Home

Patrick - Sr. SAP Security & GRC Consultant

[email protected]

Location: Remote, Remote, USA

Relocation: NO

Visa: L2S

PROFESSIONAL SUMMARY: Overall 10+ years of expertise as a seasoned SAP Security Consultant with SAP R/3, ECC, BRF, GRC, and S/4 Hana, Fiori specializing in safeguarding critical systems and data. Unlocked the power of techno-functional skills gained over the course of an extensive IT career to comprehend client requirements, streamline business processes, and deliver tailored solutions. Exceptional communication, consulting, and client relationship abilities ensure seamless collaboration and customer satisfaction. Extensive experience in ERP, specifically SAP R/3, ECC, BRF, GRC, and S/4 Hana, Fiori spanning implementation, enhancement, post-production support, and maintenance projects across diverse environments. Profound understanding of SAP Authorization concepts across multiple modules of S/4 Hana, ensuring secure access and compliance. Expertise in Security Risk Control, Audit Remediation, and HR Authorizations, effectively mitigating potential vulnerabilities and worked on telecom, oil and gas industries Analyzed GRC SOD Risks in close partnership with control teams, proactively addressing compliance challenges. In-depth knowledge of Business Processes Analysis within SAP CRM/SRM/HCM/EWM/FI/CO/PP/SD/QM/HR and GRC modules, s/4 process manufacturing,process orders,recipe management ensuring audit compliance and risk- free operations. Proficient in analyzing and resolving SOD issues using GRC 10.0/10.1/12.0 Access control tools, such as ARA, EAM, BRM, and ARA. Successfully configure GRC Access control 12.0 components, ensuring comprehensive security and compliance measures. Worked on recipe management,process orders in S/4 Hana Troubleshooted Fiori application authorizations and access issues, leveraging extensive knowledge of Fiori, HANA, and S/4 HANA Security. Deep understanding of business processes and master data within SAP modules (FI/CO/SD/MM/PP/PM/QM/WM/EWM), enabling effective configuration and implementation. Good understanding of production strategies like make to order ,make to stock Proficient in utilizing data uploading tools like LSMW, LTMC, and LTMOM for efficient and accurate data management. Expertise in GRC activities, including FFID maintenance, analytical reporting, risk mitigation through control IDs, and role and user-level simulation and analysis, ensuring a secure environment. Resolve authorization issues in collaboration with functional teams, ensuring smooth system operations. Excel in stakeholder management and possess technical leadership skills, offering valuable project management expertise for successful implementations. SAP R/3 SECURITY SKILLS: Streamline user administration processes by efficiently managing user login IDs, password assignments and resets, as well as user lock and unlock activities. Harness the power of Profile Generator (PFCG) to create tailored roles, including single, composite, and derived roles, while ensuring seamless deletion and modification of roles to meet specific business needs. Conducted comprehensive security activities, such as reconciling user master records and roles through tools like PFUD, SUPC, and pfcg_time_dependency reports, ensuring accurate and up-to-date security configurations. Maintained Authorization objects using SU24, guaranteeing precise and controlled access to system resources. Safeguard against unauthorized table access by leveraging transaction SE54 and s_tabu_dis authorization object, effectively protecting sensitive data and maintaining data integrity. Streamline user master data management by implementing mass changes using SU10, ensuring efficient and accurate updates across user profiles. Proficiently navigate security-related tables like AGR* and USR*, leveraging valuable insights for enhanced security configurations. Identified missing authorization objects through SU53 and ST01, providing proactive resolution and recommending appropriate roles for end users. Personalized user authorizations by assigning missing authorizations based on individual user requirements, ensuring optimized system access and a seamless user experience. EP,GRC & S/4 HANA ,FIORI SECURITY: Expertise in user administration activities in Enterprise Portal to process requests such as user creation and assigning Roles and resetting passwords, Lock/Unlock and other day-to-day operations relevant to the user administration. I have extensively worked on GRC modules such as ARA, ARM, SOX, BRM, BRF, EAM Successfully configured parameters in MSMP Workflow Debugging (Logs/Trace) for the missing authorizations in SAP HANA Deep understanding of S/4 HANA landscape, Database role and Privilege structure in SAP HANA Worked with the LDAP group to maintain portal security I have been working on GRC like FFID maintenances, pulling analytical reports Applying Control ids to unmitigated risks in GRC & performing role level, user level simulation/risk analysis and Access provisioning to users though GRC. Maintaining Role Owners and Approvers for Roles in GRC. Worked with the LDAP group to maintain portal Experience in Data migration, Data cleansing and uploading data in Sap using LSMW, BAPI s, BDC recordings, Win shuttle, Process Runner and Data Sure. Good knowledge of Fiori, HANA and S/4 HANA Security Worked on Fiori user Role provisioning strategy and maintenance Create Fiori Front end roles, backend roles and Privileges. TECHNICHAL SKILLS: Skill Category Skills SAP Retail/BI Analytics SAP BI 7.4, SAP BO 4.0, BO 4.1 ERP Applications SAP R/3, ECC6.0, ECC5.0,4.7, S/4 Hana, ERP 2005 SAP Modules SAP HR, CRM, SRM, SCM, Oracle DB, SAP NetWeaver 7.0, GRC 10.0,12.0 Non-SAP System MDM, Oracle, HANA Middle Ware tool SSIS, SAP BODS Operating System Windows 2003 &2008, AIX Data Bases Oracle, SQL PROFESSIONAL EXPERIENCE: Client: DuPont, DE, USA Oct 22 -till date Role: Sr. SAP Security consultant Responsibilities: Unlocked the power of SAP GRC (Governance, Risk & Compliance) Access Controls 12.0 With our expert configuration of rule sets, parameters, mitigation owners, and controllers in ARA and EAM, ensuring comprehensive risk management and compliance. Seamlessly administer user maintenance and role maintenance, providing a robust foundation for secure and efficient access control in SAP landscapes (ECC, Portal, GRC). Worked on Fiori user Role provisioning strategy and maintenance Created Fiori Front end roles, backend roles and Privileges. Resolved complex security issues by troubleshooting existing user roles, security objects, and authorizations, ensuring a seamless and secure SAP environment Drived efficient access control processes through GRC CUP Requests, enabling streamlined new user creation and access provisioning based on proper approvals. Verified rules against known cases and create new test cases to ensure accurate and comprehensive risk management in GRC. Implemented innovative methods to manage SOD (Segregation of Duties) risks, minimizing the number of mitigation controls and ensuring efficient and compliant access control. Conducted comprehensive role-level and user-level simulation and risk analysis, proactively mitigating potential risks and ensuring a secure environment. Redesigned and developed roles, delivering optimized role configurations for testing and validation in the Quality environment. Client: HCL Technologies Mar 21 Sep 22 Location: Hyderabad, IN Role: Sr. SAP Security consultant Responsibilities: Tailored and optimized user roles for your business needs with our expertise in creating and modifying Single, Composite, and Derived roles. Resolved complex security issues across various SAP landscapes (ECC, Portal, GRC, Fiori, S/4 HANA, SAC) by troubleshooting user roles, security objects, and authorizations, ensuring seamless operations. Identified missing authorizations and recommend appropriate roles for end users using advanced tools like SU53 and ST01, guaranteeing efficient and compliant access control. Leveraged our SAP Presales capabilities and client mentoring services to gain valuable insights and drive successful project outcomes. Delivered compelling project presentations to customers, providing comprehensive solutions for complex situations and addressing customer needs. Foster effective communication with clients, actively troubleshooting issues through direct interaction, ensuring high client satisfaction. Streamline access control processes in GRC by maintaining role owners and approvers, ensuring a robust and compliant security framework. Worked on block planning and model mix planning Redesigned and developed roles, delivering optimized role configurations for testing and validation in the Quality environment. Unlocked the full potential of Fiori by creating both front-end and back-end roles and privileges, aligning system access with business requirements and enhancing user experience. Seamlessly transport composite and single roles using Charm, ensuring efficient and reliable role deployment across system landscapes. Established clear role-to-business role owner matrices, facilitating effective coordination with business point of contacts and ensuring streamlined approval processes. Monitored SOD conflicts at both user and role levels, proactively addressing compliance concerns and maintaining a secure and compliant system environment. Provided timely support for SAP incidents, service requests, and access-related issues, ensuring high availability and resolution of production security and GRC matters. Designed and authorized HANA roles for developers, modelers, database administrators, and end users, guaranteeing secure and controlled access to SAP HANA resources. Maintained Authorization objects using SU24, ensuring precise and controlled access to system resources in SAP HANA. Streamline user ID and role creation processes in SAP HANA, enabling efficient user provisioning and optimized security configurations. Utilized advanced debugging techniques, such as logs and traces, to identify missing authorizations in SAP HANA, ensuring robust security measures and optimized system access. Leveraged our expertise in security-related tables like AGR_TCODES, AGR_USERS, and AGR_DEFINE, ensuring comprehensive security configurations and streamlined access control. Client: Srivil Solutions Pvt Ltd Apr 20 Mar 21 Location: Hyderabad, India Role: Sr. SAP Security consultant Responsibilities: Unlocked the power of SAP GRC (Governance, Risk & Compliance) Access Controls 10.0 with our expert configuration of rulesets, parameters, mitigation owners, and controllers in ARA and EAM, ensuring comprehensive risk management and compliance. Seamlessly administer user maintenance and role maintenance, providing a robust foundation for secure and efficient access control in SAP landscapes (ECC, Portal, GRC). Resolved complex security issues by troubleshooting existing user roles, security objects, and authorizations, ensuring a seamless and secure SAP environment. Leveraged our SAP Presales expertise to guide and mentor clients, providing valuable insights and driving successful project outcomes. Delivered compelling project presentations, defining solutions for complex situations and responding to RFPs, ensuring alignment with customer needs and driving project success. Foster effective communication with clients, actively troubleshooting issues and providing personalized support, ensuring high client satisfaction and smooth operations. Streamline the role transport process by efficiently transporting composite and single roles using Charm, ensuring reliable and efficient role deployment across system landscapes. Drived efficient access control processes through GRC CUP Requests, enabling streamlined new user creation and access provisioning based on proper approvals. Verified rules against known cases and create new test cases to ensure accurate and comprehensive risk management in GRC. Implemented innovative methods to manage SOD (Segregation of Duties) risks, minimizing the number of mitigation controls and ensuring efficient and compliant access control. Seamlessly manage user administration tasks, including user creation, deletion, lock/unlock, and password resets, as well as mass user creation and password resets, ensuring streamlined and secure user management. Optimized role administration by performing role assignments, maintenance (including single, composite, and derived roles), modifications, and transaction management, enabling efficient and controlled access. Strategically manage Fiori user roles, provisioning and maintaining roles to optimize system access and ensure an intuitive user experience. Created Fiori front-end roles, back-end roles, and privileges, aligning system access with business requirements and enhancing user productivity. Leveraged our extensive expertise in Profile Generator (PFCG) to efficiently configure and manage role profiles, ensuring precise and controlled access to system resources. Streamline Fiori catalogs and troubleshoot Fiori tile apps, enhancing the usability and functionality of your Fiori environment. Conducted comprehensive analysis of trace files using ST01, tracking missing authorizations and resolving user access problems efficiently, ensuring optimized system access. Identified missing authorizations using SU53 and manually maintain them in PFCG, guaranteeing accurate and controlled access to system resources. Ensured compliance with Segregation of Duties (SOD) requirements by providing authorizations based on SOD matrix, ensuring a secure and compliant system environment. Reviewed SM20 logs in emergency access scenarios, ensuring proper control and monitoring of critical system activities. Effectively utilize security-related tables (AGR*, USR*, etc.) to streamline and optimize security configurations, guaranteeing comprehensive access control. Expertly handle system security setup following system refreshes, ensuring a secure and compliant system environment. Leveraged our expertise in authorizations for BI/CRM/HANA and Fiori systems, ensuring optimized system access and enhanced user experience. Client: IBM India PVT Ltd Dec 15 Oct 18 Location: Hyderabad, IN Role: SAP Security and GRC Lead Responsibilities: Efficiently created and maintained individual Users in Central User Administration (CUA) using SU01, ensuring streamlined user management and access control. Seamlessly perform mass and individual user creation, deletion, locking, unlocking, password changes, and role assignments, enhancing user productivity and security. Leveraged our expertise in Presales to provide valuable insights and guidance, ensuring optimal SAP solutions aligned with your business needs. Streamline role assignments based on positions through GRC using PO13D, enabling efficient and controlled access management. Taken leadership responsibilities as a team lead, supporting the development of team members and contributing to their growth under the guidance of line managers. Maintained Role Owners and Approvers for Roles in GRC, ensuring proper governance and accountability in access management. Performed comprehensive role-level and user-level simulations and risk analyses, mitigating potential risks and ensuring a secure and compliant system environment. Efficiently create, maintain, and modify Single, Derived, and Composite roles, tailoring system access to meet specific business requirements and optimizing user experience. Leveraged our extensive experience with the CHARM tool to facilitate seamless transport request (TR) creation and transport management between clients and systems. Resolved security-related issues by troubleshooting existing user roles, security objects, and authorizations across various SAP landscapes (ECC, Portal, GRC), ensuring a secure and reliable system environment. Streamline the role transport process for composite and single roles using CHARM, ensuring efficient and error-free role deployment across system landscapes. Developed, tested, and implemented SAP Security Roles, Profiles, and Authorizations for various landscapes using Profile Generator, aligning system access with business requirements and compliance standards. Created robust SAP technical roles based on business requirements, ensuring accurate and controlled access to system resources and enhancing overall system security. Generated comprehensive reports, including User lists, Role lists, and Profile lists, using tools like SUIM and SQVI, providing valuable insights for auditing and access control purposes. Analyzed end user authorization issues using error screenshots from SU53 or trace tools like ST01 and STAUTHTRACE, resolving issues promptly and ensuring optimized user access. Facilitated the deletion of roles in production systems through transports from development systems, ensuring proper control and compliance with change management processes. Maintained rule sets in GRC by adding custom transactions/actions to functions/risks and apply control IDs to unmitigated risks, following governance recommendations and approvals. Utilized SAP Security and audit logging tools such as SM20, SM19, and SECR to set up security audit parameters, define filter groups, and enable comprehensive logging of changes to user master records, profiles, and authorizations. Seamlessly upload roles in the portal and perform mass upload/download of roles in SAP systems, simplifying and accelerating role management processes. Efficiently monitor team mailboxes, ensuring prompt response to inquiries and requests, and maintaining smooth communication channels within the team. Client: IBM India Pvt Ltd Feb 13 Nov 15 Location: Hyderabad, IN Role: SAP Security consultant Responsibilities: Designed and modified Single, Composite, and Derived roles to precisely match your unique business requirements. Our role management expertise ensures efficient access control and compliance. Benefit from our daily support for SAP R/3, BW, and HR security. We handle ID requests, access requirements, and troubleshooting, while diligently defining and maintaining authorizations and roles to maintain a secure and optimized system. We adhere to Ericsson's SOX AUDIT COMPLIANCE GUIDELINES, providing Quality Assurance through meticulous analysis and resolution of user problems. Our team efficiently dispatches requests to the appropriate resolver groups, ensuring compliance and process integrity. Our services include mass creation and deletion of users using BDC upload, along with efficient handling of your team mailbox. We support Drop-related activities, enhancing user administration processes for smooth operations. Simplified the role request process by making roles orderable in Gordon, an Ericsson- specific tool designed to streamline SAP role requests. We optimize role provisioning and ensure seamless access management. Counted on us for all aspects of user maintenance, including creating new users, password resets, user lock/unlock, and setting validity dates. We ensure that user access aligns with your business needs and security requirements. We facilitated the addition and removal of transaction codes, authorizations, and authorization objects within existing roles, responding promptly to change requests. Stay agile and maintain up-to-date access controls. Our experts excel in maintaining authorization objects using SU24 and providing structural authorization through PD profiles in PO13. We efficiently assign roles to positions using transaction PO13 and execute RHPROFL0 as needed. Leveraged our deep knowledge of SAP HR Security, including position-based security, structural profiles, and organization structures. We specialize in PA, PD, Payroll, Time, ESS, and MSS Modules, ensuring a comprehensive approach to HR security. We utilized tools such as SU53 and ST01 to trace missing authorizations and recommend appropriate roles to end users. Our focus is on resolving authorization issues promptly, ensuring smooth and secure system access. We bring valuable insights to SAP Presales activities, providing guidance and mentoring to clients. Our expertise in delivering impressive project presentations, defining solutions for complex situations, and crafting compelling RFP responses adds significant value to your organization. We prioritized proactive and clear communication with clients, ensuring efficient troubleshooting and issue resolution. We actively engage with clients, delivering personalized support and fostering high client satisfaction. Our team has extensive experience working with security-related tables, including AGR_TCODES, AGR_USERS, AGR_DEFINE, and more. We also specialize in maintaining authorization object S_TABU_DIS and working with BI objects such as S_RS_COMP, S_RS_COMP1, and S_RS_AUTH. We possessed the knowledge and skills to create Analysis Authorizations through RSECADMIN, granting query-level access to reporting users while ensuring precise and controlled data access. Leveraging the SPM tool, we provide emergency access to functional, technical, and audit teams when needed, ensuring smooth operations and adherence to security protocols. Our experts proactively monitored Segregation of Duties (SOD) conflicts at both the user and role levels, minimizing risks and ensuring compliance with regulatory requirements. Rely on our proficiency in performing transports. Client: IBM India Pvt Ltd May 12 Jan 13 Project: TATAMOTORS Role: SAP Security Consultant Responsibilities: handled all aspects of user administration, from creation and deletion to ongoing administration and monitoring. With our expertise, you can ensure that user accounts are accurately maintained and aligned with your business requirements. Specialized in creating single roles and composite roles tailored to your specific needs. Our team maintains and generates authorization profiles, ensuring that access privileges are precisely defined and controlled. Having extensive experience in maintaining SOD compliance. By carefully aligning authorizations with SOD matrices and resolving conflicts at both the transaction and authorization object levels, we help you achieve a secure and compliant system. Leveraging tools such as SU53 and ST01 trace, we swiftly analyze authorization problems and errors. Our team implements effective solutions, ensuring that users have the appropriate authorizations to perform their tasks. Provided comprehensive authorization support across various areas, including R/3, HR, BW, Portal, BOBJ, and SRM. Whatever your SAP landscape, we have the expertise to optimize authorization controls. Our team leverages tools such as SUIM and SQVI to generate insightful reports, empowering you with valuable dimensional insights. Additionally, we seamlessly assign LDAP groups to users, enabling smooth portal link integration. Proficiency in tools like SU01 and SU10, we perform user administration tasks with precision and efficiency. From creating and changing accounts to maintaining and deleting them, we ensure your user accounts are accurately managed. Experts excel in analyzing trace files and identifying missed authorizations to resolve user access problems promptly. We insert missing authorizations manually, ensuring users have the necessary access to perform their tasks effectively. Leveraged SE01, SE10, and SE09 to efficiently manage mass transports. Our team ensures smooth and reliable transportation of roles, minimizing disruptions and maintaining system integrity. Prioritized meeting your contractual SLAs, providing timely ticket resolution with a strong focus on quality and peer review. Our goal is to deliver zero-defect solutions, ensuring smooth operations and maximum customer satisfaction. Role: Sr SAP Security Consultant Responsibilities: Successfully implemented Advanced Risk Assessment (ARA) and Enterprise Access Management (EAM) on the Iberian system following the merger of Coke Europe. Streamlined approval processes and log review processing using efficient workflows, ensuring smooth operations and compliance. Enhanced the Global rule set by updating custom rules, enabling comprehensive coverage and improved security. Conducted periodic report extractions and collaborated with Internal Auditors to review and address nearly 100k high/medium violations in the newly merged Iberian system, ensuring successful audit clearance. Leveraged Bizright's cutting-edge tools to significantly reduce violations and proactively updated rule sets to align with evolving compliance requirements. Collaborated closely with the IDM team to seamlessly migrate 25,000 users from the RBSR (Legacy System SRDB) to the SAP IDM system, ensuring minimal disruption and streamlined user management. Successfully completed xMII system upgrades for 18 plants, implementing LDAP connection between xMII systems and Active Directory (AD) to automate user setup and improve efficiency. Efficiently exported roles from the old xMII system and seamlessly imported them into the upgraded new xMII system, ensuring a smooth transition and consistent access controls. Verified and validated role assignments to users, ensuring a seamless transition from the old xMII system to the new system while maintaining continuity. Demonstrated strong leadership skills by spearheading multiple release projects (50+) across ECC, ECC(PM), BI, EWM, xMII, and APO systems, delivering successful outcomes and driving business growth. Collaborated closely with Subject Matter Experts (SMEs) to gather and analyze requirements, ensuring alignment with business objectives and delivering tailored solutions. Developed SAP role structures that comply with industry standards and adhere to the architecture of CCR (Corporate Compliance and Risk). Actively participated in comprehensive testing phases, including Cycle 1, 2, and 3, performing Test User Training (TUT), Functional User Testing (FUT), and User Acceptance Testing (UAT) to ensure robust system performance and reliability. Collaborated with test leads and SMEs to effectively identify and rectify defects using the HP-QC defect management system, ensuring high-quality deliverables and customer satisfaction. Role: SAP Security Consultant Responsibilities: Successfully upgraded the HR system from version 4.6 to the latest ERP 2005, meticulously analyzing the differences between the objects in both versions to ensure a smooth transition. Seamlessly upgraded roles from version 4.6 to ERP 2005, ensuring compatibility and optimal functionality within the new system. Utilized the powerful SUIM tool to compare and synchronize roles, ensuring consistency and accuracy across versions. Effectively maintained and modified authorization objects using SU24, facilitating seamless role transport to the Quality Assurance system. Additionally, created test users for integration testing and user acceptance testing (UAT). Upgraded the Portal from NWDI 6 to NWDI 7, leveraging SAP delivered roles to create custom Basis, Security, and Developer roles in the Portal landscape, ensuring a robust and tailored security framework. Set up comprehensive security permissions within the Portal landscape, including permissions for roles and groups associated with roles, enabling fine-grained access control and ensuring data integrity. Established stringent security permissions on security zones and Knowledge Management (KM) to safeguard sensitive information and control user access effectively. Successfully upgraded the IS-OIL module from version 4.6 to ECC 6.0, ensuring seamless integration and generating updated roles specific to the new version. Conducted a detailed analysis of the differences between the previous and current version objects, ensuring a comprehensive understanding of the system changes. Maintained dual maintenance of roles, effectively managing segregation of duties for users and roles using the SAP VIRSA/GRC Compliance Calibrator 4.0 tool. Maintained a robust role matrix (GLOBAL and MATRIX1), managed conflicting transactions, and addressed critical authorizations. Configured security settings and roles for IMOS, Right Angle, and VaR Center tools, ensuring secure access and compliance with industry regulations. Role: ERP Techno-Functional Consultant Responsibilities: Leveraged my expertise as a Business Warehouse (BW) functional expert to analyze business requirements and create customized characteristics and key figures info objects tailored to meet specific needs. Developed and implemented Info cubes, ODS (Operational Data Store), and queries aligned with business requirements, enabling comprehensive data analysis and reporting capabilities. Proficiently utilized the powerful BEx Analyzer tool to extract, analyze, and visualize data, empowering users to make informed decisions based on real-time insights. Streamlined data processing and automation by creating efficient Process chains, ensuring seamless data flows and optimized system performance. Monitored jobs and provided timely support to ensure smooth operations. Demonstrated strong commitment to customer satisfaction by proactively monitoring and resolving production support issues for the BW system, adhering to Service Level Agreements (SLAs) and minimizing business disruptions. EDUCATION Bachelor of Technology (B. Tech) in ELECTRONICS AND COMMUNICATION ENGINEERING BHIMAVARAM INSTITUTE OF ENGG & TECH, India, 2011. PROFESSIONAL TRAINING AND CERTIFCATION SAP-BASIS AND SECURITY training at IBM SAP-BI/BO, Oracle training at IBM. BCG and six sigma training at IBM Keywords: materials management business intelligence database sfour active directory rlang information technology business works hewlett packard Colorado Delaware Idaho Pennsylvania South Dakota