Identify and improve segregation of duties and critical access within the organization

• Various Integration Projects o Creating and facilitating a migration plan to integrate employees onto current system• Risk Remediation Project on SAP Segregation of duties and Critical Actions o Implementation of Heineken Ruleset within in local GRC system o Responsible for remediation of SOD’s and CA for business and IT users o Collaboration with Process & Control team and business to ensure correct mitigation approvers and control measures are captured and adhered to o Guiding and support Authorisation and GRC team to comply with audit regulations o Ensuring clear communication when reporting to Local and Global stakeholders• Global GRC Deployment Project o Working with technical teams (Global and Local) to ensure implementation of Global GRC instance • Single Sign on Project SAP Username alignment o SAP username migration plan to include o Changes in all systems (sandbox, development, quality, production) o Create guide for support teams to for user guidance with rescheduling of batch jobs and variants o Manage license usage • ISMA controlso Ensure ISMA controls are adhered to and built into daily processeso Update documentation

SAP Authorisations and GRC exposure in the following modules:ERP, CRM, GRC 10.1 & 12, APO, Business Intelligence Analytics, BOBJ, Data Services, Warehouse Management, S/4 Hana (limited), Fiori, Solution Manager, PIGRC Administration and Configuration Setup, configuration, testing and maintenance of SAP GRC,  MSMP configuration  Creating/updating email notifications Creating additional approval levels with BRF+ Creating templates for easier role requests for specific areas Password self service set up GRC end-user personalization set up Ensure adequate reporting for audit and management reviews GRC 10.1 Implementation  GRC 10.1 to 12 UpgradeRisk management Maintain the ruleset, Update risks/function id’s to accommodate conflicts and sensitive  mitigating controls, to reflect key controls identified by business Ensure understandable GRC reporting for end users in user access reviews Facilitated the role out of Barnowl with ICT management to manage ICT risks more effectively ITIL and COBIT exposure Firefighter set upUser access and user provisioning o Provide extensive knowledge of User Management, Monitoring, User Tracing & Troubleshooting.o streamline end to end user identity processes to reduce human error and improve the audit trailso Facilitated LDAP management on active directory and GRCo Facilitated evaluation of user onboarding processes to reduce the overall time and/or costs across systems o SAP User License management and facilitate the annual audit by SAP AGo Coordinate staff movements across SAP and active directory during company restructureRole design and management o Ensure role design principals align with business processes, ICT standards, GDPR, internal and external audit regulations to prevent security loopholeso Deliver support for SAP Upgrades (ERP & GRC & BI) and Enhancement packso Setting up of test control sheets, test scripts and create test users in testing client

• Gather functional requirements for business process roles and translate into a technical design• SAP authorisation design in accordance according to GRC standards, financial Standardize authorization procedures and implement policy and procedures internal controls and best practices• Build and configure roles• Analyze segregation of duties and sensitive access violations Design and build mitigating controls in conjunction with business and internal audit• Liaise with SAP Development and SAP Basis teams to ensure sufficient safeguard of SAP Financial system in all SAP landscapes• End user authorisation support and troubleshooting• Implementing audit finding recommendations• Assess excessive access to tables and programs by SAP users and apply restrictions • Deliver security and authorizations support for SAP Upgrades (ERP & GRC) and Enhancement packs• SAP License management and facilitate the annual audit by SAP AG• Implement Archive strategy in collaboration with external consultants and manage maintenance thereof• Monitor and improve the efficiency of business processes as well as collect and interpret data about existing processes with 3rd party systems• Change management as a result of role changes

• Maintenance and support in HCM structural authorisations• Personal administration• Training and events • ESS/MSS - portal• Organisational management I have done customizing and extensive testing in the HCM space, ie. - Km rates changes- New personal areas- Fund changes- HCM customer specific scanning implementations- Qualification verification in personnel development- Customized reports for Training and events Authorisations - EHP 5 upgrade and testing for XSS- Personnel Development Implementation- Implementation of MSS/ESS to the rest of business units

TThe scope of SAP R/3 Environment: FI, CO, PM, Procure to Pay, Order to Cash, HR, PP with 2700 users• Provided consultation advice and direction regarding SAP Role design and standards to application developers, systems analysts, and project managers in GRC (Complaince Calibrator and Access Enforcer) and SAP R/3 (all relevant production systems) in all modules• Role Administration - Create roles according to GRC standards, and does user assignments on both systems• Analyzing segregation of duties, sensitive access, mitigation controls • GRC administration on Access Enforcer and Compliance Calibrator• GRC rule build for Compliance Calibrator• Create documentation, test packs and standardize authorization procedures• Work along with functional team to set and resolve authorization object data and problems and enhancing current security loopholes.• Extensive knowledge of User Management, Monitoring, User Tracing & Troubleshooting.• Extensively use MS Excel and MS Access for analysis of roles• Correcting audit issues based on audit reports• Gathered functional requirements for SAP HR project for position based security roles by organizing and facilitating role mapping workshops with all functional teams. • Translating functional requirements into technical design for SAP HCM security roles.• Developed, unit tested, and maintained SAP HCM position based security roles utilizing context sensitive authorizations

Self-managing position within in a systems team implementing authorizations in Public Sector Records Management (PSRM) • Identifying relevant PSRM objects and SAP R/3 objects and create roles according to local security requirements and restrict where necessary• Co-ordinate, supervise and assist in testing of Roles • Implement additional security levels available in PSRM• Create users in Solution Manager• Test RFC connections to R/3 and vice versa• Documenting technical setup

SAP R/3 Support to 1 retail client in project and post project phaseThe scope of SAP R/3 Environment: FI, CO, PM, MM, HR, SD, Retail modules on SAP 6.4 environmentsProject Phaseo Identifying key areas such as: critical transactions, objects, tables, programs, authorization restriction problems due to master data design, to build roles on local security requirements and restrict where necessaryo Preparation of the Transaction to Role Matrix’s and User Roles Matrix’s o Co-ordinate, supervise and assisting in testing of Roles o Create User and role administrationo Investigate specific security restrictions per site in Franchise Retail environment and apply changeso Quality Control of the creation of user masters in Production environmento Authorisation Support/troubleshooting for Project Team members and Production SAP usersPost Project Phaseo Doing authorizations support in Retail and Financeo Assess excessive access to tables and programs for SAP users and applying restrictionso Implementing policies and procedures for Authorisations housekeepingo Implement segregation of duties within Authorisations Team

Archiving• Current Archive Database analysis• Pre and Post Analysis on data per archive object• Managing Archive Calendar• Implementing new archive objects• Develop/Investigate new archive retrievals• Investigate new/improved archive/retrieval programs.• Support on archive/retrieval queries• Updating archiving documentationAuthorisationsSAP R/3 Support to 5 clients The scope of SAP R/3 Environment: FI, CO, PS, PM, MM, HR, PP, SD modules on 4.6C and 4.7 environmentsResponsibilities include:• Assisting with authorizations support in all clients• Post Authorisations Audit clean up of systemo Identify all critical objectso Assess and rectify excessive access to users that does not comply with audit regulationso Implementing policies and procedures for Authorisations and Basis housekeeping• Identifying key areas such as: critical transactions, objects, tables, programs to build roles on local security requirements • Facilitating authorisations team in new functionality of profile generator, user support, and previous project experience. • Doing monthly housekeeping on Authorisations

The scope of SAP R/3 Environment: FI, CO, PM, MM, SD, ISU, SD, HR, RE, PS, GAMAP- Upgrade from release 4.6C to 4.7 Enterprise • Team leader role• Managing SAP 46C support in an environment with ± 4000 users in Cape Metro pole- User and Role administration- investigating authorization check problems- synchronizing SAP systems- creating documentation and process flows for Business processes- supply status reports for weekly and monthly meetings• Preparing/Planning for upgrade from release 4.6C to 4.7- compiling lists of transactions and objects in 4.6 and 4.7 for functional teams- identifying new transactions in 4.7 which will affect current roles- implementing security restrictions- preparing documentation for Upgrade Project • Identifying critical roles and transactions and applying security requirements as requested from business• Auditing and reporting – identify critical combinations of transactions for successful execution of reports • Investigating and implementing security requirements for functional teams• Facilitating authorizations team in user support and Upgrade phases from previous project experience