Amit Singh

Project 1– Altera (US)

Key Activities:

Conducted comprehensive analysis and design of security roles to strengthen application protection.

• Facilitated workshops with business users and internal audit team to define security design requirements and establish segregation of duty policies.
• Performed gap analysis on existing security controls, identifying areas for enhancement.
• Developed custom and duty roles based on requirements from workstream workshops.
• Collaborated on privilege licensing management efforts to ensure regulatory compliance.
• Executed role mapping and user creation via HDL files, assigning appropriate data access.
• Implemented automated access controls to detect SOD conflicts and sensitive access issues.
• Led intra-role and inter-role SOD conflict elimination pre-go-live, minimizing redesign costs post-launch.

Project 2– Johnson Controls International (US)

Key Activities:

• Conducted workshops with business users and the internal audit team to gather application security design requirements and establish Segregation of Duty (SOD), Sensitive Access (SA) policies, and automated controls.
• Studied, analyzed, designed, and implemented Security roles.
• Conducted gap analysis to identify weaknesses in existing security policies and controls, facilitating targeted improvements.
• Build various custom roles, and duty roles based on the requirements gathered from various workstreams workshops.
• Performed report/folder security for OTBI and BI reports.
• Supported privilege licensing management, ensuring compliance with security protocols and efficient resource allocation.
• Performed Role mapping and user creation through HDL files and assigned data access to the users.
• Implemented AAC to detect the fusion roles with SoD conflicts and Sensitive Access.
• Intra-role and inter-role SoD conflict elimination before go live using AAC models to reduce the redesign costs, post-go-live.
• Implemented the AFC controls to monitor the application transactions and audit controls to detect the changes in master data/configurations.
• Deployed seeded and custom AFC and AAC controls of Risk Management Cloud.
• Configure entitlements, models, and access controls to establish SoD and Sensitive Access data.
• Developed custom AFC models based on available Business Objects and deployed the control.
• Developed security design for AAC and AFC Models/Controls.
• Migrated Security, AAC, and AFC models from Dev to UAT to Prod.
• Enabled various audit policies for various business functions.
• Managed incidents and coordinated testing with business users.
• Collaborated with internal and external auditors to evaluate control breakdowns, contributing to enhancements in internal control processes.
• Assisted management in creating/updating process documentation over internal controls.
• Developed test scenarios, and scripts and conducted UAT (User Acceptance Testing).
• Coordination with multiple work streams and ensure timely completion of configuration tasks and ensure timely delivery for each phase of CRP, Testing, and UAT.

Project 3: Baker Hughes (US)

Key Activities:

Prepared the design document for security implementation in finance.

• Reviewed and implemented custom role designs to address client needs in finance and procurement.
• Demonstrated expertise in implementing security measures and conducting workflow testing.
• Assigned data access sets and business units to users through the ADFI loader.
• Migrated roles, responsibilities, users, profile options, and responsibility hierarchies across different environments.
• Identified and analyzed information sources to develop solutions aligned with business requirements.
• Conducted end-user training and guided the client throughout the UAT phase.
• Coordinated with Oracle support to resolve service requests, enhancing client satisfaction.
• Actively involved and assisted the team in Requirement Walkthrough & Discussions to align them to Oracle Cloud/Fusion application functionality.

Projects 4 : Bharti Airtel LTD . Key Activities:

Conducted internal audit and ITGC audit for Airtel India and Airtel Africa, evaluating compliance and risk management.

• Handled GRC controls (AACG, CCG, TCG, PCG) ensuring timely review and resolution of incidents.
• Successfully performed internal control testing procedures and documentation, including test of controls design via walkthrough.
• Conducted process reviews, including Payment Process Review, identifying gaps to enhance control effectiveness.
• Conducted audit on “Duplicate Invoices and Payments” across Bharti Airtel Mobility process.
• Conduct analysis of the business processes to identify the suspicious areas where internal controls need to be strengthened.
• Developed various logics using Oracle GRC tool.
• Carried out the project on “Internal Process Review" along with Deloitte and KPMG.