Sarfaraz Qureshi

• Led development of a NIST-based Cybersecurity Framework for SAP.
• Spearheaded development of an AI-based Cybersecurity XDR product for SAP.
• Launched SnapPromise, an AI-driven B2B/B2C commitment platform via web and phone apps.
• Drove business development, securing key customers in US Defense, Aerospace, and other industries.

Performed services for the following Clients:

• SAP NS2 - Center of Excellence (Remote, Defense) (Jan 2021 - Current)
• Baylor College of Medicine – Enterprise Architect (Remote, Medical) (June 2022 - Jan 2024)
• Boingo Wireless - Cloud Migration Lead (Remote, Communication) (Aug 2021 - May 2022)
• General Atomics Aeronautical – Enterprise Architect (San Diego CA, Aerospace) (March 2018 - Dec 2019)
• Google - SAP Enterprise Architect (Milpitas CA, Internet) (June 2017 - May 2018)
• Disney - Lead Enterprise Consultant (Burbank CA, Entertainment) (Jan 2016 - June 2017)
• LMP Army / Northrup Grumman - Solution Architect (Richmond VA, Defense) (June 2014 - Jan 2016)
• NASA Marshall Space Center - Lead Solution Architect (Huntsville AL, Aerospace) (Nov 2012 - Jan 2014)
• McKesson - Technical Lead / SAP HANA Architect (San Francisco CA, Pharma) (Feb 2011 - Dec 2012)
• Paramount Pictures - SAP Basis Consultant (Hollywood CA, Entertainment) (Aug 2009 - Dec 2010)
• IBM - SAP OS/DB Migration Consultant (Travel, Consulting) (Feb 2006 - June 2009)
• State of California - SAP Team Manager (Sacramento CA, Utilities) (March 2000 - Jan 2006)

• SAP Cybersecurity Analysis: Led analysis of SAP Cyber Sensitive Transactions, RFCs, and Programs to ensure comprehensive monitoring inclusion
• Security Systems Integration: Configured and integrated alerts using Splunk and Onapsys into the SIEM, enhancing security monitoring
• SOPs and IRPs Development: Developed detailed Standard Operating Procedures and Incident Response Plans, governing the alert lifecycle from triage to reporting
• SIEM Configuration: Oversaw configuration for monitoring within the SIEM, focusing on User Activity and Security Patching to ensure system integrity
• Security Compliance Scans: Directed SCAP scans to evaluate SAP security measures, initiating STIG compliance for robust protection
• Vulnerability Management: Managed identification and remediation of vulnerabilities in SAP systems, aligning with security compliance standards
• Cross-Functional Collaboration: Collaborated with various teams to implement security best practices and effectively resolve security incidents
• SAP Cybersecurity Leadership: Provided expert guidance on SAP security practices, significantly enhancing the organizational security posture
• Forensic Security Analysis: Led forensic investigations to ensure thorough compliance with legal and regulatory standards
• Incident Investigation Leadership: Conducted in-depth investigations into security incidents, prepared reports for disciplinary actions, and developed strategies to mitigate future breaches
• Security Improvement Recommendations: Offered strategic recommendations for enhancing security protocols based on investigation insights and outcomes.

• SAP Sales Leadership: Directed SAP sales on GCP across North America and Europe, fostering global strategic alliances and leading go-to-market strategies.
• Marketing Strategy Development: Developed marketing plans for cloud-based enterprise solutions, exceeding client expectations and setting new standards.
• Relationship Management: Established and maintained strong business connections at all organizational levels, ensuring effective collaboration with diverse international teams.
• Tool Development: Created an SAP on GCP migration sizing and pricing tool with Google, streamlining RFP processes and enhancing sales consistency.
• Client Solutions Optimization: Tailored solutions for SAP migrations and cloud adoption, meeting specific RFP criteria while considering budget and timeline constraints.
• Cloud Support Leadership: Led the GCP support team in Argentina, enhancing local cloud service capabilities.

• Implemented SAP GRC solutions, enhancing risk management and compliance across Access Control, Process Control, and Risk Management modules
• Reduced unauthorized access through effective role-based access control strategies
• Automated key compliance processes, resulting in increased audit efficiency
• Led GCP S/4 HANA conversion from on-premises and AWS
• Implemented and administered SAP license SLAW
• Managed SAP administration, integration, forecasting, and proactive measures to ensure smooth system operation with minimal outages.

• Led the greenfield SAP S/4 HANA implementation, supporting General Ledger, Accounts Payable, Cost and Profit Center Accounting, Fixed Assets, BO Reporting, Accounts Receivable, Fixed Assets, Procure to Pay and Architecture design of ERP components
• Implemented SAP GRC for user request, authentication, roles mapping, SOD, and governance, improving compliance and risk controls
• Reduced security breaches with strategic access protocols and enhanced audit efficiency through GRC automation
• Developed GRC policies, led compliance training sessions, and provided data-driven insights using SAP GRC analytics
• Negotiated contracts, including support contracts, and determined RICEF and proper delegation with System Integrators
• Evaluated Cloud providers for SAP applications hosting on AWS, Azure, and Virtustream
• Identified new project areas and presented them to the executive team for approval
• Established operations and administration Standard Operating Procedures under FDA documentation guidelines and approvals.