Jerry Edeh

Accomplished SAP Security and GRC Consultant with more than 8 years of experience overseeing enterprise-level access control, governance, and compliance across complex SAP landscapes. Skilled in designing, implementing, and optimizing SAP security architectures across S/4HANA, ECC, and Fiori systems. Strong expertise in authorization concepts, segregation of duties (SoD), and adherence to compliance frameworks such as SOX and ISO 27001.

Highly proficient in SAP tools and modules such as PFCG, SU01, SUIM, STAUTHTRACE, and GRC (ARA, ARM, BRM, EAM, UAR). Demonstrated success in automating access provisioning, executing audit reviews, and managing hybrid integrations with BTP, SuccessFactors, SAC, and Ariba. Known for enhancing security posture, ensuring audit readiness, and fostering collaboration across IT, business, and compliance teams.

SAP Security & GRC Consultant - UFA Petroleum

(2024-03 - 2026-04)

Worked on IAM advancement initiatives focused on strengthening SAP access controls, optimizing role design, and improving compliance across SAP landscapes (ECC / S/4HANA).

• Led SAP role scoping and design to align with business requirements while ensuring Segregation of Duties (SoD) compliance
• Performed end-to-end role rationalization, eliminating redundant and excessive access across user roles
• Maintained and enhanced authorization proposals using SU24 to reduce manual authorization assignments during role creation
• Designed and implemented roles using SAP PFCG, ensuring proper authorization object integration
• Executed security development tasks, including role creation, modification, and testing across multiple SAP modules
• Managed transport of roles and security configurations across landscape (DEV → QA → PROD) ensuring proper change control and audit readiness
• Collaborated with functional teams to translate business requirements into secure SAP role designs
• Supported IAM initiatives by ensuring least privilege access and adherence to internal security policies
• Conducted troubleshooting authorization using SU53 and STAUTHTRACE to resolve access issues efficiently
• Assisted in audit readiness by maintaining proper documentation of role changes and security configurations
• Administered SAP user accounts via SU01, managing account creation, role assignment, and password lifecycle to maintain compliance with enterprise security policies
• Configured and tailored roles in PFCG by defining authorization objects, menu paths, and field restrictions aligned with business operations
• Performed authorization validation using SU53, STAUTHTRACE, and SUIM to identify and remediate access discrepancies
• Implemented and maintained RBAC structures by developing single, composite, and derived roles across key SAP modules (FI, MM, HCM, BW)
• Optimized user provisioning and deprovisioning through integration of GRC ARM workflows with SU01, achieving transparent and auditable access management
• Developed and implemented SAP roles for system enhancements ensuring adherence to corporate security policies
• Collaborated with cross-functional teams to refine authorization concepts and ensure system stability
• Administered SAP GRC rulesets and updated SoD configurations to maintain accurate risk analysis and compliance alignment
• Facilitated internal security audits, identifying risks and implementing corrective measures
• Led migration of ECC roles to S/4HANA and implemented SAP Cloud Security for SAC, Ariba, IAS, and IAG
• Reviewed and approved transport requests for production through Solution Manager to ensure secure deployment
• Supported multiple project implementations by executing security testing, preparing documentation, and participating in cutover activities to ensure smooth and secure go-lives

SAP Security & GRC Analyst - ConocoPhillips

(2020-11 - 2024-02)

• Handled SAP user administration through SU01, managing user setup, role assignments, and authorization updates for compliance assurance
• Created and optimized roles using PFCG, designing single, derived, and composite roles aligned with process and functional needs (FI, MM, HCM, BW)
• Oversaw provisioning and SoD validation through GRC integration to meet audit and governance requirements
• Executed access diagnostics and troubleshooting via SU53 and STAUTHTRACE, resolving authorization issues efficiently
• Produced audit documentation and compliance evidence for SOX and internal reviews
• Collaborated with technical teams to architect secure, scalable access solutions across SAP environments
• Enhanced SOX attestation workflows with automated alerts and escalation protocols
• Generated SoD conflict reports, ensuring proactive mitigation and compliance maintenance
• Developed and executed GRC test cases for SIT, FUT, and UAT; supported business validation and sign-offs
• Managed change control processes using Solution Manager for traceability of access modifications
• Configured and maintained GRC workflows for access provisioning, UARs, and firefighter management
• Configured and optimized SAP GRC for access provisioning and Firefighter management across HANA databases. Designed and implemented GRC workflows to monitor and review emergency access (Firefighter ID) usage, ensuring compliance and accountability
• Generated audit-ready reports and supporting evidence for both internal and external auditors during SOX compliance reviews
• Implemented SAP GRC Access Request Management (ARM) for S/4HANA, establishing end-to-end workflows to manage user lifecycle processes such as onboarding, access changes, deprovisioning, and password resets. Developed reporting and monitoring mechanisms to ensure continuous oversight of access requests
• Produced and analyzed Segregation of Duties (SoD) reports to identify and remediate access conflicts, maintaining a clean and compliant security landscape
• Developed and executed comprehensive GRC cutover and go-live plans, and configured periodic synchronization jobs in the GRC production environment to ensure consistent data integrity
• Reviewed, updated, and aligned SAP security policies and standards with organizational goals and regulatory requirements to strengthen governance and risk posture

SAP Security & GRC Consultant - Suncor Energy

(2017-11 - 2020-09)

• Created and administered SAP user accounts through SU01, ensuring proper authorization management and compliance with internal security standards
• Suncor implemented the GRC User Access Review (GRC-UAR) application for ECC and several non-SAP systems. I supported the end-to-end implementation by leading workshops with non-SAP system owners to gather business requirements and design a workflow-based review and approval process for GRC-UAR
• Designed and configured roles via PFCG to define authorization objects and menu structures supporting business functions
• Conducted authorization validation using SU53, STAUTHTRACE, and SUIM to resolve access-related issues
• Developed single, composite, and derived roles aligned with business processes across modules (FI, MM, HCM, BW)
• Implemented role-based access control (RBAC) frameworks and automated provisioning with GRC ARM workflows integrated with SU01
• Executed post-installation GRC configurations for S/4HANA and BW systems, including integration of plug-ins and workflow notifications
• Implemented periodic UAR processes for compliance validation and exclusion management through IDM integration
• Configured structural authorizations in SAP HR to restrict access to sensitive employee data
• Introduced data protection controls for third-party integrations and enforced compliance monitoring
• Collaborated with functional teams, BASIS administrators, and audit stakeholders to shape security architecture decisions, enhance provisioning processes, and support recurring access reviews and system upgrades
• Managed privileged access using GRC EAM, ensuring traceability and adherence to audit requirements
• Resolved authorization and Fiori access issues using SU53 and STAUTHTRACE to minimize user downtime
• Performed role cleanup, consolidation, and optimization activities to strengthen overall security governance and align with industry best practices

Postgraduate Diploma - Information Technology - Lambton College of Applied Arts and Technology (2012-01 - 2014-12)

Bachelor of Applied Physics - Physics (1996-01 - 2000-12)