SUMMARY

• Around 13 years of SAP Security, Basis and GRC Access Control experience in Design, Development, Testing, Implementation and Support for various SAP technologies.
• SAP Security and GRC Senior Consultant in the role of defining Enterprise Architecture, SAP technology components and emerging solutions in the customer's landscape. Facilitating customers with a practical adoption roadmap towards an SAP centric Business landscape.
• Deep knowledge on SAP Security, BW Security, GRC AC, IT SOX Audit, Governance controls and SAP NetWeaver tools and able to provide a practical perspective towards leveraging SAP solutions.
• Track lead for SAP Security and GRC to remediate risk, to maintain Data integrity, Data confidentiality and System availability as per Segregation of Duties and Audit Compliance Standards in SAP technologies for operations support and projects within client location.
• Work with the internal auditor and co - ordinate with external auditors for the compliance of the SOX and SOD.
• Project & Service Delivery Management: Portfolio Management, Governance, Service Delivery, People Management, SLA Measurement & Quality Assurance, effort estimation, Reporting, Organizational Initiatives, Service Improvements, Talent acquisition & development, Financial management
• Multi-task-oriented & Well-qualified in User Access Management and role administration in ECC, BI, HANA, Enterprise Portal ESS/MSS authorization concept, Solution Manager, BOBJ, and GRC Tools.
• Providing SAP Solutions in Production Support, Projects Solution Delivery areas involving Implementations, Role redesign, Roll Outs, Deployments, Upgrades, automation tool development and Audit / IT In controls Sox activities.
• Strong Leadership, Analytical and Interpersonal skills, effective in facilitating, conducting and leading a team of 10 members across regions as a lead for SAP GRC and Security Track.
• Proficient in designing and maintaining the process flow for IT monitoring controls.
• Proactive involvement and disciplined driven in IT SOX Audit and Business SOD audit for last 2 years.
• Self-directed in designing Housekeeping and Monitoring activity under Managed Services for IT SOX controls.
• Driven results-oriented Problem Management program for controlling the regular issue area occurring in Incident management for Business community.
• Designed various kinds of roles (Derived Role, Parent Role, Composite role, Single Role, Job bases and task based role designing, BI Menu role, data role, query roles and Analysis authorization designing) using Profile generator (PFCG), RSECADMIN

TECHNICAL SKILLS

SAP Technologies: SAP ECC 6.0, Net Weaver 2004/2004s, SCM 7.0, BW, HANA, Solution Manager, Portal, BOBJ and GRC Access Control.

Databases: Oracle 9i/10g, 11g, MS SQL Server 2000/2005/2008 and MS Access

Operating System: Win 95/98/ XP, NT, Win 2000, Windows 2003, HP-UX, Linux, UNIX

Office Software: MS Office - Excel, Power Point, Word, Outlook, Project, MS Visio and Google Apps.

Ticketing Tools: Remedy, HP Service Manager, WIH, Gordon

PROFESSIONAL EXPERIENCE

Confidential, Milwaukee, WI

SAP Security Track Lead

Responsibilities:

• Track lead for SAP Security, leading Design, Development, Testing, Implementation and Support of various SAP technologies.
• Working on Role architecture redesign for Confidential Inc.
• Responsible for requirement gathering and understanding Business process in place and designing roles as per designation, Role matrix creation etc.
• Analyzed the T-code usage history and created actual usage analysis report as a part of position based redesign methodologies.
• Created sensitive and critical T-code list and ensure they are not assigned to any redesigned roles to meet the Audit & Compliance expectations.
• Performed UAT and Risk analysis for the new set of roles.
• Handled post intensive care support once the roles are in place in PRD.
• Handed over the support to support team after providing required KT and documentation regarding new role design.
• Conducted workshops and created required documentation.
• Strong Leadership, Analytical and Interpersonal skills, effective in facilitating, conducting and leading a team of 10 members across regions as a lead for SAP Security Track.
• Multi-task-oriented & Well-qualified in User Access Management and role administration in ECC, BI, Enterprise Portal ESS/MSS authorization concept, Solution Manager, BOBJ, and GRC Tools.
• Providing SAP Solutions in Production Support, Projects Solution Delivery areas involving Roll Outs, Deployments, Upgrades and Implementations and Audit / IT In controls Sox activities.
• Prominent involvement in designing Managed Services Model process
• Self-directed in designing Housekeeping and Monitoring activity under Managed Services for IT SOX controls.

Confidential

SAP Security Track Lead

Responsibilities:

• Leading the SAP Security projects implementation. As part of this assignment, extensively involved in the Design, Development and Implementation of Security for various SAP systems across the globe. Supporting GRC Access control 10.0 activities for Risk analysis and remediation, User access management and super user privilege management.
• Worked on SAP ECC, BW Implementation. Interaction with Business and Functional team to understand the Security requirements.
• Performing proof of concepts. Designing the Security architecture, Development and testing.
• Extensively used RSECADMIN tool to build Analysis Authorizations.
• Made the BI Security Roles as granular and optimum so that the Info Objects can be utilized as much as possible without creating too many Analysis Authorizations.
• Worked on securing Info Provider/Info cubes/Info Objects on BI
• Created BW Roles and giving authorizations to Power Users to Publish Reports in Role Menus
• Made the info objects authorization relevant and created analysis authorizations to provide security on Hierarchies and Info Objects.
• Created analysis authorization to implement field level security for financial report by company code and sales organization.
• Go live and post go live support for the project.
• Extensively involved in the role design, prototyping and Blueprint preparation for SAP BW and ECC Security implementations.
• Evaluate and implement various SOX and Audit related remediation actions for the various SAP environments.
• Perform realization and authorization reviews for the various security related developments and changes in the Projects.
• Handling various production support tickets adhering to SLA.
• Providing Emergency users access to authorized users as per Confidential emergency user access process and maintaining the emergency user activities trace file, sm20 log, URF, etc..
• Ensure SLA adherence and business user satisfaction, Tracking and reporting.
• Responsible for document preparations like SOP document, Training material and Test Criteria Document
• Attending review meetings with client management team in regards to the project development.
• Working closely with the development team for project Go-live

Confidential

SAP Security Team Lead

Responsibilities:

• Worked on SAP ECC, BW Implementation. Interaction with Business and Functional team to understand the Security requirements.
• Performing proof of concepts. Designing the Security architecture, Development and testing.
• Leading both support environment and also the new developments.
• Proactively initiated Security Automated tool development, which in turn reduced the man hours for rollouts and lead to revenue saving.
• Provided design specifications on automated tools developments and implemented the same after proper testing.
• Guided, mentored and provided timely support to the team whenever required.
• Documenting new developments and role designs for further KT purpose.
• Single point of contact for all the Security defects for all releases.
• Represent Security team in client calls and monthly CR discussions.
• Proposed client for implantation of GRC EAM and implemented the same.
• Co-ordinate with different teams in process of implementing GRC EAM.
• Training steak holders on using the newly implemented GRC EAM and coordinating with them for role owner and back up.
• Extracting reports from Remedy and analyze the response time, delays and requests taking longer time for resolution.
• Handled escalations and Priority 1 requests.
• Constantly checking the resolution categorization followed while fixing the Incidents, service requests and work orders.
• Managing team in appraisals, shifts and trainings.
• Emphasize on building and establishing positive team environment by providing job rotation and appreciate for the hard & smart work done.

Confidential

SAP Security Team Lead

Responsibilities:

• Collecting Audit evidences and reviewing the same on bi-weekly, monthly and yearly basis.
• Working closely with internal and external auditors.
• Extracting the country wise custom and standard functional reports as per the ad hoc audit requirements.
• Providing evidences for the audit findings at the time of external audit.
• Analyzing the current audit evidence gathering & testing methodologies and suggesting to replace them with equivalent GRC Rule sets.
• Extending my support to the offshore GRC implementation team, acting as bridge and fill the gaps.
• Handling support team of 5 members from offshore.
• Handled escalations, Priority requests and performing the route cause analysis for escalations.
• Extracting reports from Remedy and analyze the response time, delays and requests taking longer time for resolution.

Confidential

SAP Security Team member

Responsibilities:

• Worked on SAP application development team and annual service maintenance team.
• Worked on service requests and Incident management.
• Created and maintained user master records and roles as per the requirement.
• Worked on missing authorization errors and proposed relevant role after analysis.
• Creation and assigning of user groups.
• Locking, changing the validity to date and revoking access to the terminated users.
• Locking the inactive users.
• Unlocking and extending validity as per service request.
• Expertise in change management process and support methodologies.

Confidential

SAP Security Consultant

Responsibilities:

• Worked for Virgin Mobile SAP Security Implementation Project.
• Worked on Roles rationalization as a part of Security Audit.
• Involved in Roles and Authorizations Implementation for the Investment Management module.
• Provided Security Support for different systems, creating users, assigning the roles to the users, Creating and maintaining of roles etc.
• Business Area specific role creation and mass role transport across the landscape after getting the UAT confirmation from concern team.
• Extracted user list reports region wise, department wise and blocking the users who are not logged in for 60 days after getting concerned approval.
• Creation and maintenance of Composite and Single roles as per client requirement.
• Locking and unlocking the critical T-codes at the time of year-end activities.
• Resolved the Authorization issues by interacting with concern functional team as per the SU53 dump.
• Perform user master reconciliation whenever the roles are assigned.
• Transport Management System across the R/3 system Landscape.
• Background jobs monitoring and Transport management.
• Resolving end user issues like user logons, password reset, new role additions as per the process.

Confidential

SAP Security and Basis Administrator

Responsibilities:

• Worked on Rollout projects to several countries in the area of SAP ECC, BW, CRM, etc...
• Attending Monthly Meeting related to Authorization calls with Business
• Role testing alongside functional consultants, during IT testing and UAT testing
• Worked on Virsa Compliance calibrator and Virsa firefighter for Super User Privilege management and Risk Analysis and Remediation
• Operational Monitoring of the SAP systems for standard controls. Internal Control Systems team managing SOX activities.
• Periodic extraction and validation of the various system reports / data as per the SOX policies and any deviations identified to be mitigated or resolved after proper documentation.
• User Administration of different SAP systems.
• SAP Authorization issues & Security management.
• Extracting the organizational and staffing details from the HRMS system on weekly basis.
• Relationships update with respect to organizational unit.
• Delimiting the organizational units.
• Maintaining the user parameters as per the HRMS records for time reporting.
• Creation of ESS, ASS & MSS access in HRMS and enterprise portal system.
• Creating and maintaining of roles.
• Trouble shooting ESS, ASS and MSS issues.
• Enterprise Portal Administration.
• Worked on VIRSA tools and ticketing tools Remedy, WIH & Gordon.
• Good understanding on SODs and SOX Compliance tools.
• Analyze with SU53 & assigning of roles to the user account as per company’s security policies.
• Worked as SPOC for SAP Gordon Tool.
• Uploading the newly created roles and the role approvers in to the ticketing tool.
• Analyzing the problem tickets, giving authorization to proper users
• Support of all Global SAP Solutions (CRM, HRMS, B/W & Enterprise Portal)