Prasanna T
Hyderabad
Summary
Seasoned SAP S4 HANA and GRC Consultant with broad 9 years of experience in managing governance, risk and compliance projects. Strengths include problem-solving abilities, strategic planning skills, and strong knowledge of regulatory requirements and standards. Successfully implemented practical solutions to complex GRC issues while ensuring compliance with industry regulations. Strive to deliver effective results that impact the bottom line positively.
Overview
14
14
years of professional experience
Work History
SAP Security and GRC consultant
Capgemini Technology services India ltd
03.2023 - Current
- Designed and maintained SAP security roles with proper authorizations, as per business process.
- Debugging the user authorization problems using SU53 and ST01 trace.
- Good working knowledge of AGR tables.
- Assigning missing authorizations as per the user's requirement.
- Good experience in creating and maintaining single, composite, and derived roles using the profile generator (PFCG).
- Managing transport with PFCG, SE09, and SE10.
- I worked in access risk analysis.
- Performing SOD risk simulation, risk analysis at the user level, and role level.
- I performed the mapping of mitigation controls to the risks of the respective users in ARA.
- Running risk analysis at the user level and role level.
SAP Security and GRC consultant
Prudent global tech solutions pvt Ltd
07.2019 - 01.2023
- Performing user administration, such as creating, changing, maintaining, and deleting user accounts.
- Performing role administration, such as creating new roles and transporting roles.
- Good experience in creating and maintaining single, composite, and derived roles using the profile generator (PFCG).
- Creating user groups using the SUGR T-code, and assigning users to groups.
- Worked on authorizations (Standard, Maintaining, Changed, and Manually).
- Authorization checks using transaction SU24, maintained check indicators for transaction codes.
- Performing user comparison, and complete comparison for roles to update user master records. Creating authorization groups, and securing tables.
- Authorization checks using transaction SU24, maintained check indicators for transaction codes.
- Extensively used tables like USOBT_C, USOBX_C, AGR_USERS, AGR_TCODES, AGR_DEFINE, AGR_1251, AGR_1252, USH*, and USR* are performing transport management throughout the landscape using SE10 and SE01.
- Trouble shoots security problems by using different scenarios, such as system trace (ST01), SU53, and SU56.
- Provided 24/7 on-call support to end users.
Associate consultant
Real page India private Ltd
05.2015 - 11.2015
- Worked with ECC and BI landscape.
- Worked on the template and derived roles.
- Composite roles assignment and creation.
- Troubleshooting with ECC issues referring to SU53, STAUTHTRACE.
- Worked with BI reporting.
Process Associate for IT Internal SOX Audit
Capgemini Business Services (India) Ltd
07.2011 - 05.2014
- Sox Compliance Access Review for SAP Systems, Identity and Access Management.
- Documenting SOP on the Review process.
- Worked on Sox Quarterly access reviews for High privilege access for SAP Applications.
- Attending meetings with External Auditor and responding to their queries.
- Worked on Rule set validation and Mitigation control matrix and Extraction from GRC.
- Worked on Risk analysis validation and Toxic combination Basis Vs Security validation.
- Worked on Lookback analysis and SM20 Logs validation.
- Performing Access Reviews on Critical Applications.
- Analyzing NPA and shared accounts and validating the shared account users are appropriate having access to the accounts.
- Getting Application Owner’s Attestation on the Roles and Role Reviewers for Quarterly High Privileged Access Roles in Application.
- Performing Lookback analysis on the defects/ deficiencies identified in Audit.
- Working on Automation on all the Critical applications through IAM Solutions.
- Worked on UAR All role review.
- Coordinate and track Access-related remediation activities through to completion within published timelines.
Education
Master of Business Administration -
JNTU
Hyderabad, TelanganaSkills
- SAP - ECC, S/4 HANA, Fiori, GRC
- SOX, ITGC, Internal IT Audit
- ServiceNow
Technical Skills
SAP ECC6.0, EHP, S/4 HANA, Fiori, GRC including modules GRC12.0, ServiceNow
Timeline
SAP Security and GRC consultant
Capgemini Technology services India ltd
03.2023 - Current
SAP Security and GRC consultant
Prudent global tech solutions pvt Ltd
07.2019 - 01.2023
Associate consultant
Real page India private Ltd
05.2015 - 11.2015
Process Associate for IT Internal SOX Audit
Capgemini Business Services (India) Ltd
07.2011 - 05.2014
Master of Business Administration -
JNTU