Ramanjul Reddy
SAP Consultant
Bengaluru
Summary
Dynamic SAP security professional with over 13 years of experience in developing, implementing, and maintaining robust application security solutions across various modules, including ECC, BOBJ, and S/4HANA. Expertise in managing Segregation of Duties (SoD) conflicts and Elevated Access Management (EAM) using Path-Lock, while designing comprehensive security architectures that ensure compliance and optimize performance. Proven ability to develop and maintain Fiori roles and access configurations, along with a strong foundation in SAP GRC Access Control modules and Identity and Access Management solutions. Recognized for delivering end-to-end security solutions that enhance system integrity and compliance across diverse client landscapes.
Overview
15
15
years of professional experience
3
3
Certifications
Work History
SAP GRC Developer
Cosmic IT Services Pvt. Ltd
07.2025 - Current
- Designed and developed security roles across multiple SAP systems; defined security policies and managed Segregation of Duties (SoD) conflicts using Path-Lock.
- Performed SAP security tasks including audits, SOX compliance, user/role maintenance with PFCG, version upgrades, and production support.
- Led role development, design, merging, and cleanup activities in collaboration with business process owners and auditors.
- Extensively worked on SAP business process security strategy, SoD management, access risk analysis, and elevated access management.
- Implemented SLA standards for handling security incidents and change requests (RFC).
- Created and maintained SAP Fiori roles, catalogs, groups, and spaces; ensured proper access in Fiori Launchpad.
- Developed and supported analytical, transactional, and fact sheet Fiori apps; resolved O Data service and authorization issues using /IWFND/ERROR_LOG.
- Collaborated with business users to identify and resolve Fiori-related access issues in S/4HANA.
- Supported migration projects including creation of MIG users and troubleshooting for core HANA systems.
- Developed new roles in MDM, S/4HANA Core, and satellite systems.
- Provided end-to-end support during implementation, go-live, and hyper-care phases.
Sr. SAP GRC Consultant
SFT NextGenerace Consulting Private Ltd
06.2024 - 02.2025
- Implemented SAP GRC configurations, including mitigation controls, custom rule sets, and role simulations.
- Provided hyper-care support for GRC 10.0 production systems.
- Conducted quarterly SoD risk analysis and cleanup activities to ensure compliance.
- Managed and customized rule sets in multiple production clients; utilized both global and company-specific rule sets.
- Configured and maintained Emergency Access Management (EAM) master data, including approvers, controllers, and firefighter user IDs.
- Created and assigned Firefighter IDs, along with owners and controllers for elevated access management.
- Worked on GRC synchronization jobs: repository, authorization, action, and firefighter log.
- Performed user administration by creating IDs (owners/monitors), roles, and authorization profiles.
- Managed user provisioning and role assignments through CMC (Central Management Console).
- Defined row-level security using data security profiles and object security.
- Managed user authorizations and roles via PFCG, ensuring compliance and optimized access.
- Performed SoD risk analysis with GRC AC RAR, identifying and mitigating violations at user, role, and critical action levels.
- Conducted quarterly risk reviews, cleanup, and role maintenance to ensure compliance and minimize audit findings.
Sr. SAP GRC Consultant
Play Ideas
07.2022 - 05.2024
- Managed production password controls and validated project documentation for compliance.
- Monitored SAP systems daily and performed regular health checks.
- Conducted role cleanup activities in collaboration with business process owners and internal auditors.
- Performed user and role administration, generated security reports, and conducted access analysis.
- Designed, created, and managed roles across ECC, HANA, Fiori, S/4HANA, and Solution Manager systems.
- Resolved missing authorization issues using SU53, ST01, and STAUTHTRACE.
- Generated EWA reports in Solution Manager 7.2; implemented SAP Notes and hotfixes based on findings.
- Managed user authorizations and roles via PFCG, ensuring compliance and optimized access.
- Performed SoD risk analysis with GRC AC RAR, identifying and mitigating violations at user, role, and critical action levels.
- Conducted quarterly risk reviews, cleanup, and role maintenance to ensure compliance and minimize audit findings.
Sr. SAP Consultant
HCL Pte Ltd (Singapore)
02.2022 - 06.2022
- Managed user authorizations and roles via PFCG, ensuring compliance and optimized access.
- Performed SoD risk analysis with GRC AC RAR, identifying and mitigating violations at user, role, and critical action levels.
- Conducted quarterly risk reviews, cleanup, and role maintenance to ensure compliance and minimize audit findings.
- Configured SAP GRC AC 10.1/12 modules, including ARA, EAM, ARM; created and mapped mitigation control IDs and risk IDs to users and roles.
- Generated SoD analytical reports (summary and detail) for users, groups, roles, and profiles using RAR.
- Simulated access changes in RAR to identify potential risks before role/user assignments.
- Assigned and managed Firefighter IDs using SPM based on approval workflows.
- Analyzed authorization assignments and collaborated with functional teams to refine roles to granular authorization object levels.
- Worked with customers to define risk mitigation strategies and implement necessary monitoring controls.
- Produced weekly audit reports for user lock status and change documents.
- Extensive hands-on experience with SAP roles and authorizations in both end-user support and project environments.
SAP Security and Basis Consultant
Optimum Solutions Pte Ltd (Singapore)
12.2019 - 01.2022
- Analyzed role change requirements and prepared detailed specifications for security design.
- Developed Fiori business roles and created custom tile catalogs/groups to support business functions.
- Activated and configured Fiori services using /IWFND/MAINT_SERVICE.
- Managed production password controls and validated project documentation for compliance.
- Monitored SAP systems daily and performed regular health checks.
- Conducted role cleanup activities in collaboration with business process owners and internal auditors.
- Performed user and role administration, generated security reports, and conducted access analysis.
- Designed, created, and managed roles across ECC, BW, Fiori, S/4HANA, and Solution Manager systems.
- Resolved missing authorization issues using SU53, ST01, and STAUTHTRACE.
- Generated EWA reports in Solution Manager 7.2; implemented SAP Notes and hotfixes based on findings.
- Analyzed and resolved system dumps, user lockouts, and critical authorization issues.
- Configured RFC connections and scheduled background jobs.
- Handled user password resets and performed security parameter updates in production environments.
SAP GRC and Security Consultant
Manpower Staffing Services Pte Ltd (Singapore)
10.2016 - 10.2018
- Implemented SAP GRC configurations, including mitigation controls, custom rule sets, and role simulations.
- Provided hyper-care support for GRC 10.0 production systems.
- Conducted quarterly SoD risk analysis and cleanup activities to ensure compliance.
- Managed and customized rule sets in multiple production clients; utilized both global and company-specific rule sets.
- Configured and maintained Emergency Access Management (EAM) master data, including approvers, controllers, and firefighter user IDs.
- Created and assigned Firefighter IDs, along with owners and controllers for elevated access management.
- Worked on GRC synchronization jobs: repository, authorization, action, and firefighter log.
- Performed user administration by creating IDs (owners/monitors), roles, and authorization profiles.
- Managed user provisioning and role assignments through CMC (Central Management Console).
- Defined row-level security using data security profiles and object security.
- User Management & Role Administration: Managed user accounts, roles, and privileges; created and modified roles for developers and end-users in BW/BO, ECC, and Solution Manager systems.
- BOBJ Security: Developed access levels and universes, configured folder groups, and assigned appropriate access to end-user and power-user groups.
- Troubleshoot and resolved authorization and access issues for reports, and users.
- Utilized transaction SU24 to maintain check indicators for transaction codes and enhance role accuracy.
SAP GRC Security Consultant
Optimum Solutions Pte Ltd (Singapore)
03.2013 - 09.2016
- Role Building: Designed and implemented roles across multiple SAP modules, ensuring secure and restricted access aligned with business requirements.
- Mass User Management: Automated user creation, deletion, and role assignments using SHDB and LSMW scripts.
- System Monitoring: Conducted daily health checks for ECC, BW, and other SAP systems, ensuring stability, security, and compliance.
- User Master Record Maintenance: Managed user master records, profiles, authorizations, and role testing/implementation.
- Authorization Troubleshooting: Resolved missing authorization issues using SU53, ST01, and other trace tools for seamless business operations.
- System Operations: Configured RFC connections, created background jobs, and performed transports across development, quality, and production environments.
- Password & Compliance Management: Administered annual password resets for system, service, and batch job user IDs across landscapes.
SAP Security Consultant
Accenture Services Pvt Ltd (India)
01.2011 - 02.2013
- SAP Security Consultant – Client Engagements (HENKEL SAM, SANOFI, SAP LABS)
- Supported multiple global clients in SAP security and authorization management.
- Created and maintained user roles with PFCG; resolved authorization issues for end-users and project teams.
- Performed mass user creation and updates using SECATT scripts.
- Conducted daily system health checks and monitored security logs to ensure compliance and system stability.
Education
M.Sc- Master of Science -
Sri Venkateswara University
Skills
SAP Tools: PFCG, SU01, SU10, SU24/25, SUIM, STMS, GRC 101/12, Solution Manager 72
Non SAP Tools: Path-lock, IdentityNow (IDnow) and Service Now
Reporting: SOD Analytical Reports and EWA reports
Development Tools: LSMW, SECATT, SHDB
Collaboration Tools: JIRA, Confluence, ITSMService Now
Operating Systems: Windows, Linux
Accomplishments
- Designed and implemented custom SAP GRC rule sets to strengthen compliance and risk management.
- Enhanced SAP security processes by automating mass user creation and role maintenance with SHDB and LSMW.
- Ensured seamless authorization and role integration for Fiori apps in S/4HANA environments, improving end-user experience.
- Improved efficiency by automating mass user creation and role maintenance using SHDB and LSMW, reducing manual effort and errors.
- Ensured seamless authorization and access integration for Fiori apps in S/4HANA environments, enabling smooth end-user operations.
Certification
SAP BTP for Beginners – 2025
Timeline
SAP GRC Developer
Cosmic IT Services Pvt. Ltd
07.2025 - Current
Sr. SAP GRC Consultant
SFT NextGenerace Consulting Private Ltd
06.2024 - 02.2025
Sr. SAP GRC Consultant
Play Ideas
07.2022 - 05.2024
Sr. SAP Consultant
HCL Pte Ltd (Singapore)
02.2022 - 06.2022
SAP Security and Basis Consultant
Optimum Solutions Pte Ltd (Singapore)
12.2019 - 01.2022
SAP GRC and Security Consultant
Manpower Staffing Services Pte Ltd (Singapore)
10.2016 - 10.2018
SAP GRC Security Consultant
Optimum Solutions Pte Ltd (Singapore)
03.2013 - 09.2016
SAP Security Consultant
Accenture Services Pvt Ltd (India)
01.2011 - 02.2013
M.Sc- Master of Science -
Sri Venkateswara University