetings related to SAP Security and provide SAP Security best practices to the project team.
• Extensive Experience in development of SAPSecurityStrategy/Architecture documents,Securitymatrix, Segregation of Duties matrix SoD,Securitycontrols, SAPSecurityTest strategy, and Test scripts forSecurityTesting andSecurityTest summary reports.
• Evaluate and implement external security advisories and patches.
• Analyze and implement authorization security requirements and make recommendations as needed to help develop security measures.
• Experience in facilitating workshops with client for Requirement gathering, analyzing and finalizing the
• Expertise in SAP Security Audits and SAP User /System Licensing
• Responsible for working with the solution architects and the business process owners to translate the business requirement into the SAP Security design and maintenance of the SAP Security global Roles in SAP Systems.
• Extensive experience in translating business requirements in to functional and technical deliverables in compliant to organization IS Policies and procedures.
• Implementation and support experience with GRC Access Control 5.3/10.0/10.1 Components like RAR, SPM, ERM and CUP/Access Risk Analysis, Emergency Access Management, Access request Management and Business Role Management.
• Expertise in setting upSAP SecuritySolutions for various SAP landscapes, such as - ECC 6.0 including EhP6/Ehp7, (MM, QM, WM, EWM, FICO, AP, AR, PP, EHS etc, HCM ESS/MSS (Structural Authorizations, Indirect Role assignments), HR Renewal, BI/BW 7.x (Analysis Authorizations), Portal Security, FIORI, GRC 10.x, 5.3, IDM, Solution Manager, PI/XI, MDM, SRM, CRM 7.0 (Business Roles), APO, GTS, BOBJ 4.x, BPC 10, HANA (Privileges) etc.
• Worked closely with the External (KPMG, Deloitte and PWC) and Internal auditors to resolve GRC (SOX) and SoD related issues.
• BW Security- Secured BI Info Areas, Info cubes, Queries, Info objects, Hierarchy and Info objects. Successfully upgraded BW3.5 authorizations to BI7.0 Analysis authorizations. Restricted Analysis Authorizations (Using RSECADMIN Tool) at Characteristic Values, Attribute Values, Hierarchies and Key Figure level. Extensively used new BI tools like Authorization Monitoring and Legal Audit. Defined Authorization-Relevant Characteristics and Attributes using Info Object Maintenance (RSD1).
• HANA Security - Configured Standard, Technical and Restricted Users. Worked on System, Object, Analytic and Package Privileges. Knowledge in SAP Studio
• HR Security - Designed and Developed HR Security in Personnel administration and Payroll accounting, Benefits, Compensation, Time Management, Travel, Payroll, E-Recruitment, Personnel Development and Org Management modules. Implemented Structural Authorizations to Restrict PD Objects.
• GRC -Designed, configured and maintained GRC 10 Access Control. Worked with SOX team to make updates to GRC rule set. Developed workflows in GRC. Integrated GRC with Active Directory. Deployed password self-service. Planned, designed and developed roles for major ECC and CRM implementation. Developed detailed project plans, standard operating procedures, processes and training documents. Worked closely with an offshore team of security analysts to support a major SAP implementation
• Experience with standard uploading tools such as: LSMW, Win shuttle, CATT, Quick test, Pro etc.
• Utilized HP Quality Center for Test Scripts, Test runs and Defect Management.
• Design preventative, mitigating and remediating controls to ensure the appropriate level of protection and adherence to the goals of the overall SAPsecuritystrategy.
• SAPSecurityarchitecture Review and redesign using reverse engineering.
• Work independently and excellent team player in multivendor engagements.
• Proven in delivering under tight deadlines as an individual and as well as in team.
• Excellent project management and problem solving skills, proven team leader and offshore coordinator.

PROFESSIONAL EXPERIENCE

Confidential

Sr. SAP Security/GRC/HANA

Responsibilities:

• Leading client’s SAP Security/GRC/HANA/FIORI -related projects and other enhancements.
• Managing offshore team of 4 security consultants for production support.

Confidential, Naperville, IL

Sr. SAP Security/GRC Engineer

Responsibilities:

• Implementation of SAP Security, SAP Governance &Risk and Compliance tool (10.1) including, Emergency Access Management, User provisioning and Access risk management modules
• Lead, participated and coordinated end-to-end execution of SAP Security-related projects and other technology implementations.
• Participated in weekly team meetings and internal initiatives to review outstanding issues and/or to discuss new trends or projects
• Worked with Business security representatives to identify and report segregation of duty issues.
• Manage Transport change requests across multiple SAP systems.
• Manage client copy and maintenance activities
• SAP note and correction implementations
• Design and build Security roles across multiple SAP landscapes (ECC / CRM / HR /BI /BOBJ/Portals / Solution Manager / IDM / HANA/GRC AC 10.1/BPC)
• SAP Security implementation - single point of contact (Role design for IT and business, configuration, UAT, Hyper care support, Service Now incident tracking etc.) for Nalco Saudi/Champion Arabia
• Work with the SAP functional teams and business partners to gather the detailed security requirements at an early stage of any SAP implementation, roll-out or upgrade project.
• Designed, Restricted and Controlled authorizations for HANA DB objects and Packages/Contents based on System Privileges, Objects Privileges and Analytic Privileges for various Schema Users.
• Worked on creating Analytical Privileges on different database objects/views etc.
• Administered customized roles in HANA DB for Developers/ Modelers, Technical Admins, End Users, and Power Users.
• Designed and tested Roles for Implementing FIORI App’s security for HR ESS and SCM Purchase Order/Requisitions as part of SAP Modernization project.
• Setup Roles and Privileges for SAP FIORI applications and UI Interfaces/Tiles.
• Configured SAML Single Sign On with SAP NetWeaver and Azure portal to enable users with AD authentication
• Configured SAML Single Sign On with SAP Fiori Apps with One-login SSO tool
• Design and build SAP HANA security roles for Fiori external users.
• Troubleshooting of SAP FIORI Authorization issues.
• Extensively used the UME for maintaining Java Stack users and developed Custom Roles/Groups for restricted access.
• Configure and integrate Enterprise Portal, LDAP and GRC system for provisioning and SSO.
• Implementation and Support of SAP GRC 10.1 for Confidential (EBS) and GRC 5.3 for Nalco system for issues pertaining to access requests and working with the end users till they get the required access
• Involved in configuring and customizing the Multi-Stage Multi-path (MSMP) workflows and BRF+ especially for ARM and EAM components.
• Setup UAR - User Access Review Requests for periodic review, worked with SOX team to make updates to GRC rule set, developed workflows in GRC and Integrated GRC with Active Directory.
• Ran Risk Analysis on Single/Business Role level and worked with Business/Track leads to remediate/mitigation Risks
• Worked on Business roles and their assignments (PPOMA CRM) for CRM Business users.
• Worked on Role Remediation for removing SAP standard roles for Solution Manager.
• Troubleshooting and performing root cause analysis for critical Incidents and documenting the same.
• Supported the Project Team on various activates - Fire Fighter, SAP Client Openings, OSS Messages, Debug, External Debug, Developer Keysetc.
• BI7.0 Analysis authorizations. Restricted Analysis Authorizations (Using RSECADMIN Tool) at Characteristic Values, Attribute Values and Key Figure level.
• Troubleshooting BI authorization related problems using RSECADMIN, RSD1 and RSA1 T codes.
• Worked on BOBJ Security Administration. Good hands on with CMC tool and WEBI Interface, set up Global level/Folder level/Object level Security in BOBJ and restricted reports on different access levels as per requirement
• Worked with FI team to procure BPC requirements, created Task profiles in BPC, merged the backend standard BPC roles into one composite role, created Member access profiles and teams, provided profiles for leads to administer their respective teams
• Created users in BPC Web Client and integrated with Backend BW.
• Performed Quarterly BPC Production access review ( application and AD groups) and made the necessary updates in the system accordingly
• Provided Internal and External auditors (PWC) with audit requests and provided information in timely manner.
• Analyze and troubleshoot security issues using SU53, ST01 and SUIM
• Produced audit reports with respect to Segregation of Duties SoD, Sensitive Access, and Sensitive Transactions
• Configured security workflows for User access review and Firefighter log review processes
• Assess current landscape and provide recommendations of governance as it relates to security, segregation of duties, role management, and user access.
• Worked as a liaison to the ITSecuritygroup as well as our AMS - TCS (remote) SAPSecurityteam.
• Worked with Sail Point IDM for password related issues.
• Conducted training for users, role owners, compliance owner and managers
• Ensure thatsecuritycontrols are compliant with Sarbanes-Oxley.
• Worked with internal and external Audit teams - PWC for sensitive transaction and query access reviews.
• Worked on Audit projects and working as a liaison between the security team and auditors.
• Mitigation and remediation of users and roles for SOX using User/Role Analysis
• Documentation in various security processes, procedures, auditing; knowledge transfer and an active team player.

Confidential, Chicago, IL

Sr. SAP Security/GRC Analyst

Responsibilities:

• Responsible for design and implementation of SAP GRC 10.1 upgrade project
• Responsible for analyzing the current control framework and provide recommendation
• Provided recommendations on security role design and implementations based on the leading practices
• Conducted workshops with business to understand the risks and configured the controls
• Responsible for implementation of SAP Technical upgrade security project ECC, BI, CRM, BOBJ and Portal
• Build BI analysis authorizations and security roles to restrict users on various levels
• Involved in configuring and customizing the Multi-Stage Multi-path (MSMP) workflows and BRF+ especially for ARM and EAM components
• Worked with BW Technical Team to design security, identify Info Areas, Info Cubes, and created custom objects.
• Upgraded BW from BW 7.02 to BW7.4. Migrated BW 7.02 Authorizations to BW 7.4 Authorizations using SAP’s Migration Tool (program RSEC MIGRATION). Restricted Authorizations at various levels such as Query, Query View, Web Template, Web Item and Workbook.
• Designed access management solutions to automate the provisioning process for customers
• Designed and built security roles and authorizations considering SOX recommendations
• Designed security roles for end users to read specific views with controlled row level access
• Monitored and analyzed segregations of duties at user level and designed mitigation strategies
• Worked closely with Webi reporting team to build the security privileges, debugging issues
• Support the project team members with various access related issues during various project phases
• Assessed the functional enhancements and made recommendations per SAP Security and Compliance best practices.
• Facilitated internal and external audits as requested
• Identified Risks and compliance issues by running segregation of duties checks and following client compliance protocol.
• Implement Business Objects (BOBJ)Security
• Defined the security approach for Webi, Xcelsius Dashboards and Crystal Reports.
• Administration using Central Management Console to configure Users, User groups
• Set up Global level/Folder level/Object level Security in BOBJ and restricted reports on different access levels as per requirement.
• Resolved authorization issues of end users related to BI Security using RSECADMIN
• Worked on Business roles and their assignments (PPOMA CRM) for CRM 7.0 IC Web Client UI
• Worked closely with the CRM Customizing team in creating the Business Roles and Org Structure
• Traced and Resolved Authorization issues for BSP Applications in Web Client UI
• Created Business Partner and associating them with user (employee)
• Designed and built security roles considering SOX recommendations
• Monitored and analyzed segregations of duties at user level and designed mitigation strategies
• Implemented standards for custom authorization objects.
• Created OSS Ids, maintained OSS Connections and OSS accounts.
• Performed user maintenance tasks, User creation, deletion, lock down, activation, password management tasks and ran various user administration reports.
• Reviewed the Organization structure, jobs, roles and the SoD matrix for the Security developed in SAP and handled SoD conflicts for Sarbanes Oxley Compliance.
• Opened OSS connections and created OSS ids for functional and technical users.
• Participated in weekly team meetings and internal initiatives to review outstanding issues and/or to discuss new trends or projects

Confidential, Kansas, KS

Sr. SAP Security Consultant

Responsibilities:

• Assess current landscape and provide recommendations of governance as it relates to security, segregation of duties, role management, and user access.
• Responsible for analyzing the current control framework and provide recommendations
• Worked on various Roles and eliminated the Transaction Codes which are causing conflicts from those Roles, Role Redesign, Mitigation and Role Remediation work.
• Scope of the Re-Design project included Order-To-Cash, Logistics Execution, HCM, Financial Supply Chain Management (Biller Direct, Payer Direct, Dispute Mgmt, and Collections Mgmt), IT and Work Management.
• Re-Design ECC, BI, CRM, SRM, SCM, EWM and HCM security.
• Migrated old BW 3.0B roles (profiles) to new BW 7.0 using the program RSEC MIGRATION and responsible for design and creation of new roles upon business and IT requirements passing the SOX AUDIT.
• Expert in using RSECADMIN and building Analysis authorizations that are new to BI 7.0 security, Implemented new BW 7.0 security authorization objects
• Transport change requests across multiple development, quality and UAT and production systems
• Performed Client copy during various Testing cycles.
• Assisted in developing procedures, processes and guidelines that are efficient and focused on the quality of the process or end-state deliverable.
• Created SAP transports and work within change management guidelines ensuring that all transports moved into production maintain system integrity
• Performed User Administration on creating, changing, deleting users, assigning roles.
• Designed and developed procedures for user administration, role creation, role maintenance and security management for the SAP environment.
• Worked with the development team, on any custom t codes, objects/fields, specific for the custom t code.
• Pre go-live, go-live and post go-live support, until transfer to the support team.
• Developed Global security strategy and logging and auditing strategy.
• Audit the system as per standard and maintain the security and controls standards. Undergone Auditing and corrections of the segregation of duties analysis.
• Perform Self-Assessment and set everything as per the Security and Control Standards.
• Upgrade, support pack upgrades on ECC, BI, HCM, CRM, SM and XI/PI
• Analyzed ABAP Dumps, Update Monitoring, System Traces, Lock entries.
• Defined RFC Destinations, BW Source system configuration and setup.
• Used SU24 to maintain Check Indicator Defaults and used SU53 and ST01 for analyzing the authorization errors
• Created roles restricting access toInfo cubes,ODS objects, specificqueriesandworkbooks.
• Assigned the Analysis Authorizations to the role using the object S RS AUTH.
• Build security and successful testing of various objects related to Dashboard
• Designed roles in Solution Manager 7.0 and XI/PI development system.
• Worked on Business roles and their assignments (PPOMA CRM) for CRM 7.0 IC Web Client UI
• Extensively worked on SAP HR Structural Authorizations and position based Security.
• Worked on setting up security for various HCM Modules such as LMS, Time, ESS/MSS etc.
• Build SAP roles and define jobs by coordinating with functional project team members.
• Worked with business owners to define the authorizations needed for users.
• Set-up SAP authorization profiles and roles that represent the different end users job definitions.
• Administered and maintained end user accounts, permissions and access rights.
• Prepare test user IDs in order to facilitate business/project user testing in non-production environments.
• Created LSMW for creating mass users,
• Resolved daily SAP Security issues.
• Participated in weekly team meetings and internal initiatives to review outstanding issues and/or to discuss new trends or projects

Confidential, San Antonio, TX

SAP Security Consultant

Responsibilities:

• Actively participate in client discussion and meetings, manage engagements, prepare project documentation, balance the occurrence of unanticipated issues, and lead workshops on security topics as needed.
• Designed security roles for ECC, HR, BI, Finance FSCM, AP, AR, Logistics Master data, Sales and Marketing teams considering SOX regulations
• Created composite, master and derived roles based on client requirements, considering the SOX and SoD requirements.
• Understood organizational structure and created roles based on the code of conduct (Client specification).
• Efficiently used the BI analysis authorization concepts by restricting user areas into organization level, info cube level and special characteristic level.
• Worked on giving custom BI authorizations S RFC, S RS AUTH, S RS COMP, S RS COMP1.
• Designed and implemented HR structural authorizations for travel management (FI-TV) based on the HR organization structure.
• Created PD profiles and restricted creation and approval process in travel management.
• Implemented security for channel management using Access control engine
• Coordinated with client’s functional and process teams to gather the business requirements and designed the security roles
• Designed the SoD free security roles by designing roles at task level and minimized future maintenance efforts.
• Prepared quarterly IT Audit update to Audit Committee on IT internal control effectiveness
• Developed ECATT scripts and screen recording scripts
• Worked with ABAP development team and configured security for channel management application by customizing Access control engine.
• Worked on Authorization Objects P ORGIN, P ABAP, P PERNR, P ORGXX etc.
• Performing BO (Business Objects)securityat users and groups level, Universe level, Folder access
• Troubleshooting BI authorization related problems using RSECADMIN, RSD1 and RSA1 T codes.
• Analyze and troubleshoot security issues using SU53, ST01 and SUIM
• Worked closely with Audit team for SAP Security Audit and generated Audit Information Systems (AIS) logs
• Performed user administration activities such as creating, deleting, renaming, locking and unlocking users, and resetting passwords, maintaining logon data and assigning roles to the users.
• Created User Groups by using transaction code SUGR.
• Fix the bugs related to roles and authorizations in order to build security in R/3
• Managing Standard and Custom Authorization Object.
• Transport Roles using the change request method and also the Download/Upload method for transporting the roles to systems not in the transport landscape.
• Experienced in Setting up Global level/Folder level/Object level Security in BOBJ.
• Worked on setting up custom access levels to satisfy business needs in securing various objects, applications and reports.
• Worked on BOBJ User Administration.
• Worked on CRM Business roles creation, assignment and troubleshooting.
• Secured Tables and Programs by creating custom Transaction codes.
• Monitoring the critical transaction codes and ensures that they are assigned to the concerned users onl
• Created transport packages to move roles from development portals to other systems in the landscape
• Performed user administration activities such as creating user ids, copying user ids, assigning roles, assigning groups etc.
• Documentation in various security processes, procedures, auditing; knowledge transfer and an active team player.

Confidential, Chicago, IL

SAP Security Consultant

Responsibilities:

• Recommended on current processes and procedures.
• Reviewed critical and sensitive authorizations, implement improvements to meet audit requirements.
• Add/remove the excessive access from the existing role at organization values level.
• Creation and maintenance of user master records in a CUA environment using CATT Scripts
• Assigning the roles to users in different systems as per approved procedures
• Regular follow ups with the functional leads on any changes by showing excellent communication and maintaining a good client relationship.
• Documented the security role design and security restrictions on SAP.
• User Management using Central User Administration
• SoD Conflict analysis & reporting
• Role creation/modification
• Analysis of system security and generation of reports for documenting the same
• Review security procedures and recommend improvements
• Troubleshooting BI authorization related problems using RSECADMIN, RSD1 and RSA1 T codes.
• Coordinated overall UAT testing of the Re-design Security project.
• Developed the Security design for CRM 7.0
• Worked with the CRM functional team to outline security requirements around several CRM services
• Set up CRM 7.0 security for Marketing and Campaign Management, Business Partner Security, E-commerce (Internet Sales) and Product Security
• Worked with functional analysts in developing CRM security in accordance to CRM Business Role requirements and assigning PFCG roles to business roles.
• Extensively used CRMD UI ROLE PREPARE report to generate the necessary UIU COMP settings corresponding to the CRM business role.
• Helped Support team on user mapping for the newly created roles & removing old roles.
• Involved in Hyper care Support after the Roles transported to Production system.
• Preparation of project estimations, identifying resources from within the team for the work in projects.
• Preparation of reports (Daily/weekly/monthly) for the work done by team.
• Coordinating with offshore client team and onshore client team via daily/weekly calls for the inputs and suggestions.
• Regular follow ups with the functional leads on any changes by showing excellent communication and maintaining a good client relationship.
• Documented the security role design and security restrictions on SAP.
• SoD Conflict analysis & reporting
• Analysis of system security and generation of reports for documenting the same
• Review security procedures and recommend improvements
• Identified the project status and reported to Project Manager.

Confidential, Kansas, KS

SAP Security Consultant

Responsibilities:

• Developed security strategy and designed security implementation
• Lead security requirements gathering with process teams
• Provided SoD and Role matrices templates to the Business owners.
• Analyzed the logged issues related toSAP securityfor all the modules, interacted with the client to understand the requirements and provided the solution on time.
• Developed Role Design and Testing Strategy for all SAP applications
• Determined naming conventions for Roles, Profiles, and Authorization Groups (Users, Tables, Programs, Batch Jobs, Print Spools)
• Role transport to multiple landscapes, TR release through SE09/SE10/SE01.
• Day to day technical support and resolution ofSecurityissues.
• Configured Profile Generator and transported settings to all clients, setupsecurityfor the developers.
• Report generation using SUIM and also to analyze the missing authorization based issue.
• Trouble shooting support for the users authorization failures in all SAP applications and resolving the Security issues and support in integration testing of Roles/Profiles.
• Creation and Modification of User Master Records for Project and End Users.
• User Administration Monitoring, User Tracing and Troubleshooting User Authorization issues using SU53 and ST01.
• Interacted with the Role owners and the team lead for maintaining the correct restrictions on the Transaction codes and the activities within the Transaction codes.
• Transporting the change requests from the Development environment to Testing/QA/PRD environments.
• Created custom transaction Codes for restricting access to custom tables, views and programs.
• Created Authorization groups and assigned Tables and Programs to the groups.
• Performed reconciliation of user master record and roles using PFUD.
• Worked closely with the manager to discuss status reports, policies related to the SAP R/3 system, project timeliness and deliverables

Confidential, NY

SAP Security Consultant

Responsibilities:

• SAP Security Consultant responsible for Redesigning and Implementing HR and CRM Authorizations
• Understanding client’s requirements by scheduling workshops and meetings with respective Business process owners and Business key users, and documenting their concerns and challenges with existing setup.
• Understanding the existing HR structure and Authorization system setup by closely monitoring activities in HR system.
• Extensive experience in designing and implementing SAP HR Authorization setup per client’s requirement.
• Understanding existing HR Structure & Authorization system setup by closely monitoring activities in HR system.
• Creation, Maintaining and Assignment of Structural Authorizations and usage of OOSP and OOSB T codes.
• Extensively worked on Indirect Role Assignment - Position based HCM security using PFCG/PO13 T codes.
• Extensively worked on HR Authorization Objects like P ORGIN, P ORGXX, P ORGINCON, P ABAP, P PERNR, P PCLX etc.
• Understand client’s requirements by scheduling workshops and meetings with respective Business process owners and Business key users, and documenting their concerns and challenges with existing setup.
• Strong knowledge working with Infotypes. Setting up communication Infotype - ID to Pernr assignment, querying PA and HRP tables for the PA and OM Infotypes.
• Worked on scheduling HR Authorizations maintenance background jobs with various reports/programs provided by SAP like PFUD, RHPROFL0 and Indexing programs. Also working with developers to customize the programs as per requirement.
• Conducting workshops and meetings with all the worldwide key users to present them the new HR authorization concept and clarifying their queries and concerns.
• Developed the Security design for CRM 7.0
• Worked with the CRM functional team to outline security requirements around several CRM services
• Set up CRM 7.0 security for Marketing and Campaign Management, Business Partner Security, E-commerce (Internet Sales) and Product Security
• Worked with functional analysts in developing CRM security in accordance to CRM Business Role requirements and assigning PFCG roles to business roles.
• Extensively used CRMD UI ROLE PREPARE report to generate the necessary UIU COMP settings corresponding to the CRM business role.
• Worked extensively on SAP CRM 7.0 Security, creating and assigning Business Roles.
• Worked extensively with Functional teams to configure CRM Business Roles.
• Creating Business Roles with standard SAP provided CRM reports.
• Assigning Business Roles to Org units/Positions in the CRM Org structure as per the requirement. Worked with PPOMA CRM.
• Created the test strategy and test plans for regression testing during support package application.

Confidential, Moline, IL

SAP Security Administrator

Responsibilities:

• Implemented a full life cycle of SAP entailing project preparation, business blueprinting, and realization, to ensure a smooth go live & ongoing support.
• Collaborated with functional team members and business representatives to ensure that security settings meet the requirements of the business and align with the defined process controls and standards.
• Defined and managed user profiles for 5000+ employees (SU01).
• Created and maintained authorization objects and roles for all employees (PFCG & SU24).
• Documented user role matrix and transaction role matrix with authorization limitations in preparation for the SAP go live.
• Configured and maintained central user administration (CUA) along with respective child systems.
• Monitored system security logs and user access (SM19, ST03N).
• Developed and documented process procedures for user administration and authorization maintenance.
• Worked with the user information system (SUIM) for reporting and trouble shooting.
• Identified missing authorizations with the use of SU53; upon seeking manager approval, maintained those using SU24 & PFCG.
• Participated in designing, writing and implementing security related standard operating procedures for user administration, Roles and profile generation.

Confidential

SAP Security Administrator

Responsibilities:

• Designed and developed the generic roles, derived roles and composite roles considering the SOX recommendations
• Collaborate with other team members and business representatives to ensure that security roles, authorizations, activity levels and settings meet the Client requirements.
• Conducted workshops with the business process analysts for studying and analyzing the business scenarios.
• Identifying risks and gaps, provide recommendations to mitigate any SoD conflicts
• Defining roles in various modules of SAP by coordinating with functional experts and segregation of duties with in the module and across the modules
• Configured and managed Central User Administration (CUA) environment. Administer Users using SCUA, SCUL, SCUG and SCUM
• Modifying roles as per the analysis or requirement after making sure that the required approvals have been in place
• User Administration Monitoring, User Tracing and Troubleshooting User Authorization issues using SU53 and ST01.
• Reviewed critical and sensitive authorizations for restricting access to the Development, Functional, Security and Basis Team.
• Knowledge transfer to the County Security Team.