A principal consultant with over 10 years of experience in implementing governance, risk, and compliance solutions, building robust security architectures, driving IT security Audit engagements, internal controls and implementing effective risk mitigation strategies. Specialized in GRC, Info security, IT Audit, SAP security and GRC, Internal controls, S/4 HANA digital transformation and IT compliance automationKEY ACHIEVEMENTSImplemented SAP GRC modules, including Access Control (AC), Process Control (PC), and Risk Management (RM) and implementing SAP IAG (IAM) systems. Proven track record in designing of new SAP authorization concepts.Expert in conducting risk assessments across all IT systems, developing risk mitigation strategies, identifying IT risks and deploying IT controls (ITGCs and ITACs) across access management, change management, BCP/DR, SDLC, vendor management, incident management, network security.Successfully developed governance & compliance strategies aligning IT functions with business objectives, leveraging COSO, COBIT, ITIL, TOGAF and NIST, ISO 27001, and CIS frameworks enhancing resilience, and regulatory adherence.Digital Transformation & Compliance Automation: Led S/4HANA transformation focused on GRC, enforcing compliance via automated workflows, and established KPIs for continuous monitoring, reducing manual workloads. ITGC Audit & Security Audits: Proficient in ITGC audits & security audits, adhering to ISAE 3402 and SOC 2 standards. Regulatory Compliance: Comprehensive understanding of regulatory standards (SOX, GDPR, PDPL, PCI DSS) and frameworks (BAIT, DORA, MaRisk), with proven expertise in developing compliance roadmaps to enhance IT systems maturity.Project Management Excellence: Managed cross-functional projects, from planning to execution, ensuring timely delivery of SAP, GRC, and IT governance solutions.SKILLSSOC 2 | NIST | ISO 27001 | CIS | ITGC CONTROLS | IT SECURITY CONTROLS | ISMS | BAIT | DORA | MaRisk | NCA | ECC | NIS 2.0 | COBIT | TOGAF | ITIL | EU AI Act | SOX | GDPR | PCI-DSS | PDPL | COSO | HITRUST | HIPAA | QCSF | NISCF | CBUAE | NESA | SAMASAP S/4 HANA | SAP Security | IT Audit | SAP Audit | SAP Authorizations | Security Audit | SAP GRC Access Control | Cyber & Enterprise Threat Detection | SAP Identity Management (SAP IAG) | RSA Archer | JIRA | SAP Fiori