Mrigank Kumar Gaurav

• Led risk management practices for ~9 years across multiple global and Indian clients, benchmarking GRC procedures , operations, ensuring SOX, ISO and audit compliances.
• Orchestrated improvement and self-assessment of internal controls , implementing information security standards, identity access management (IAM), operational risk frameworks.
• Delivered strategic advisory and tailored insights to executives, CXO leadership and board-level stakeholders, ensuring clear communication of compliance risks, mitigation strategies, and program performance.
• Managed cross-functional distributed teams, providing mentoring to enhance performance and delivered training programs to increase risk awareness across organization.
• Developed 4 assets and enablers in SoD analysis and analytics across multiple projects, enhancing reporting efficiency and stakeholder confidence.
• Governed and refined access & change management processes and SOPs, executing user access reviews to enhance security and compliance.

JCB – SAP GRC Review and Enhancement & Role Redesign | Deloitte

· Conducted an SAP Security review, presenting a CFO-level report on 25+ high/critical risks, with financial impact (~$15K per observation).

· Led project by benchmarking the GRC SoD rulebook, implemented access workflows, EAM, BRM, UAR and integrating SuccessFactors for real-time access sync.

· Enhanced user access and SAP change methodology.

· Facilitated brownfield role redesign for 400 composite roles and built a repository of ~2,100 custom transactions (~200 sensitive).

BMI – SAP Security & GRC Support | Deloitte

· Provided SAP Security support across S/4HANA, Fiori, SAC, BW, MDG, BTP, IAS, and GRC, supported UAT for successful go-lives.

· Identified automation opportunities, optimized role design, and presented process improvement recommendations to CXO leadership.

HMSI – GRC Rulebook Standardization & Role Redesign POC | Deloitte

· Benchmarked SAP GRC rulebook against industry standards, refining risk criticality, sensitive access controls, and SOPs for periodic reviews.

· Built a repository of ~1,500 transaction codes (~190 sensitive) and demonstrated role design gaps through a POC, leading to a redesign proposal.

Mahindra & Mahindra – SAP GRC & Security Managed Services | EY

· Led SAP Security and GRC support, resolving 15–20 daily access issues, customizing rule sets, and enhancing SoD compliance across six BUs.

ITC – Greenfield SAP Role Design & SAP License Review | EY

· Assessed SAP licenses, user access, and custom transactions for six BUs, optimizing license allocation and compliance reporting.

· Designed SAP roles for eight business divisions, incorporating UAT feedback to resolve authorization issues.

Unilever – AC & PC Support | EY

· Developed business rules, automated process controls, and training materials for SAP GRC Access Control & Process Control.

Royal Enfield – SAP GRC AC & PC 10.1 Implementation | EY

· Implemented GRC AC having configured ARA, seven MSMP-BRF workflows, EAM with 25 FFIDs, BRM functionality, and performed risk analysis for 5,000 roles with 60+ mitigation controls.

· Led UAT, business blueprinting, and user training, serving as the primary contact post-Go-Live for issue resolution and escalations.

• Global Risk Management Institute (GRMI) - Risk Masterclass, Genpact, 2020
• Extra Miller Award, Genpact, 2019
• Spotlight Award, Ernst & Young, 2017
• Web developer training - PHP & MySQL, HP India Pvt Ltd, 2014
• Meritorious Child Scholarship, DTU, 2013

• Global Risk Management Institute (GRMI) – Risk Masterclass | Genpact, 2020
• Extra Miller Award , Genpact, 2019 | Spotlight Award , Ernst & Young, 2017
• Web developer training - PHP & MySQL | HP India Pvt Ltd | 2014
• Meritorious Child Scholarship (DTU) | State Bank of India | 2013

• Interests - Photography, technology enthusiast, travelling, music, movies, art, gaming, psychology, spirituality, etc.
• Udayan Care - Volunteer, CSR Genpact | 2019
• CRY - Child Rights - Volunteer, Delhi Technological University | 2014-15.
• IEEE - Institute of Electrical and Electronics Engineers - Member -Delhi Technological University | 2012