Sri Ramchandra Bhargav K

: bhargav.ksr@gmail.com
: 9916039376

SAP Security/GRC Certified Consultant

Professional Experience
 Around seven years of experience in Requirement gathering, Design, Development,
and Maintenance of SAP applications security, GRC.
 Experienced in working for Full Life Cycle Implementation, Go-Live, Post Go-Live, and
Production Support projects.
 Conducting periodic reviews, identifying & mitigating risks, measuring metrics, tracking
project progress and submitting status reports.
 Extensively used SAP GRC AC suite of products
 Team Management, Offshore Delivery for Client escalations, SLA Management, Open
Cases reviews, Business deliverable, Process documents and Time-sheet approvals.
 Expertise in SAP Security training sessions for various clients and internal practices
 Designed and Developed technical specification documents for various customers.
 Capable of rapidly learning new assignments involving decision making, quantitative skills,
working cross functionality with others and prioritizing responsibilities.
 NASSCOM (NSR) Registered

Areas of Practice
• IT Internal Audit
• IT Internal Controls Review
• BI/BOBJ Security Design
• S/4 HANA Security
• GRC design & implementation
• SAP Security Consulting

Industry Lines
• Manufacturing,
• Railways
• Food Processing
• Life sciences
• Logistics
• Packaging

Professional Experience:

Yash Technologies.

S/4 Hana Security Consultant

 Created roles in the SAP Fiori front end system specific to group and catalog id along
with the general access required to Fiori launch pad.
 Odata service specific roles in the S/4 HANA backend system based on the business
process (specific to the job position).
 Analyzed the user reported issues related to the Odata services like missing authorizations
to the services, missing Fiori app, apps missing on the Fiori start page.
 Coordinated with the functional and technical consultants related to activate the
Odata services that an end user request.
  Maintained the mandatory authorization objects for OData services and OData groups
in the backend system.

Miracle Software System

ECC, EWM, BI/BOBJ Application Security & HANA security:

 Design and document authorization setup for EWM (Extend Ware house Management)
and BI/BOBJ (Business intelligence /Business objects)
 Go-Lives of SAP (Confidential - Mexico, Costa – Rica and the United Kingdom)
 Production \ Non-Production Support for R/3, FICO, BI, MM, and Portal systems
 Design and Implement HANA-BI Security & integrate BOBJ Security
 Created custom roles in HANA DB for Developers, Modelers, Data Base Administrators
and Business End user Roles
 Worked on System, Object, Analytic, Package and Application Privileges
 Worked on both Catalog (Run Time) and Repository Roles (Design Time)
 Strong Experience in working on HANA Studio and Development perspective
 Experience in HANA Life cycle Manager and Transport Mechanism
 Ability to Drive Security support process and ensure compliance of project standards and
deliverables
 Strong understanding of all administrative tasks related to HANA Security
 Strong knowledge of designing of roles & authorizations and implementation of complex
security framework and role matrix for SAP HANA Enterprise platform
 Worked with team for development of security design document, creation of new roles,
modification of existing roles, resolution of security-related issues, coordination with
analyst and Basis team members.

Cognizant Technologies

IT Internal Audit:

 Business Process Review and associated risk & controls

 Post implementation review in ERP environment (SAP)
 ERP Audit (SAP Environment)
 Access rights review
 SOD review/analysis in ERP environment
 Review and analysis of systems change management
 Review and analysis of systems development
 Review and analysis of computer operations (Batch processing/Real-time
processing/BCP-DRP/Backup Management).

Fujitsu Consulting India

GRC Responsibilities:
 Technical Team Member for EAM, ARA, BRM, &ARM Modules.
 Collecting Client requirements about the way GRC is leveraged into their current
business structure from workshops.
 Configuration activities of all the 4 processes in AC 10.
  Post Installation activities – Activating Applications, SICF Services, BC Sets, etc.
 Common Configuration Activities – All the connection activities, Parameters, Creating
Owners, Sync Jobs etc.
 ARA – Rule set road map implementation, Mass maintenance of Rule Set with
mitigations, maintaining related MSMP workflow, and rule set support activities.
 EAM – Creation of FFIDs in backend as designed, FFID admin & Reason codes in GRC
Server, Assignment of FFID to owners, controllers, & Firefighters.
 ARM – Activating process ids, actions in it, creation & maintaining number range, Auto
Provisioning settings, custom rule id with decision table in BRF+ for customized MSMP
workflow
 BRM – Connection strategy, role type settings, role attributes, methodology & related
MSMP workflow ROLE_APPR

SAP Security/Upgrade Consultant:

 Analyzed and understand existing SAP security environment and design, business
requirements to upgrade from SAP R/3 4.7 to ECC 6.0 EHP6.
 Extensively used Automatic Profile Generator (PFCG) to create and maintain Parent and
Child/Derived roles and to Upload and Download of roles.
 Transporting the change requests from the Development environment to Testing/QA
environments.
 Created Authorization groups and assigned Tables and Programs to the groups.
 Worked on SU24 to maintain Check Indicators for the Transaction Codes.
 Extensively used tables like AGR_USERS, AGR_TCODES, AGR_1251, AGR_DEFINE etc.
 Extensively Used SUIM (User Information System) to pull various reports for audit monitoring
 Trouble shoot authorization errors using SU53 and by system trace.

Wipro Infotech:

System Admin:

 Installation of Windows-2000, Windows-XP Operating Systems

 Installation of Office 2000 and User application modules
 Installing, Configuring Standalone Printers, Software applications and Patches
 Hardware Upgrades (CPU, Memory, Network Interface Cards, and Hard Disk)
 Trouble shooting and rectification in Computer both Hardware and Software
 Installing and configuring Standalone Printers, software applications and Patches