Gabriel

Senior SAP Security & GRC Specialist

Senior Cybersecurity Specialist - Deloitte

Lead SAP Security and GRC activities supporting a global pharmaceutical environment with more than 20 SAP landscapes across ECC, S/4HANA, Fiori, BW, PI/PO, EWM, GTS, MDG and ATTP.. Configure and support SAP GRC Access Control including Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM/Firefighter) and Segregation of Duties (SoD).. Participate in SAP S/4HANA 2022 migration activities, ensuring security compliance, role redesign and authorization validation during implementation.. Manage global Incident, Service Request and Change Request lifecycle following ITIL standards through ServiceNow and SAP Solution Manager.. Execute SoD risk analysis, mitigation controls and audit support for SOX compliance across global business units.

Senior SAP Security & GRC Consultant

As a senior consultant, planned and conducted remediation workshops, role design, the whole role management process, and access strategies, focusing on risk management and implementing SAP GRC in large-scale enterprises across Latin America.. Developed comprehensive Segregation of Duties (SoD) workshops for Material Management, Finance, Controlling, and Business Warehouse teams to ensure robust internal controls and compliance with regulatory standards.. Supported HANA implementations across pharmaceutical, food and beverage industries, focusing on security strategies and Segregation of Duties.. Integrated Fiori Apps into SAP GRC Matrices for risk management.. Planned and executed specialized segregation of duties workshops with clients operating throughout Latin America.. Designed, defined, and detailed Business Roles and Role-Based Access (RBAC) for enhanced security.. Designed and executed access security strategies for SAP, Fiori and ABAP Applications (SAP ECC MDG, S4 etc), incorporating a SOD approach.. Tailored rule sets in SAP GRC to meet specific business requirements.. Identified and assessed risks and controls in business and IT processes, both in Legacies and SAP platforms (SAP ECC, SAP CRM).. Configured the authorization environment in GRC AC.. Created Security Assessments and Violation Mitigation.. Configured emergency access management settings and critical firefighting role and assignment configurations as per client requirements.