Pranjal Garg Email and Phone Number

• Lead and mentor the team of 7 GRC and Security resources.• Implemented GRC ARA, EAM AND BRM Module for GRC AC.• Involved in GRC Role redesign project works where created more than 8000 new roles and replaced older version of roles of users with new roles.• Created master BRM File, Control id creation• Used multiple FF Reports, mitigation control report, action usage reports etc.• Created missing FF Logs reports, invalid FF ID Assignments reports.• Updated and Created new rule set as per the Audit requirement.• Fixed many GRC Issues like hanged GRC Requests, have knowledge of analysis SLG1 and Provisioning logs• Worked for Security Audits Documents, SUIM queries, SM20, SM19• Involved in planning for GRC 10.0 to 10.1 upgrade• Worked on GRC notifications and workflows changes.• Integrated LDAP and SAP SSO with GRC.• Involved in GRC UAR reports and workflows.• Convinced Auditors for exceptional changes in systems, provided proper evidences as per the requirement.• Having the knowledge of SU24 changes and migrations to production.

• Secured roles by Company Code, Plant, Cost center, Work center, Profit center, Purchasing Organization, Movement type and Sales Organization etc.• Managed mass transport via SE09, SE10 and PFCG.• Identifying potential SOD issues before assigning new roles to the use.• Analyze the user problems by using SU53, SUIM, SU24 and ST01.• Creating roles and assign roles to the users.• Creating derived and composite roles with proper approvals.• Role modifications based on proper approvals.• Assigning missing authorizations as per the user’s requirement.• Used CUA to maintain users (Creation, deletion, locking etc.) • Monitoring the critical transaction codes and ensures that they are assigned to the concerned users • Resolved problems while transporting using the transport logs.• Role maintenances and creating transport request for roles.• Created CATT scripts for creating mass users, deleting mass users, assigning roles to users, generating mass profiles in a CUA system.• Extensively used tables like AGR_USERS, AGR_TCODES, AGR_1252, AGR_DEFINE, E07T etc.• Resolved daily SAP Security issues.• Maintenance of User Master Record & Support End Users with Security issues.• Restrict open authorizations to sensitive Transaction codes.• Perform UNIT testing on created roles.• Effectively analyzed trace files and tracked missed authorizations for user’s access problems and inserted missing authorizations manually.• Used SU24 to maintain Check Indicator Defaults and Field values, reduced the scope of Authorization checks.

SAP Security, User Access Review

• Secured roles by Company Code, Plant, Cost center, Work center, Profit center, Purchasing Organization, Movement type and Sales Organization etc.• Managed mass transport via SE09, SE10 and PFCG.• Identifying potential SOD issues before assigning new roles to the use.• Analyze the user problems by using SU53, SUIM, SU24 and ST01.• Creating roles and assign roles to the users.• Creating derived and composite roles with proper approvals.• Role modifications based on proper approvals.• Assigning missing authorizations as per the user’s requirement.• Used CUA to maintain users (Creation, deletion, locking etc.) • Monitoring the critical transaction codes and ensures that they are assigned to the concerned users • Resolved problems while transporting using the transport logs.• Role maintenances and creating transport request for roles.• Created CATT scripts for creating mass users, deleting mass users, assigning roles to users, generating mass profiles in a CUA system.• Extensively used tables like AGR_USERS, AGR_TCODES, AGR_1252, AGR_DEFINE, E07T etc.• Resolved daily SAP Security issues.• Maintenance of User Master Record & Support End Users with Security issues.• Restrict open authorizations to sensitive Transaction codes.• Perform UNIT testing on created roles.• Effectively analyzed trace files and tracked missed authorizations for user’s access problems and inserted missing authorizations manually.• Used SU24 to maintain Check Indicator Defaults and Field values, reduced the scope of Authorization checks.

• Over 3 years of SAP Security experience on SAP Security and Roles Design, SAP GRC Security and have work as a shadow resource in End-to-End Implementations on SAP GRC Process Control and SAP Access Control.• Work with the business area owners and SAP Business Analysts to design and build appropriate role-based security for the SAP environment including role definition, object modification, org values updating deletion, Risk mitigation and SOD Conflicts.• Extensive experience with Automatic Profile Generator (PFCG), User Administration, Central User Administration (CUA), Authorization object maintenance, SAP GUI &CATT Scripts, transporting roles, Auditing, Segregation of Duties (SOD) in accordance with Sarbanes-Oxley (SOX) compliance.• Assist in design of Role, Risk & Functions and provide advice for the same.• Experience in GRC 10.0(Access Control and Process Control), work on SOD Reports, ARA, User Removal and Modification from GRC 10.0 Front End, Scheduling Backgrounds Jobs, Creating Organization, Process, Sub processes and Controllers.• Experience with helpdesk, resolving ticket issues and troubleshooting support problems using Lotus Notes 8.0.• Interaction with End Users, Business Process Owners and SAP R/3 functional consultants in various business requirements of various modules.• Knowledge of Business process with excellent communication and interpersonal skills.• An immediate positive contributor to the team.

Training in SAP Security and GRC 5.3