Yks Reddy
SAP Security | S/4HANA Authorisations
Hire this person
Send a job offer directly to this candidate
About
Accomplished SAP Security professional with 12+ years' and of 6 years of Non-SAP Testing experience. Global experience delivering end-to-end security solutions across complex SAP landscapes. Specialist in ECC and S/4HANA authorisations, with a strong track record on public-sector and blue-chip engagements (City of Johannesburg, City of Tshwane, Coca-Cola) alongside international clients including Nissan.
Skilled in leading security implementations across FICO, SD, HCM, SCM and BW/S4HANA modules Expert use of SAP authorisation troubleshooting tools (STAUTHTRACE, STUSERTRACE, Advanced expertise in role design, SU24, SU25, organisational levels and role optimisation. Strong understanding of SAP transport management ChaRM and secure deployment processes., SAP security governance and audit requirements. Ability to lead security workstreams independently and mentor junior consultants.
Experience
SAP Authorisation Consultant - Ransoft IT Solutions - South Africa
(2025-04 - 2026-08)
Client: City of Johannesburg
- Lead SAP authorisation implementation and support for Finance, PS and SCM teams across S/4HANA and SAP RISE landscapes.
- Build and update roles, maintaining authorisations and organisational values against the client authorisation matrix.
- Manage role transports through the change management process using ChaRM.
- Resolve authorisation issues using SU53 and STAUTHTRACE; provide SPRO access to project consultants.
- Review user access and password reset requests, routing for approval before provisioning.
SAP Authorisation Consultant - Ransoft IT Solutions - South Africa
(2024-03 - 2025-04)
Client: City of Johannesburg
- Designed and implemented SAP authorisations for Finance, PS and SCM teams across S/4HANA and SAP RISE.
- Managed user and role creation, executing role transports via ChaRM and Solution Manager in coordination with ITSM processes.
- Developed FUT, SIT and UAT documentation for BPC projects.
- Performed access request reviews and resolved authorisation issues using SU53 and ST01.
- SAP Fiori Security, Launchpad, Spaces & Pages, Catalogs, Business Roles and related authorisation concepts.
- Expert use of SAP authorisation troubleshooting tools (STAUTHTRACE, STUSERTRACE, Gateway Error Logs
- Advanced expertise in role design, SU24, SU25, organisational levels and role optimisation.
- Strong understanding of SAP transport management (ChaRM) and secure deployment processes.
- Audit support experience.
- Technical documentation and solution design.
SAP Authorisation & GRC Consultant - Ransoft IT Solutions - South Africa
(2022-06 - 2024-02)
Client: City of Johannesburg
- Delivered security support for HCM Payroll (Personnel Administration, Time Management, OM, ESS/MSS, Talent), Supply Chain Management and S/4HANA, spanning, FI, CO, HCM and BI modules.
- Creating or maintaining PFCG roles in the Fiori frontend or embedded S/4HANA system.
- Assigning business catalogs and Assigning spaces and pages in modern Fiori environments.
- Adding required frontend OData service authorizations.
- SAP Fiori Security, Launchpad, Spaces & Pages, Catalogs, Business Roles and related authorisation concepts.
- Expert use of SAP authorisation troubleshooting tools (STAUTHTRACE, STUSERTRACE, Gateway Error Logs
- Advanced expertise in role design, SU24, SU25, organisational levels and role optimisation.
- Strong understanding of SAP transport management (ChaRM) and secure deployment processes.
- Audit support experience.
- Resolved Fiori authorisation issues and identified missing OData services using /IWFND/ERROR LOG.
- Conducted SOD analysis and remediation, configuring GRC components (ARA, ARM, BRM, EAM).
- Administered Firefighter (emergency) access provisioning, monitoring and extracting logs for management review.
- Supported internal and external audit teams; prepared client-requested compliance reports and monitored daily user activity.
SAP Authorisation & GRC Consultant - Ransoft IT Solutions - South Africa
(2021-09 - 2022-05)
Client: City of Johannesburg
- Provided security support for HCM Payroll, Supply Chain Management and S/4HANA across FI, CO, HCM and BI modules.
- Conducted SOD analysis and remediation and configured GRC components (ARA, ARM, BRM, EAM).
- Executed role transports via ChaRM and Solution Manager; prepared FUT, SIT and UAT documentation.
- Creating or maintaining PFCG roles in the Fiori frontend or embedded S/4HANA system.
- Assigning business catalogs and Assigning spaces and pages in modern Fiori environments.
- SAP Fiori Security, Launchpad, Spaces & Pages, Catalogs, Business Roles and related authorisation concepts.
- Expert use of SAP authorisation troubleshooting tools (STAUTHTRACE, STUSERTRACE, Gateway Error Logs
- Advanced expertise in role design, SU24, SU25, organisational levels and role optimisation.
- Strong understanding of SAP transport management (ChaRM) and secure deployment processes.
- Audit support experience.
- Prepared audit documentation for internal and external auditors and administered Firefighter access and log reviews.
SAP Authorisation Consultant - Open EYE IT Resourcing - South Africa
(2021-03 - 2021-06)
Client: Coca-Cola
- Designed and maintained Warehouse Management roles — single, composite and derived — with organisational values.
- Created users and managed role assignments through IDM.
- Developed training materials and delivered training to business and end users.
- Provided post-go-live support across multiple Coca-Cola plants, resolving authorisation issues via SU53 and ST01.
SAP Authorisation & GRC Consultant - Open EYE IT Resourcing - South Africa
(2018-10 - 2020-11)
Client: City of Tshwane
- Educated users, managers and business owners on GRC access request submission and risk analysis.
- Maintained SOD rulesets and mitigating controls; configured Emergency Access Management master data and firefighter ID security.
- Managed master data for ARM, EAM, BRM and ARA within GRC and NWBC, and executed annual User Access Review (UAR) reporting.
- Supported BI/BW analysis authorisations via RSECADMIN, restricting access by company code, plant and distribution channel.
- Administered user and role management via PFCG, including CRM user/role setup and role transports.
SAP Authorisation Consultant - Open EYE IT Resourcing - South Africa
(2016-07 - 2018-10)
Client: Bidvest Tank Terminal, Botswana Oil Limited, Coca-Cola
- Administered user and role management via PFCG and managed role transports across multiple client landscapes.
- Managed portal authorisations and BOBJ user creation, group assignments and folder structures.
- Maintained SOD rulesets and mitigating controls, and executed annual UAR reporting for business owner approval.
SAP Authorisation & GRC Consultant - Accenture - India
(2013-07 - 2016-01)
Client: Nissan (Germany & France)
- Configured SOD rulesets and delivered GRC Access Control across all four components (ARA, ARM, BRM, EAM).
- Administered firefighter user IDs and SU24 authorisation object adjustments; managed role transports across the landscape.
- Provided authorisation support across MM, SD, PP, QM, FI and CO modules, and supported ITGC audit controls.
- Led role redesign and remediation of 800+ roles, eliminating SOD conflicts.
- Installed SAP GRC 5.3 and configured RAR, SPM, ERM and CUP post-installation.
- Designed custom SOD rulesets and 15 mitigation controls across seven business processes.
- Configured mitigation control assignment workflows and custom approver determination logic.
- Configured and implemented GRC Access Control (.
- Designed MSMP workflows, BRF+ rules and initiator rules tailored to client requirements.
- Developed BW security roles and delivered HR, structural authorisations and Solution Manager security.
- Supported ITGC audit controls and executed annual UAR reporting for business owner approval
Education
Bachelor's Degree - Mathematics, Economics and Statistics - Sri Venkateshwara University, India
Post Graduate Diploma - Computer Application - Indian School of Computer Technology, India
