SAP Security/GRC Consultant

We have an urgent requirement for

SAP Security/GRC Consultant

for our client based at Dubai, PWFH

Daily Tasks

Consultant Key Activities- Task List:

• User Access Management
• Review and process user access requests.
• Review deactivation for terminated employees using ZUSERLOCK.
• Handle password resets and account unlocks.
• Audit log Monitoring
• Monitor and schedule security logs for any manual assignments in AEP and send for Agthia approval.
• Role Management
• Create roles as and when required with control of task-based approach for avoiding SoD. Identify role owner and upload the role in GRC.
• Z tcode template to be used when custom tcode access is requested by business.
• Coordinate with functional teams and confirm the requirements before build.
• Validate the role changes to be moved to AEP in SOLMAN CHARM – technically to ensure no objects are deleted.
• Coordinate and support new project access management – new role build design to be aligned to Agthia role structure.
• Change Management o Verify the change documents for roles to ensure no object deletion resulted as part of role maintenance. o Ensure proper testing and documentation for changes being moved.
• GRC Access Request Submission & Monitoring o Submit the GRC requests with proper business justification o Follow-up with approvers for approval in GRC o Monitor segregation of duties (SoD) conflicts and ensure they are mitigated and support approver to select the control if not known.
• Manage engine Ticket o Ensure tickets assigned to all team members are in progress & updated accurately. o Cross functional tickets to be assigned back to DT service desk o Follow DL’s created for directing the tickets to respective departments. o Submit the report on weekly basis to Agthia team
  

Monthly Tasks

• Audit and Compliance
• ITGC control check list to be executed and monthly report generation and submission to Agthia team.
• User Role Maintenance
• Analyse and clean up obsolete roles and authorizations.
• Optimize the test user accounts in DEV and QA and perform cleanup.
• Challenges
• No manage engine access to AMS team resulting in all tickets assignment to SAP GRC team.
• Communicate and educate the SAP functional, technical and Access related issues to users – and new DL’s setup
• Any new custom development should involve security team at the development stage – to follow best practice suggested by SAP GRC team.
• Frequent unavailability of cloud4c team resulting in operational havoc.