Position: Senior SAP Security and GRC Consultant
Category: Security
English level: fluent
Years of experience: 7

Worked with the team to rollout the SAP Security and GRC Access Control solution enterprise wide.
Completed the project and proceeded to go-live within six months.
Eliminated up to 90% of SOD violations and critical actions within the system.
Created mitigating controls to monitor the risk exposure of the corporation.
Rationalized role naming conventions to meet integrity requirements.
Streamlined the role management process with risk-free roles and harmonized user access administration.
Advanced roles re-design to reduce SOD violation by over 90%.
Improve monitoring and analysis or risks and controls with one-click access to dashboards and reports.
Eliminated legacy access with excessive & unnecessary tcodes.
Bridged the knowledge gap among key Security and GRC stakeholders by training key staff to become super users and take ownership of the solution.
I am an SAP Security and GRC certified professional with over 6years of work experience.
I have led teams, orchestrated, and managed Security in SAP ERP and S/4HANA applications, for both greenfield implementations and support requirements.

By applying my knowledge in security and GRC, I have been able to help clients secure their SAP systems from vulnerabilities/threats, design and implement an authorization concept, allow access where it is needed and restrict where it is not, and ensure overall confidentiality, integrity, and availability of the SAP system.

I identify, manage and resolve SOD violations, create risk-free and compliant roles (single, composite, derived) using transaction PFCG and the Business Role Management (BRM) tool in GRC, configure automated provisioning and manage emergency access within a compliant environment.

I am very familiar and versatile in the use of SAP solutions and components including SAP Security, SAP ECC, SAP GRC, SAP S/4HANA, SAP HANA, SAP Fiori, Authorizations.