Martin Samuel Bandila
Lead Sap Security & GRC Consultant
Summary
18+ years’ experience in IT Industry. Accomplished SAP Professional in SAP Fiori Security, SAP GRC, S/4 HANA Security and SAP ECC Security around 13+ years and 4+ years in Windows Systems Engineer. Experience in 6 full life cycle implementations of ECC Security & S/4 Fiori security from design phase to post implementation phase. Experience in Major Rollout and Upgrade project in SAP Fiori Security. Strong experience in Designing Authorization Roles for SAP ECC, SAP BW, SAP HR, SAP CRM. Experience in role re-designing, role clean-up activities. Experience in configuring and maintenance of Central User Administration (CUA). Experience in using profile generator (PFCG) for creation and maintenance of Roles/Activity groups as required. Experience in Security Administrative activities such as creating user accounts, password reset, locking and unlocking of users. Created Mass users and Roles using eCATT Script and LSMW. Implemented and supported GRC 10.0, 10.1 and 12.0 Access Control (EAM, ARM, BRM, ARA). Involved in configuration and customization of MSMP workflows and BRF Plus Rules. Experience in analysis and processing Segregation of Duties (SOD) issues. Experience with Transports (STMS) in transporting roles throughout landscape. Support experience in GRC Process Control. Experience in creating Analysis Authorization and troubleshooting in SAP BW. Experience in creating BOBJ & BPC authorization. Experience in Solution Manager Charm for creating charm request for Transport of Roles. Developed SAP Security documentation and delivered training on SAP security processes and applications during go-live & implementation. Experience in Sap S/4 HANA Security using HANA Studio- Created Technical and Restricted Users and Successfully created system object, analytics, package privileges and assigned users. Experience in SAP Service Market Place for opening OSS connections, KBA reports, SNOTE search for correction and security enhancements provided by SAP. Knowledge in Fiori app library in finding out the details of apps, services and semantic objects. Knowledge in BTP, IAG Security. Working Knowledge in AWS. Experience in Incident and Change Management Process and its documentation in Solman. Experience in onsite & offshore engagement model, team lead for offshore team for project activities and provided training and mentoring team. Experience in ticketing tools like Service now, Jira, Remedy. Self-motivated in handling the work assigned and adhere to SLA deliverables and deadlines. Experience working in both team and individual environment and always eager to learn new technologies and implement them in challenging environment.
Highly educated individual with exceptional background in [Industry]. True leader works with people and handle deadline-oriented tasks.
Experienced with identifying and mitigating security threats through comprehensive assessments. Utilizes advanced techniques to ensure protective measures are effective and responsive to changing environments. Strong understanding of security protocol development and implementation, ensuring organizational safety and compliance.
Overview
19
19
years of professional experience
1
1
Certification
Work History
Lead Security Consultant
Triesten Technologies
09.2024 - Current
- Company Overview: Implementation & Support of S/4 HANA 2021
- Conducted meetings with product owners to gather project requirements and prepare a common design for security roles
- User and Role administration of all SAP Systems in both Production and Project systems
- Worked closely with Functional team identifying impacted transaction codes, authorization objects and business areas in SAP ECC
- Created Catalogs Groups & transactional Apps
- Transported all the Catalogs and Roles to Quality for UAT
- Analysed access issues during Unit testing and UAT and troubleshooted access issues using SU53, ST01 and Stauthtrace
- Coordinated with Functional teams of respective business areas and setup test user id’s and tracked the project the UAT
- Advised Fiori and basis team for OData Services and ICF services activation wherever necessary
- Created key users to run tests and reports to validate the new system
- Transported all the security related transports to Quality system for UAT
- Implementation & Support of S/4 HANA 2021
Lead Security Consultant
Genpact
01.2023 - 07.2024
- Company Overview: Implementation of S/4 HANA 2021
- Experience in managing complex landscape (both Production and project landscape) which contains SAP components ECC, FIORI
- Gather Requirements and coordinated with business and Technical Team during implementation/design, development, UAT and production deployment
- Conducted meetings with product owners to gather project requirements and prepare a common template framework for security roles design
- User and Role administration of all SAP Systems in both Production and Project systems
- Worked closely with Functional team identifying impacted transaction codes, authorization objects and business areas in SAP ECC
- Created Catalogs, Groups & Custom Apps
- Advised Fiori and basis team for OData Services and ICF services activation wherever necessary
- Transported all the Catalogs and Roles to Quality for UAT
- Coordinated with Functional teams of respective business areas and setup test user id’s and tracked the project during UAT
- Prepared Roles to process owner matrix to track the analysis of project requirement
- Troubleshooted all the authorization issues during UAT
- Troubleshooted all the authorization issues during Hyper care support
- Created Charm request for transport request
- Implementation of S/4 HANA 2021
Lead Security Consultant
Genpact
03.2022 - 12.2022
- Company Overview: Enhancement of S/4 Fiori Security 2021
- Gather Requirements and coordinated with business and Technical Team during design, development, UAT and production deployment
- Conducted meetings with product owners to gather project requirements and prepare a common template framework for security roles design
- Worked closely with Functional team identifying impacted transaction codes, authorization objects and business areas
- Created Catalogs, Groups & Custom Apps
- Tested Fiori Apps and rectified issues
- Advised Fiori and basis team for OData Services and ICF services activation
- Transported all the Catalogs and Roles within the environment
- Analysed missing authorizations by performing authorization traces to resolve security issues by using ST01 & Stauthtrace
- Performed regular activities and troubleshooting by using SU53
- Troubleshooted all the authorization issues during UAT and Hyper care support
- Advised Business about the redesign of Roles and cleanup of Roles
- Implemented SOD check
- Daily activities also include creating of user accounts, system clean activities such as termination, access request role changes tracing and prototyping access issues using SU53, ST01, troubleshooting production issues
- Experience in maintaining authorization objects using SU24 tcode
- Communicated technical and non-technical issues along with training in change management process to key users and business users when necessary
- Enhancement of S/4 Fiori Security 2021
Lead Security Consultant
NTT DATA (Datamatics Payroll)
04.2021 - 02.2022
- Company Overview: Rollout Project of Fiori Security 2021
- Conducted meetings with product owners to gather project requirements and prepare a common design for security roles
- Involved in business meetings with Functional & Technical Team for Requirement gathering
- Created Master and derived Roles using PFCG as per business requirement
- User and Role administration of all SAP Systems in both Production and Project systems
- Transported Roles within the Environment
- Experience in SU24 activities for maintaining authorization checks
- Coordinated with Functional teams of respective business areas and setup test user id’s and tracked the project the UAT
- Troubleshooted all the authorization issues during UAT
- Troubleshooted all the authorization issues during post Go-Live Support
- Transported and generated roles and profiles using CHARM
- Rollout Project of Fiori Security 2021
Senior Security Consultant
Dickinson Associates
11.2020 - 04.2021
- Company Overview: Implementation of S/4 HANA 1909 Fiori Security
- Conducted meetings with product owners to gather project requirements and prepare a common design for security roles
- User and Role administration of all SAP Systems in both Production and Project systems
- Created Catalogs Groups & transactional Apps
- Transported all the Catalogs and Roles to Quality for UAT
- Analysed access issues during Unit testing and UAT and troubleshooted access issues using SU53, ST01 and Stauthtrace
- Coordinated with Functional teams of respective business areas and setup test user id’s and tracked the project the UAT
- Created key users to run tests and reports to validate the new system
- Transported all the security related transports to Quality system for UAT
- Analysed and Troubleshooted all the authorization issues during UAT & Hypercare
- Implementation of S/4 HANA 1909 Fiori Security
Senior Security Consultant
Dickinson Associates
04.2020 - 10.2020
- Company Overview: Implementation of S/4 HANA 1909 Fiori Security
- Conducted meetings with product owners to gather project requirements and prepare a common design for security roles
- User and Role administration of all SAP Systems in both Production and Project systems
- Created Catalogs, Groups & custom Apps
- Gathered information about Catalogs, Groups and Tiles from Fiori app library
- Transported all the Catalogs, groups and Roles to Quality for UAT
- Analysed access issues during Unit testing and UAT and troubleshooted access issues using SU53, ST01 and Stauthtrace
- Coordinated with Functional teams of respective business areas and setup test user id’s and tracked the project the UAT
- Created key users to run tests and reports to validate the new system
- Transported all the security related transports to Quality system for UAT
- Analysed and Troubleshooted all the authorization issues during UAT & Hypercare
- Mentoring business user in access the Fiori apps
- Communicated technical and non-technical issues along with training in change management process to key users and business users when necessary
- Implementation of S/4 HANA 1909 Fiori Security
Senior Consultant
Backoffice Associate (Syniti)
10.2019 - 04.2020
- Company Overview: Enhancement of SAP GRC 10.1 with BPC 11.0
- Post configuration settings in GRC using SPRO
- Configured & Assigned Connectors and Connector groups
- Maintained Provisioning settings and Global Provisioning settings
- Modified MSMP workflow and BRF Rules for Access request
- Maintained Role owners for Roles
- Created Teams, Data Access profiles & Task profiles
- Imported Roles basing on Teams from BW system to GRC system
- Created Analysis authorization basing on Info cubes
- Role Maintenance in GRC like Role Creation, Update and Import etc
- Responsibility in security related tables such as AGR
- And USR
- Monitoring the Work inbox and approving the GRC requests
- Created GRC requests for user creation, password reset, locking and unlocking of users
- Producing SOD Analytical Report for Users, Roles and profiles using RAR
- Created FF ID’s, owners, controllers and mapping them
- Role Upload, Role Update in GRC with correct role content and assignment approvers
- Experience in tables GRACFFUSER, GRACROLE, GRACROLEAPPRVR, GRACSUBC
- Enhancement of SAP GRC 10.1 with BPC 11.0
Lead Security Consultant
HPE (People frame Payroll)
02.2018 - 12.2018
- Company Overview: Implementation of S/4HANA with GRC
- Handled Security in designing roles for SAP ECC, GRC and S/4 HANA Database
- User and Role administration of all SAP Systems in both Production and Project systems
- Role Maintenance in GRC like Role Update and Import etc
- Assigned Roles owner and approvers for the Roles
- Created business user and technical user Hana data base
- Created Roles with respective privileges such as system privileges, object privileges, package privileges etc
- Troubleshooted authorization issues in Hana database by using trace
- Implemented & Supported GRC 10
- 1 Access control (ARM, EAM)
- Involved in customizing of MSMP workflow and BRF rules
- Created Rule id’s and mitigation id’s and maintained
- Analysis and processing SOD issues using GRC 10/1 access control tool such as ARA, EAM, ARM & BRM
- Involved in SAML configuration along with basis team
- Troubleshooted access issues using SU53, ST01 & Stauthtrace
- Implementation of S/4HANA with GRC
Senior SAP Security Consultant
Blueprint Technology
10.2017 - 01.2018
- Company Overview: SAP Support
- Involved in daily activities in creation of user, modifying access of user, deletion, lock and unlock of users
- Performed Role modification and clean-up of Roles
- Created transport request for transporting of Roles using charm
- Worked on security related ticket using Remedy ticketing tool
- Analysing and troubleshoot of access issues using SU53, ST01 & Stauthtrace
- Performed Monthly activities for system clean-up activities and user cleanup activities
- Mentoring the team in Security activities
- SAP Support
Senior SAP Security Consultant
Atum IT
03.2016 - 08.2017
- Company Overview: Implementation of Fiori security 1503 and S/4 Hana UAM
- Conducted meetings with product owners to gather project requirements and prepare a common design for security roles
- Involved in business meetings with Functional & Technical Team for Requirement gathering
- User and Role administration of all SAP Systems in both Production and Project systems
- Troubleshooted access issues using SU53 and SUIM & Authorization traces (ST01 & Stauthtrace)
- Created Catalogs & Groups & Custom apps
- Created groups and assigned access to users in BOBJ
- Created analysis authorizations in BW using RSECADMIN
- Created Roles and assigned privileges as per business requirement
- Support experience in FS-PM, FS-QUO, ECC, CRM, FIORI
- Created Developer & Access Keys, SID’s in Service Market Place
- Implementation of Fiori security 1503 and S/4 Hana UAM
Senior SAP Security Consultant
Atum IT
09.2015 - 02.2016
- Company Overview: Implementation of GRC 10.0 & ECC
- Configured GRC 10.0 in AC (EAM, ARM)
- Configured & Assigned Connectors and Connector groups
- Maintained Provisioning settings and Global Provisioning settings
- Modified MSMP workflow and BRF Rules for Access request
- Maintained and Role owner and Approvers for Business Roles
- Created Rule ID and Mitigation ID’s and maintained
- Created FFID and provided as per business requirement upon approvals
- Performed User Administration & Role administration activities
- Troubleshoot of access issues using SU53 and SUIM
- Troubleshooting roles based on Authorization traces
- Raised a request for User creation and modification of access through ARM
- Created Controls, Org units in GRC Process controls 10.0
- Followed SOD matrix as per business requirement
- Implementation of GRC 10.0 & ECC
Senior Software Analyst
Accenture
05.2014 - 01.2015
- Company Overview: SAP Support
- Performed User Administration & Role administration activities
- Troubleshooting of access issues using SU53, ST01 & SUIM
- Maintain Users and authorizations in CRM system
- Experience in HR Security in Personal Administration
- Monitoring the user overview
- Assigning role using IDM
- Provided Fire-fighter access using GRC (EAM)
- Experience in Access Request management (ARM)
- Created Developer & Access Keys, SIDs in Service Market Place
- SAP Support
Senior Software Analyst
Accenture
10.2013 - 05.2014
- Company Overview: Implementation of SAP PLM 7.02 with NWBC 4.0
- Conducted meetings with product owners to gather project requirements and prepare a common design for security roles
- Involved in business meetings with Functional & Technical Team for Requirement gathering
- Create SAP roles in the development system using Profile Generator (PFCG)
- Experience for creating user IDs based on a standard naming convention, setting up of new users, modifying user accounts, resetting passwords, locking, and unlocking user IDs
- Troubleshooted of access issues using SU53, ST01 & SUIM
- Conducted unit test and regression test for build SAP roles
- Used LSMW script for mass upload
- Followed SOD matrix as per business requirement
- Opening OSS connections and maintaining details in Secure Area
- Experience in Early Watch Alerts reports provided by SAP
- Serve as the security POC for all security related defects
- Transported roles between instances
- Provide SAP security related fixes for System Test, Quality Assurance Test, and UAT
- Implementation of SAP PLM 7.02 with NWBC 4.0
Senior Software Analyst
Accenture
03.2011 - 01.2013
- Company Overview: Rollout
- Created Users, modifying user accounts, resetting passwords, locking and unlocking user IDs
- Troubleshoot of access issues using SU53, SUIM & ST01
- Created and Modified Business Roles using Profile Generator (PFCG)
- Experience in Portal and BI Security
- Used SU24 for Check Indicators
- Performed Monthly activities like locking, deleting users
- Applied Support packs
- Daily monitoring of System Activities
- Coordinated with Functional teams of respective business areas and setup test user id’s and tracked the project the UAT
- Experience in Solution Manager Charm in transporting roles within the landscape
- Prepared estimations of System activities
- Prepared reports based on EWA details given by SAP
- Created roles and checking SOD violations
- Responsible in enterprise portal security
- Rollout
SAP Security Administrator
Radiant Info Systems
11.2010 - 03.2011
- Company Overview: Sap Support
- Users, modifying user accounts, resetting passwords, locking, and unlocking user IDs
- Creating and modifying roles by using PFCG
- Troubleshoot of access issues using SU53, SUIM
- Monitoring ABAP dump analysis by ST22
- Transporting requests across the systems and troubleshooting transport related issues
- Responsible in windows platform with oracle database
- Sap Support
Windows Systems Engineer
CARE IT SOLUTIONS
12.2010 - 08.2010
Windows Systems Engineer
CMS COMPUTERS LTD
02.2006 - 12.2006
Education
Bachelor of Technology - Computer Science
JNTU University
Skills
SAP R/3
Certification
SAP Certified Application Associate - SAP Access Control 12.0
Accomplishments
- Accenture Excellence Award, 2014
- Best Employee in Q4 in ATUM IT, 2015
Skills
SAP R/3, SAP ECC, SAP BW, SAP BOBJ, SAP BPC, SAP FIORI, S/4 HANA, SAP GRC AC (ARM, ARA, BRM, EAM), Solution Manager, IDM, BTP, IAG, Service now, Jira, BMC Remedy
Timeline
Lead Security Consultant
Triesten Technologies
09.2024 - Current
Lead Security Consultant
Genpact
01.2023 - 07.2024
Lead Security Consultant
Genpact
03.2022 - 12.2022
Lead Security Consultant
NTT DATA (Datamatics Payroll)
04.2021 - 02.2022
Senior Security Consultant
Dickinson Associates
11.2020 - 04.2021
Senior Security Consultant
Dickinson Associates
04.2020 - 10.2020
Senior Consultant
Backoffice Associate (Syniti)
10.2019 - 04.2020
Lead Security Consultant
HPE (People frame Payroll)
02.2018 - 12.2018
Senior SAP Security Consultant
Blueprint Technology
10.2017 - 01.2018
Senior SAP Security Consultant
Atum IT
03.2016 - 08.2017
Senior SAP Security Consultant
Atum IT
09.2015 - 02.2016
Senior Software Analyst
Accenture
05.2014 - 01.2015
Senior Software Analyst
Accenture
10.2013 - 05.2014
Senior Software Analyst
Accenture
03.2011 - 01.2013
Windows Systems Engineer
CARE IT SOLUTIONS
12.2010 - 08.2010
SAP Security Administrator
Radiant Info Systems
11.2010 - 03.2011
Windows Systems Engineer
CMS COMPUTERS LTD
02.2006 - 12.2006
Bachelor of Technology - Computer Science
JNTU University
Similar Profiles
Chong Soo KenChong Soo Ken
Cloud Finance Speciallist (Cloud BG CFO) at Sparkoo Technologies (Malaysia) Sdn. Bhd (Cloud Subsidiary for Huawei Technologies (Malaysia) Sdn Bhd)Cloud Finance Speciallist (Cloud BG CFO) at Sparkoo Technologies (Malaysia) Sdn. Bhd (Cloud Subsidiary for Huawei Technologies (Malaysia) Sdn Bhd)
SRIRAM RSRIRAM R
Software Quality Analyst at GAVS Technologies (formerly Neurealm Technologies Pvt Ltd)Software Quality Analyst at GAVS Technologies (formerly Neurealm Technologies Pvt Ltd)
Venkata Nagaraju InakolluVenkata Nagaraju Inakollu
Technical Lead(System Design) at Relysys Technologies Pvt Ltd (now Invendis Technologies pvt ltd)Technical Lead(System Design) at Relysys Technologies Pvt Ltd (now Invendis Technologies pvt ltd)
Sandeep K MenonSandeep K Menon
Lead Security Consultant at Allstate India Private LimitedLead Security Consultant at Allstate India Private Limited
Mayank SahuMayank Sahu
Lead Security Consultant at SecureITLead Security Consultant at SecureIT