SAP Security Specialist – Providing guidance to the business and performing development functions for SAP Security related operations and projects. Key Projects: SAP Audit and Remediation Initiative  Remediate and mitigate external audit findings  Establish SOD matrix  Design and implement framework for continual SOD/audit compliance SAP ECC Roles Based Access  Provide governance and peer review for all development activities Salesforce Integration  Provide SAP Security SME advice for integration of Salesforce and IBM IIB to SAP ECC, CRM, BW  Perform configuration management for cross development of ABAP objects  Develop and execute implementation plans for brand go-live’s Delegation of Authority Redesign  Perform analysis of business activity  SAP Security role design, development, testing and implementation SAP BW and JAVA Portal Migration to HANA On-Cloud (HEC)  Provide SAP Security SME advice for the migration of SAP BW, Java Portal and HANA to HEC SAP BW and JAVA Portal Security Re-design  Perform analysis of business activity  SAP BW Security re-design, test and implementation  SAP JAVA Portal Security re-design, test and implementation  Update IDM configuration Other general functions:  Peer review of SAP Security related developments  Perform SAP Security development SAP access review and approval Perform Change Management review and approval  Design and implement SAP Security development guidelines  Perform Knowledge Transfer (KT)  Working with key stake holders, management and end users  Liaising with technical and functional consultants Systems:  ECC 7.3 sp08  BW 7.3 sp08 on HANA CRM 7.3 sp08  SAP Netweaver Gateway 7.3 sp08  SAP NetWeaver Java Portal 7.3 sp08  SAP IDM 7.2

SAP Security Architect – Providing Security related SME services and responsible for the design, testing, implementation, support and documentation of Authentication, Single-Sign-On and Auditing requirements

SAP Security Consultant - Responsible for developing and documenting the detailed application security design for the AusNet Services WorkOut Solution.

• ECC, BI, PI and Enterprise Portal user account administration using CUA, SSO, Direct User Assignments and Position based security.• Incident and service request management following ITIL methodology.• Segregation of Duties analysis, design, implementation, enforcement and auditing. • ECC and BI role development, testing and implementation. Creation and generation of composite, parent, derived and single roles.• Supporting and working closely with the FICO, MM, SD and PP teams to help deliver changes requested by the business.• Liaising with key stake holders such as the Finance Department to develop and restrict specific SAP roles for Tax accountants, Treasury Officers, Purchasing Officers and Purchasing Approvers (amongst many other roles).• Transporting changes between DEV, QA and PROD systems whilst following change control procedures.• Quarterly internal audits and annual external audits.• SAP Licensing using USMM and SLAW.• Security Note testing and implementation.• Liaising closely with the network, infrastructure and service desk to aid in smooth delivery of changes which affect the business such as system sizing change requests to the infrastructure team, restriction of company separated systems across VLANS and firewalls with the network team and instructing service desk how to help diagnose SAP end user issues and direct incidents and service requests to the correct SAP team.• User training for purchasing and approving roles.• Minor BASIS administration as a backup whilst the BASIS Administrator is on leave.• Maintaining Password manager for all key SAP system accounts.• Monthly Windows security updates, starting and stopping all systems and performing updates and ensuring system availability once completed.• Producing process and system documentation.

• Incident and Service request management.• Windows Server administration.• Active Directory administration.• PABX and physical network patching.• Asset management.• Producing process and system documentation.• Data backup and disaster planning.• Application installation and support for users