KAJAL THAKKAR
Ontario
Summary
SAP Security & GRC Consultant with 5+ years supporting enterprise SAP landscapes (S/4HANA, ECC, Fiori, HANA) specializing in SAP GRC Access Control (ARA/ARM/EAM), role design (PFCCG), and SoD risk management. Experienced in S/4HANA transformations—translating security requirements into role/authorization designs, conducting security testing (SIT/UAT), and supporting cutover/hypercare activities aligned to project governance and SAP Activate phases. Strong background in Firefighter/emergency access management, SOX/GDPR compliance, stakeholder coordination, WRICEF/security requirements governance, audit evidence/KPI reporting, and knowledge transfer to support teams.Hands-on expertise in SAP GRC Access Control 10.1/12.0, including Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM/Firefighter), Business Role Management (BRM), Segregation of Duties (SoD), risk remediation, and access governance.Strong SAP authorization and role-design experience using PFCCG, Single/Composite/Derived/Business Roles, authorization objects, RBAC, least privilege, SU124, SU25, and end-to-end user access lifecycle processes.Experienced in authorization troubleshooting and root-cause analysis using SU53, SUIM, ST01, STAUTHTRACE, RSECADMIN, AGR/USR/UST tables, and authorization-object analysis.Background in SAP security governance, compliance, audits, S/4HANA transformations, implementations, rollouts, upgrades, cutover, hypercare, ITGC, SOX, GDPR, ICS, GMP/GxP, UAR, ServiceNow, Jira, ChaRM, HPQC, SECATT, and SAP GUI Scripting.
Overview
7
7
years of professional experience
Work History
SAP Security & GRC Consultant
Johnson & Johnson
Markham, ON
06.2024 - Current
- Administer SAP GRC Access Control 12.0 (ARA, ARM, EAM, and BRM) for access requests, automated risk analysis, approval workflows, role governance, and controlled provisioning.
- Perform SoD analysis and remediation by identifying conflicting access, evaluating business risk, coordinating role corrections with functional teams, and implementing mitigating controls.
- Manage EAM/Firefighter and privileged-access processes, including Firefighter ID assignments, emergency approvals, controller activities, usage monitoring, and review of logs for auditing.
- Design and optimize PFCCG Single, Composite, Derived, and Business Roles using authorization objects, organizational levels, RBAC, least-privilege principles, SU24, and SU25; apply Fiori authorization model concepts where applicable.
- Manage user access lifecycle (provisioning, deprovisioning, role assignments, access modifications), UARs, password management, lock/unlock activities, and access reviews across integrated SAP systems.
- Secure S/4HANA and Fiori applications via Launchpad configuration (business catalogs, spaces/pages/tiles, target mappings), OData/ICF service controls, and backend PFCCG authorizations.
- Resolve complex authorization issues using SU53, SUIM, ST01, STAUTHTRACE, RSECADMIN, authorization objects, and AGR/USR/UST analysis; perform root-cause analysis and corrective access changes.
- Support ITGC, SOX and GDPR controls, prepare audit evidence, participate in internal/external audits, and monitor/report security KPIs and audit findings to stakeholders.
- Support security activities across implementations, cutover and hypercare by coordinating role transports, emergency access provisioning, and post-go-live stabilization; deliver knowledge transfer to support teams.
SAP Security Consultant
Tata Steel
India
11.2020 - 08.2022
- Designed and maintained PFCCG Single, Composite, Derived, and Business Roles using authorization objects, organizational levels, RBAC, and least-privilege principles.
- Optimized authorization proposals (SU24/SU25) and validated transaction-to-authorization relationships during role changes and S/4HANA transformation activities.
- Managed user access lifecycle (provisioning, role assignments, access modifications, deprovisioning, password management) and processed access requests across integrated SAP systems.
- Administered SAP GRC Access Control 10.1 supporting ARA, ARM, BRM, EAM/Firefighter, access risk analysis, request workflows, role governance, and privileged-access reviews.
- Investigated authorization issues using SU53, SUIM, ST01, STAUTHTRACE and AGR/USR tables, and authorization-object analysis; performed root-cause analysis and implemented corrective access changes.
- Secured SAP Fiori Launchpad (catalogs, tiles, target mappings), OData and ICF services, and backend PFCCG authorizations.
- Managed SuccessFactors security (RBP, Permission Roles, Permission Groups, and Target Groups; supported BW/BI and HANA security using Analysis Authorizations, RSECADMIN, and user/privilege administration.
- Supported UARs, ITGC and SOX control activities, coordinated security testing during SIT/UAT, and assisted cutover, Jira, and SAP Solution Manager/ChaRM.
- Coordinated with functional teams to translate business security requirements into role designs and supported security governance for WRICEF objects.
SAP Security Associate Consultant
Capgemini
India
06.2019 - 10.2020
- Maintained SU24 authorization proposals and validated transaction-to-authorization mappings to support accurate role assignments.
- Managed SAP user administration and access provisioning, including user creation, modifications, role assignments, deprovisioning, password resets, and lock/unlock activities.
- Investigated authorization issues using SU53, SUIM, ST01, and authorization-object analysis; implemented corrective authorization changes.
- Developed and maintained SAP security blueprint documentation to ensure compliance and system integrity.
- Supported SAP GRC EAM/Firefighter processes including emergency access assignments, approvals, usage monitoring, and privileged-access reviews.
- Administered BW/BI security using Analysis Authorizations and RSECADMIN; used SUIM reporting to analyze users, roles, profiles, and authorizations.
- Processed security incidents and service requests within SLAs and supported ITGC, user access reviews, audits, security evidence, changes, and transports using ChaRM, ServiceNow, and HPQC.
- Developed and maintained PFCCG Single and Composite Roles based on functional requirements, transaction requirements and authorization structures.
Education
Master of Commerce - Finance & Accounting, Global Business Management
Georgian College
04-2024
Master of Commerce - Finance & Accounting
Gujarat University
03-2019
Skills
- SAP Platforms
- SAP S/4HANA, SAP ECC 60, SAP R/3, SAP Fiori, SAP HANA, SAP BW/BI, SAP NetWeaver, SAP BTP
- SAP Security & Authorizations
- SAP Security Administration, User & Access Lifecycle, PFCCG, Role Design, Single Roles, Composite Roles, Derived Roles, Business Roles, Authorization Objects, RBAC, Least Privilege, SU24, SU25
- SAP GRC & Identity Governance
- SAP GRC Access Control 101, SAP GRC Access Control 120, ARA, ARM, EAM, Firefighter, BRM, SoD, UAR, Access Provisioning, Risk Remediation
- Fiori & S/4HANA Security
- Fiori Launchpad, Business Catalogs, Spaces, Pages, Tiles, Target Mappings, OData Services, ICF Services, Frontend/Backend Authorization
- Security Analysis & Monitoring
- SU53, SUIM, ST01, STAUTHTRACE, RSECADMIN, AGR/USR/UST Tables, Security Audit Log, SM19, SM20
- HANA, Cloud & Identity
- HANA Security, User & Privilege Management, SAP BTP Security, Role Collections, SAP IAS, SAP IPS, SAP Solution Manager/ChaRM
- BW/BI & SuccessFactors
- Analysis Authorizations, SAP SuccessFactors, Role-Based Permissions (RBP), Permission Roles, Permission Groups, Target Groups
- Compliance & Governance
- SOX, ITGC, ICS, GDPR, GMP/GxP, Risk Assessment, Security Governance, Internal & External Audits
- ITSM & Delivery
- ServiceNow, Jira, SAP Solution Manager/ChaRM, HPQC, Incident Management, Change Management, Request Management, Release Management, ITIL, Agile/Scrum
- Automation
- SECATT, SAP GUI Scripting
Accomplishments
- Supported 100+ SAP users with access and authorization requests.
- Maintained and updated 50+ SAP security roles across multiple SAP systems.
- Resolved 20+ access and authorization issues weekly within established SLAs.
- Supported quarterly user access reviews and audit activities.
- Assisted with remediation of SoD conflicts and access risks.
- Supported multiple SAP environments including ECC, S/4HANA, Fiori, BW/BI, and GRC.
- Helped improve turnaround time for access requests through standardized processes and automation.
- Maintained timely completion of security tickets and access requests within SLA targets.
Personal Information
Title: SAP Security & GRC Consultant
Timeline
SAP Security & GRC Consultant
Johnson & Johnson
06.2024 - Current
SAP Security Consultant
Tata Steel
11.2020 - 08.2022
SAP Security Associate Consultant
Capgemini
06.2019 - 10.2020
Master of Commerce - Finance & Accounting
Gujarat University
Master of Commerce - Finance & Accounting, Global Business Management
Georgian College