Technically proficient SAP GRC Access Control and Authorization professional with around 13 years of IT industry experience in design, implementation/ Configuration of Cloud Applications (BTP), GRC Access Control and Process Control, SAP S4 HANA, SAP IAG and authorizations as per business process to meet SOX compliance requirements.
Access management for SAP Business Technology Platform (BTP) Applications using SAP IAS (Identity Authentication Service) and IPS (Identity Provisioning Service), SAP Cloud Identity Access Governance (IAG).
GRC RFP Solution Designing & participate in Customer Orals Experienced in implementation, upgrade, rollouts, application support and enhancement.
SAP S/4 HANA authorizations Greenfield implementation for embedded Deployment.
SAP Fiori authorizations and UI configurations with Space & Pages.
Expertise in Implementation and Support of GRC Access Control Solutions based on client's requirements involving releases 10.0, 10.1 and 12.0, which include Access Request Management (ARM), Emergency Access Management (EAM), Access Risk Analysis (ARA) and Business Role Management (BRM).
Diligent in all phases of project lifecycle like Requirement Gathering,
Designing, Building, testing (UT, FT and UAT), deployment and post-Go Live support.
Eloquent communicator with excellent interpersonal skills: ability to work with people at different levels.
Overview
13
13
years of professional experience
1
1
Certification
Work History
SAP GRC and Security Architect
Capgemini Austria
05.2023 - Current
Lead SAP GRC 12 service pack upgrade project from the technical side and was majorly involved in the coordination between SAP Basis and SAP GRC Functional team to deliver the project successfully
Responsible for preparing the status report and updating the stakeholders every week
As an SME, I was involved in preparing SAP S4 HANA Upgrade Impact analysis and assessment and scheduling workshops with the business owners highlighting the impact on roles for obsolete/deprecated transactions, webdynpro applications,Fiori applications and CDS Views
SAP UAR workflow configuration
Responsible for SU24 process optimization for better role harmonization
SAP GRC and Cloud Security Architect
Capgemini India
08.2018 - 05.2023
Designed Authorization concept for BTP application provisioning through GRC
Integration of SAP Entitlement Management system, Custom BTP Application with GRC for provisioning and authentication via IAS and IPS
Integrated S4 Hana with SAP GRC through IAG as a bridge
Designing authorization approach for S/4 HANA system landscape
Fiori authorization roles. Fiori Spaces and Page concepts.
Streamlined the COE team's processes by setting up IAG as an independent system for provisioning and risk analysis of on-premise S4 Hana.
SAP GRC and Security Consultant
Infosys India
India,Germany
08.2016 - 08.2018
Integrated NON SAP systems (Oracle and iScala) with GRC 10.1 and configured ARA module with the help of greenlight adapters.
Implemented Access risk analysis, Access Request management, Business Role management, and Emergency Access Management for ECC and BW systems.
Post-installation of Process control and configuration of initial workflow
Actively involved in the maintenance of Master data for GRC Process Control
Implemented Process control workflow for Test of effectiveness and Sign off.
Actively involved in the implementation of Automated controls for Access Control monitoring.
Redesigning of SAP Business roles
SAP GRC Access Control Consulting
Capgemini India
India,Germany
07.2014 - 08.2016
Instrumental in the risk rule set migration from Approva BizRights to GRC 10.1 and implementation of Cross system risk
Configuration and enhancement of workflows for Access request Management, Business Role Management and Emergency Access Management
Responsible for the Organization Map creation and harmonization
Implementation of mitigation controls for users as per business need
Actively involved in preparing test cases, designing training strategy and training for end users
SAP GRC and Security Consultant
Tata Consultancy Services
India,Australia
03.2011 - 06.2014
Implementation of SAP security for new Go live and support
Creating Business Process Mapping document by understanding clients Business Processes
Creation of derived roles (master child roles) and Composite Roles
Implementation of position-based security
Creation of Custom auth Objects and maintaining the SU24 details for same
User mapping for Go live and support
Provide assistance to key users as well as end-users
Education
Bachelors of Engineering in Electronics & Telecommunication Technology -
SENIOR NPI ENGINEER at AT&S Austria Technologie & Systemtechnik (Malaysia) Sdn BhdSENIOR NPI ENGINEER at AT&S Austria Technologie & Systemtechnik (Malaysia) Sdn Bhd
LOGAN DASS A/L MOHANA DASSLOGAN DASS A/L MOHANA DASS
Associate Engineer II at AT&S (Advanced Technologies & Solutions) Austria Technologie & Systemtechnik (Malaysia) Sdn BhdAssociate Engineer II at AT&S (Advanced Technologies & Solutions) Austria Technologie & Systemtechnik (Malaysia) Sdn Bhd