SAP GRC AC
Saransh Adepu
Senior Consultant
Bangalore
Summary
- 8 years of IT Consulting experience in SAP GRC AC|Security|S4 Hana |FIORI Security mainly into various (Greenfield & Brownfield) Implementations, SOD and Support Projects.
- Working as Senior Consultant in Big 4 “Ernst and Young” Risk and Business Consulting Team, to Roll out SAP solutions across multiple geographies by understanding business processes, Identification of gaps & recommending improvements in existing Processes and provide solutions both Technically as well as Functionally.
- Possess great analytical skills; an excellent team player with problem-solving attitude, mentoring skills, also worked in Project Management, Client Management and Business Handling.
- Experience includes Authorization Issues troubleshooting, user administration, Role Administration, Movement of changes using SOLMON (CHARM).
- Actively involved in imparting Control Testing Process Related Trainings and understanding of expected level of documentation for ITGC Controls related to Logical Access, Change Management and Operation Controls.
- SOX controls testing, good understanding on SOX Control Framework, In depth knowledge in TOD's, TOE's Control Testing for ITGC, SOX and ITAC for SAP Systems.
- Trained on SAP BTP Security and GRC PC
Overview
9
9
years of professional experience
4
4
years of post-secondary education
3
3
Languages
Work History
Senior Consultant
EY
Bangalore
04.2020 - Current
- Team member for carrying out Role design activities for Client.
- Implemented multiple full-cycle GRC Solution (Greenfield & Brownfield) GRC Access Control 10.1 & 12.0.
- Trained on SAP BTP security, GRC PC.
- RFP (Request for proposal) preparation on SAP GRC AC.
- Worked on ITGC and MICS Control testing.
- Assessed SAP Role design and SAP GRC Access Control framework for multiple clients and suggested summary of findings, recommendations and detailed report.
- Supported Client on FIORI Security.
- Worked on GRC Support Activities.
- Trained Internal team members on GRC 12.0 implementation.
- Configuring access request forms and maintaining MSMP workflows.
- Creating BRF+ rules and updating decision table values.
- Creating ARM requests and Troubleshooting Escape path requests BRM: Importing roles to GRC and maintaining role approvers FIORI: Creating custom catalogs, groups and roles Troubleshooting authorization issues.
- Identified business issues through careful collaboration with key stakeholders
- Prioritized projects and project tasks depending upon key milestones and deadline dates
- Analyzed problematic areas to provide recommendations and solutions
GRC Consultant
Capgemini
Bangalore
11.2018 - 03.2020
- Worked on Roll out and Upgrade projects.
- Helped Business with GRC Solution by implementing GRC Access Control 10.1
- Solving Authorization issues for user.
- Worked on HANA Security Administration.
- Communicated with onsite SFL's in cleaning up roles which are having SOD conflict.
- Knowledge of ARA for risk analysis and generating reports.
- Supported BI/BW Authorization issues.
- Performing user administration tasks like creation of new account, changing account through GRC ARM.
- Day to day technical support and resolution of Security issues.
- Analyzing missing authorizations based on screen shot sent by user.
- Troubleshoot security/authorization related problems using SU53, ST01 and SUIM.
- Addition, Removal of Transaction Codes, authorizations, authorization objects by modifying existing roles based upon change request.
- Restriction of Org and Non-org authorization values in Master and Derived roles.
- Resolved critical authorization issues.
- User maintenance like single user creation, lock/unlock as per business requirement.
- Worked on Internal Audit Reports.
Associate
Cognizant Technology Solutions
Hyderabad
04.2014 - 10.2018
- Implemented and Supported SAP Security aspects for ECC,GRC 10.1 GRC Access control.
- Had Troubleshoot and resolved SAP Security and GRC issues.
- Automated EAM access request by integrating SAP GRC with ServiceNow.
- Handled user's requests for various system Incident and Change management using Snow and SOLMAN.
- Involved in Internal and external control audits.
- Worked with profile generator (PFCG) in creating roles, profiles, composite roles & derived roles.
- Assigning Roles to Users and Performing User Comparison as business requirement.
Education
Bachelor of Technology (B. Tech) - Electrical and Electronics Engineering
PRRM Engineering, Jawaharlal Technological University, JNTUH
Hyderabad 09.2008 - 07.2012
Skills
SAP GRC AC
ITGC Testing
FIORI Security
ECC Security
HANA DB Security
Project Management
SOX Testing
Project Documentation
Teamwork mindset
Additional Information
- GRC AC 10.1 & 12.0 Experience: Maintaining EAM Parameters and ensuring that it is FF ID based. Mapped Owners, Firefighters and Controllers using NWBC. Configuring the AC Owners, Role Owners in Assignment Approver, Role Concept Approver Mitigating approver and monitor etc. Maintaining Rule Set, Function ID & Risk ID with Risk Owners and generating rules Created Mitigation Approvers & Monitors and created mitigating IDs Configured number ranges and activated them for access request and mitigating requests. Generated MSMP Rule for Process, defined Business Rule Framework through BRF+, Mapped BRF+ application with MSMP workflow and defined request types for Process IDs Configuration of EAM and building the Reason Codes. Running the risk analysis on Role Level & User level. Importing of roles into BRM. Troubleshooting ARM Requests and assisting end users while initiating the requests. Maintaining Mitigation Controllers and Approvers across Organization. REWARDS/ ACHIEVEMENTS Received "Service Delivery Prodigy" Award for the Best Service. Received "ICON OF THE MONTH" Award from the Client for the Best Service
Accomplishments
1. Received "Service Delivery Prodigy" Award for the Best Service.
2. Received "ICON OF THE MONTH" Award from the Client for the Best Service.
3. Received "I AM EXCEPTIONAL" Award.
4. Delivered high end IT Audit results.
Software
SAP ECC
SAP S/4 HANA Security
Project Management
CFIN and MDG Security
HANA Security
Timeline
Senior Consultant
EY
04.2020 - Current
GRC Consultant
Capgemini
11.2018 - 03.2020
Associate
Cognizant Technology Solutions
04.2014 - 10.2018
Bachelor of Technology (B. Tech) - Electrical and Electronics Engineering
PRRM Engineering, Jawaharlal Technological University, JNTUH
09.2008 - 07.2012