Kranthi

SAP Security & GRC Consultant with 5+ years of hands-on experience designing, implementing, and supporting SAP Security and authorization controls across SAP landscapes with strong focus on SAP S/4HANA on RISE, SAP Fiori Security, and Embedded SAP GRC 12 (Governance, Risk & Compliance) capabilities. Experienced in User & Role Administration, Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), User Access Reviews (UAR), Business Role Management (BRM), MSMP Workflow Configuration, BRF+ Rules, SoD Risk Analysis, and Mitigation Controls. Strong expertise in SAP authorization concepts, role design, troubleshooting authorization issues, security compliance, and access governance across global and multi-system SAP landscapes.

Hands-on experience with SAP Identity Management (IAM) integrations, SAP Fiori Catalogs, Groups, SAP SAC, SAP BTP, SAP IBP, and Cloud Security user administration. Proven ability to ensure SAP security is compliant, auditable, and aligned with business processes while supporting both project implementations and ongoing operations.

SAP Security & GRC Consultant - Tata Consultancy Services - UK

(2024-04)

Client: Leading Automobile Manufacturing Company, UK

• Designed, implemented, and supported SAP Security and authorization controls across SAP S/4HANA on RISE and SAP Fiori environments, ensuring security is compliant, auditable, and aligned with business processes.
• Managed end-to-end Embedded SAP GRC 12 Access Control activities including ARA, ARM, EAM, UAR, and BRM across global SAP landscapes.
• Processed 500+ user access requests through SAP GRC ARM workflows, maintaining SLA compliance and audit-readiness.
• Supported 100+ SoD analyses, risk remediation, and mitigation activities using SAP GRC ARA, ensuring alignment with Least Privilege and RBAC principles.
• Conducted User Access Reviews (UAR) and access certification activities to ensure ongoing compliance with security standards.
• Configured and maintained MSMP workflows and BRF+ rules for streamlined access request approvals.
• Managed 50+ SAP Fiori Catalogs and Groups including authorization troubleshooting and access maintenance across SAP S/4HANA on RISE.
• Supported SAP Identity Management (IAM) integrations for user provisioning and access lifecycle management.
• Resolved complex authorization issues using SU53, SUIM, and STAUTHTRACE, providing strong analytical documentation of findings.
• Supported SAP SAC, SAP BTP, and SAP IBP security administration covering cloud user access management.
• Supported audit reviews, compliance assessments, evidence collection, and resolution of audit findings.
• Collaborated with business users, functional consultants, and auditors across global and multi-system SAP landscapes.

SAP Security & GRC Consultant - Datacore Technologies Pvt. Ltd. - UK

(2021-12 - 2024-04)

Client: Leading Chemical Manufacturing Company, UK

• Participated in SAP GRC Access Control 12.0 end-to-end implementation and large-scale global support projects covering both project implementations and ongoing operations.
• Created and modified 100+ SAP roles (Single, Composite, and Derived) aligned with RBAC, SoD, and Least Privilege principles.
• Configured Embedded SAP GRC 12 modules (ARA, ARM, EAM, UAR, BRM), MSMP workflows, and BRF+ rules.
• Performed SoD analysis, risk remediation, and mitigation control activities maintaining a risk-aware access governance framework.
• Supported SAP S/4HANA on RISE and SAP Fiori Security implementation including role design, Fiori Catalogs, and authorization troubleshooting.
• Supported SAP Identity Management (IAM) integrations for user provisioning and access lifecycle across multi-system SAP landscapes.
• Managed SAP SAC, SAP BTP, SAP IBP, and Disclosure Management security activities.
• Conducted User Access Reviews (UAR) and compliance validation in support of internal and external audit requirements.
• Provided strong analytical documentation including access reports and security documentation for audit evidence and IT general controls.
• Collaborated with business users and project teams ensuring SAP security aligned with business processes and compliance standards.

Anu Chemicals

(2016-08 - 2021-11)

Worked in Chemical Manufacturing domain, gaining business process knowledge that supported transition into SAP Security & GRC consulting.

Bachelor of Technology - B.Tech