Debasish Roy Email & Phone Number

Bengaluru, Karnataka

I possess 18+yrs of experience in SAP Security (with a total of 21 yrs of exp. in Operating Systems, Hardware, and Database) and a rich exposure into a gamete of related technologies and processes like SAP Security, Audit, Compliance & Risk Management coupled with team and people Leadership.

Bengaluru Area, India

Bengaluru Area, India

* Manage SAP Security team of Cargill Global IT.* Design Security Architecture for all SAP Products (ECC, CRM, BI, APO, GRC).*Define, standardize and govern all SAP identity and access management related policies, processes, procedures, workflows, tools and controls in accordance with best practices, experience, and business needs.*Manage the workload of the SAP security teams for project and maintenance of all SAP systems, including but not limited to SAP ECC, R/3, BI, SCM, CRM, Portal, PI, Solution Manager, Fiori, etc., in accordance with SAP best practices and Whirlpool's policies and procedures.*Build relationship processes with other IT departments and organizations to understand requirements, trends and strategy in order to support business projects regardless complexity and scope.*Design and maintain security roles across all SAP landscapes globally to ensure appropriate safeguards are in place and to achieve target SLAs, audit compliance, and defined performance metrics.*Regularly interact with management, internal and external partners to increase the security posture at a corporate level to ensure the management of user accounts is accurate, effective and meets audit requirements under SOX compliance.*Ensure that changes to roles and system are tested, approved and completed according to Cargill's standards.

Houston, Tx

SAP Security Administration

Irving, Tx

** Extensively worked on SAP GRC 10 ARA, PSS, UAR and EAMimplementation. Monitor and manage GRC 10 systems and provide solution for problem.** Support control review and work closely with IA and Compliance team to resolve audit risks.** Analyzing of SOD violations for all SAP systems and defining remediation / mitigation strategy.** Requirement gathering, development, testing and support deployment of SAP Security objects for newly build business process and enhancement of existing business process from SAP Security Architecture standpoint.

•Planning, sizing, resource allocation for GRC 10 implementation.•Designed, configured and implemented GRC 10 EAM, ARA, UAR, PSS.•Conducted workshop for the business process owner to define GRC Rule Set.•Analyzing SoD violations at User and Role level and provide recommendation for remediation / mitigation to the Executive Leadership.•Working closely with the internal and external auditors (D&T) to plan, resolve SoD risk and define process and policies for future monitoring.•Created document for the existing process and proposed future process for SAP Security.•Coordinated with offshore (India, Malaysia) about the development and guided them.•Working closely with the auditors about SOD related activities.•Defined the risk areas in IT (specially in SAP landscape) on the basis of discussion with compliance team.•Created documents for Audit (Sensitive T-Codes/ Reports, Batch Job authorization, User Group maintenance and others) and guided the Compliance team and auditor about the technical aspects.•Configured and installed SAP system to address those SAP risk areas (e.g., password policies, automatic user locking for incorrect logon attempts, restricted passwords and so on). •Created new roles in R/3 Ent. And BI 7.0 (including Analytical Authorization) and Published Queries, Wordbook, Reports via BEx Query Designer and Report Designer.•Created new business roles in CRM 7.0 and modified existing according to business requirement.•Identify and solve replication (middleware) problem from ECC to CRM and CRM to ECC.•Defining project goal, Project plan and also assisting budget allocation, resource allocation for on going SAP Security project and for future project.

North America