Internal Control Officer (Sap Authorisations)
CurrentCross-functional role where I am gaining extensive knowledge of J-SOx and GDPR laws, SAP Authorization administration, data modeling and Power BI. - GRC Admin.: Assisting in the SoD (Segregation of Duties) risk removal assessment per role by identifying key authorization objects, fields, and domains. Guided Role Owners in reviewing user access, pinpointing SoDs and Critical Access risks, and providing comprehensive guidance within SAP to ensure compliance and mitigate risks.- SAP Authorization Admin.: Performing master data updates concerning role ownership, SAP key users, and Risk Owners. Implemented control reports and clearly explained the Authorization grid, significantly contributing to fraud control efforts and enhancing overall system security.- KPI Transition to Power BI: Leading a high-impact project to develop the SoD status report in Power BI, encompassing data modeling and visualizations. This project involves over 30 affiliates and 6,000 users, with data integrated from SAP systems and various Excel files. The results are reported to top management in the monthly steering committee meetings, underscoring the project's strategic significance.- Database Management: Updating comprehensive financial control master data, maintaining and troubleshooting the complex correlations within our Access and Workiva databases. Programmed SQL queries to improve its efficiency.- Quarterly Controls Self-Assessment: Coordinating end-to-end self-assessments for all EMEA affiliates (+30), ensuring high-quality results through meticulous checks, and reporting findings to top management.- GDPR Coordination: Conducted ROPAs (Register of Processing Activities) across the department section, liaising with Business Owners to provide expert guidance. Assisted with terminology and data processing subjects, ensuring and promoting awareness of compliance with GDPR regulations and promoting best practices.