SAP Security/GRC Consultant

12/2015 – 12/2017

SAP Security Consultant (50%BAU/50% Project)
• SAP ECC BAU Support and analysis Fi, Co, MM, SD, PM (Role design, Role build, testing, go live, provisioning and support)
• SAP ECC PM implementation project
• ERP Audit clean-up project and User access review
• Assisted business in creation of risk and controls framework and process
• BAU User access management process design/strategy
• SOD Rule set build, risk and controllers documentation/logs
• LSMW/SECATT configuration used for mass change scripts: derived role creation/change and test user changes
• Role design, creation of roles, transport management and testing, SOD approach within design and access management

SAP ECC, SAP CO, SAP MM, SAP PM

2/2013 – 5/2016

SAP GRC/Authorization Consultant
Duties:
• Solution Manager; Run SAP Like a Factory(GRC/Auth Lead)Role Design, Authorization Build, Change management/Testing, Post go-live support
• SAP FI SP ECC Upgrade: Role and SU24/SU25 updates
• Solution Manager 7.1 Upgrade Project (GRC/Auth Lead):
Project planning, role design, role build, GRC setup for User/access provisioning, EAM, Password self service. This project was for both ITSM and Transport management.
• Water Dragon Project (Role redesign to facilitate segregation of companies):
Role design, segregate business units authorizations, GRC set-up of Roles (single and Business roles) and functional areas/approval process
• GRC 10 Project: Assisted with role implementation, connector, RFC, functional area/approval work flow set up
• Pre GRC role clean-up/re-design in prep for GRC 4 Tier access approach for technical support areas
• Ad-hoc end user support on ECC, BI, Bank Analyzer, SRM, GRC, Solution Manager (GRC Support, Roles/Authorizations as well as CUA)
• SU24 Updates

SAP ECC, SAP BI, SAP GRC, SAP Solution Manager, PRINCE2

12/2009 – 12/2011

SAP Security Analyst
Duties:
• Restructure project (RISE: Prince2 Project): Role design, implementation for Job/composite roles, built according to SOX/SOD
• Re-designed Bizrights/Approval/Socratese risk/business process rule books
• General end user support R3, BW, CRM (SLA Driven)
• Risk remediation/Mitigation

SAP CRM, SAP R/3