Abdulrahman Badrah

Managing Cyber Security teams and initiatives covering below teams: • IT Security Team • Security Operation Center Team • Access Management Team • Industrial Cyber Security Team • Key Stakeholder in Executives Cyber Security Committee

• Project Manager for Identity Access Management with below benefits: o Automating provisioning/de-provisioning for entire identities lifecycle from joining to leaving the organization. o SoD compliance checks prior and post provisioning. o Periodic User Certification/Attestation o Integration with HR and all SAP Solutions, Active Directory, VPN, Communication tools, and SOC Solutions. o Managing contractors Identities and Access. o Auto de-activating un-used Identities. o Managing temporarily delegations and temporarily job assignment. • Project Manager for Privileged Access Management by managing the privileged accounts via Workflow Approvals, Password Randomization, and Session monitoring by keystroke and video recording. • Leading the Security of S4HANA Conversion project. • Leading and dealing with internal & External Auditors. • Design and implement SAP authorization roles based on approved business processes and roles matrix. •Reviewing and updating Access Management Policies and Procedures to reflect a high standard and best practices.

• Documenting all Authorizations/Roles by defining each role Owner, Purpose, Criticality, Segregation of Duties, Applicability, and Transaction Codes. • Day to Day support, resolving all SAP Authorization issues. • Supporting multiple projects such as: o HEC (HANA Enterprise Cloud) Migrating all SAP systems to HANA Enterprise cloud with upgrading the system from EHP6 to EHP8. o SAP SuccessFactor Implementation Attended all workshops for SAP SF to ensure proper controls are in place. • Analyzing and evaluating top IAM solutions (Identity and Access Management) such as (SailPoint, One Identity, SAP, Zservices, and IBM IGI Enterprise) • Analyzing and evaluating top PAM (Privileged Access Management) solutions such as (Beyond Trust, One Identity, and IBM security secret server Solution "Thycotic") • Conducting periodically UAR (User Access Review) to ensure the appropriateness of a users' access to systems and applications.

ARAMCO Projects: Enhance, Secure and simplify their SAP system/processes. • FRACAS (failure reporting, analysis, and corrective action system – Enhance and simplify the process with a user-friendly interface using HTML UI5) • PMO (Preventive Maintenance Optimization – Enhance and simplify the process with a user-friendly interface using HTML UI5) • SCE SAP Ariba (Supply Chain Excellence – SAP Ariba Implementation)

Leading Service team and Project team.
 Leading IDM-GRC implementation (eAccess Project). 
Leading Global Job Role Building project. 
iTEC Leader. Working with both internal and external auditors.

SAP Security/Authorization Consultant Developed, maintained and controlled the access of the IT team members in the all environments. User Administration and maintenance. Find out missing Authorizations using SU53 report from the user. Providing technical support to functional areas, configurations and developers. User Trace using ST01 and analysis. Updating transactions via SU24 (managing authorization objects) Troubleshooting. Designing and building roles. Managing mass transport. Authorization objects and Analysis authorization. Creating monthly audit report. Role Maintenance.