SAP GRC est l’abréviation de SAP Governance, Risk and Compliance.
C’est une solution permettant de gérer les risques, les contrôles et la conformité.
Partner :
Head of a team of 15 consultants
SAP S/4 Hana Authorisations & GRC 12 Expert referent
Workload management for multiple clients and consultants’ assignments
Budget management up to 2M€
International project management
Project : SAP S/4 Hana authorization full scope deployment – 2 Years – Part time – On
going
S/4 Security Program Director:
Define the IT strategy & Security guidelines for SAP ECC migration to S/4 FIORI
Workshop conduction for S/4 business requirements
Roles redesign for S/4 implementation
Wave deployments ongoing on 20 countries
Management of a team of 2 authorisation experts for roles technical creation
Support for worldwide deployment
Audit and improvement of the SAP security processes and user provisioning
Planning, management and follow up of the project
Project : SAP S/4 roles definition – 1 Year – Part time
GRC & SAP Security Program Director:
Define the IT strategy & Security guidelines for SAP ECC migration to S/4 FIORI
Preparation of the S/4 Hana migration
Interface between the business and IT for communication facilitation
Management and motivation of an international team over 3 continents
Management of a team of 2 consultants technical experts
Audit and improvement of the security processes
Ensure security, availability and performance of the systems
Project : GRC 12 Implementation & SAP SECURITY End to End Review – 1 Year Part time
SAP GRC 12 Expert:
Full authorization redesign and S/4 preparation for migration
Roles optimization and SoD compliancy – All business modules – 10K users
Management of 2 Technical experts and coordination
Worldwide roll out & trainings
SAP GRC Upgrade from 5.3 to 12- Design & Roll Out
Workshop Conduction - Strong change management - Project steering and management
SLA definition for service delivery
Project : Authorizations Full technical redesign – 9 Months Part time
Sap Authorizations expert & Project manager :
Full authorization redesign
Preparation for SAP S/4 hana migration
Roles optimization and SoD compliancy – All business modules
Workshop Conduction - Strong change management - Project steering and management
Project : Project Risk Management 2.0 - SAP GRC 12 enhancement project – 2 Years Part time
GRC & SAP SECURITY Advisor:
Business Requirements and global quality assessment for SAP GRC Solution
SAP roles maintenance and evolution (FICO – SD – MM – BC – PP – PM – BI - HR)
SAP GRC 12 migration from 10.1 and process review for better User experience
SAP GRC 12 : Module ARA Access Risk Analysis matrix review and simplification for a better follow-up
SAP GRC 12 : Module ARM workflows review and enhancements implementation for a smoother experience
SAP GRC 12 : Module SPM for firefighter users assessment and lifecycle proposals for enhancements
Project : Project IDEO – SoD Matrix definition - 3 months
GRC Project manager:
Business Process mapping (Finance – Retail – Supply chain)
SAP technical Process Mapping (FICO – SD – MM – WM - CS)
Definition of the SoD Matrix (Business Matrix and technical matrix)
Change management: Focus on SoD topics awareness for business teams
Project : Project SHIELD 2 - GRC Brainwave Tool deployment – 1 Year – Part Time
GRC Advisor and referent
Enhancement of the SoD matrix for Cross application SoD analysis – Addition of SAP B1 and Sap By Design
Roles adjustments after Sod analysis
Users remediation to remove or mitigate SoD Risks
Working with externaliazed TMA for roles technical delivery
Project : Busines Roles & security redesign - 6 months
SAP Security expert
Sap security roles redesign
Workshop for business roles proposals
Implementation for business roles worldwide
Assistance and steering for deployment of the new solution on 10 subsidiaries
Change management for solution adherence
Project : PROJECT SHIELD 1 - GRC Brainwave deployment – 1 Year – Part Time
GRC Advisor:
Referent expert for SAP security and GRC topics – Sod Risks explanations
Conduct workshops to define business requirements for user access management
Produce and maintain project documentation (project plan, RACI, Dash-boards)
Business Matrix review, update and transformation into a technical matrix
Onboard and manage project technical and functional teams
Design Target Operating model process for the new User Access Management workflow
Organize, lead and follow up on project workshops, weekly teams meetings
Address and manage project risks
Client : IMA ( Inter Mutuelles Assistance )
Project : Sap security skill center manager – 2 Years – Part Time
SAP Security Referent :
SAP ECC Roles full redesign
Financial and operational processes security guidelines definition – Workshops conduction
Internal Audit: Walkthrough and test instructions documentation
Internal Control: Risk Matrix definition and analysis of controls deficiencies and action plans set up
Coordination of Worldwide rollout for sap solution – Modules FI/CO/SD/MM/GRC
GRC compliancy guaranty for SAP processes (SOX) and the authorization solution
Client : BEL Group
Project : SAP GRC Project - Change Management for business transformation – 2 Years – Part Time
Assignment 1 : SAP Security and GRC project leader
Mitigating Controls definition and deployment with Group internal control team
Business workshops conduction for IT workflow redesign and process optimization
Implementation of SAP GRC 10.0 ARM automatic workflows to ensure compliant user provisioning
SAP ECC & BI authorization security roles redesign for the new workflow parameters
Trainings for key users
KPI definition for the project follow-up, deployment for risk exposure
Assignment 2 : SAP GRC 10.0 Project – Access control - Whole project lifecycle
Worldwide implementation and deployment 19 Subsidiaries
Local Business Process workshops conduction (On site workshops)
Deployment of SAP GRC Access control 10.0 (ARA) remediation plan for all subsidiaries
Access control implementation ( Risks analysis / Super Privilege user Management )
Core group mitigating controls adaptation for local constraints ( SoX compliant )
Definition of all Mitigating controls needed with internal control team