Harika Meduri

Participated in SAP GRC upgrade from 10.1 to 12 contributing to security strategy design and integration into existing governance framework.  Managed GRC Access Control configurations including risk analysis, mitigation controls, emergency access setup, and user provisioning. Provided end-user support and training ensured secure firefighter ID usage, monitored workflows and automated controls in the GRC backend.  Assessed design and operational effectiveness of SAP automated controls throughout the business cycle, delivering actionable recommendations to improve internal control environments.  Supported internal and external audits by documenting control procedures, testing results, and remediation plans in SAP environments.  Designed and implemented roles across S/4 HANA (Transactional and MDG), Fiori Gateway, and GRC systems, including catalog and group integration for Fiori apps.  Collaborated with business and SAP teams to develop and maintain roles and authorizations, activate Fiori services, and troubleshoot authorization/OData issues.  Supported cut-over activities and go-live efforts for S/4 HANA.

Participated in business meetings for gathering requirements related to ARA rule set and internal/mitigation controls.  Designed test scripts and supported regression and UAT testing for GRC Access Control. Provided SOD recommendations, gap analyses, and documentation updates aligned with SOX compliance.  Implemented role changes, performed risk analysis, and resolved complex SAP security issues using tools like ST01, SU53, and SUIM.  Conducted unit testing, transported roles, and supported audit discussions. Worked closely with functional teams for role design, deployment, and hyper care support.  Collaborated with Fiori configuration teams to optimize catalogs, resolve inactive app issues, and enhance performance.  Contributed to S/4 HANA security role design and managed business rules for automated controls in GRC.  Delivered quick-turnaround support and user training throughout the project lifecycle.

Extensive experience in SAP security administration, including creation and maintenance of single, composite, master-derive, and task-enabler roles across key modules FI/CO, SD, MM, PP, HR, BW, etc.  Conducted SOD risk analysis for role redesign and managed role transport across systems using CHARM, SE10, and SE09.  Handled user administration tasks such as user provisioning, mass updates, and access changes across SAP and HANA environments. Proficient in managing critical authorization objects, customizing SU24 for transactions, and supporting Fiori role design with catalogs and groups.  Supported GRC modules including ARM (access requests, MSMP workflow issues), EAM (Firefighter ID management), and BRM (business role creation and compliance ownership).  Conducted SOD risk reviews, maintained mitigating controls, and participated in SOX-aligned ITGC audits. Experienced in SAP HANA Studio for user and role management, SAML property configuration, and backup during QA refreshes.  Administered SAP Marketplace access, including OSS support ID updates and S-User ID creation.  Administered user lifecycle management in Success Factors, including creation of various user types and access issue resolution. Experienced RBP administrator, proficient in managing roles, permissions, and group configurations. Capable of performing RBP backup and restore during system refreshes. Adept at integrating Success Factors with Onassis to detect and mitigate high-risk vulnerabilities, ensuring robust system security and compliance.

Implemented and configured SAP GRC AC 10.1 including Access Risk Analysis (ARA), Emergency Access Management (EAM), and Access Request Management (ARM).  Led ECC role redesign to mitigate SOD conflicts identified during GRC implementation, ensuring SOX compliance.  Set up and managed User Access Reviews (UAR) across production systems.  Resolved complex GRC issues in access requests and risk analysis. Developed SOD rules based on audit requirements, and supported Firefighter ID management and log tracking.  Configured BRF+ rules (Initiator, Agent, Routing, and Notification).  Delivered quick-turnaround support, educated stakeholders on GRC processes, and utilized SAP Service Marketplace for various administrative tasks.

 Managed full lifecycle of role administration, including creation, modification, and deletion, with a focus on modules such as FI, MM, SD, and PP.  Built and maintained master/derived roles, leveraging AGR* and RSUSR* reports for analysis and compliance.  Resolved authorization issues using SU53 and assigned access based on proper approvals. Conducted SoD risk analysis and mitigation using GRC tools, managed emergency access roles, and created audit reports.  Scheduled and monitored background jobs (SM36/SM37), maintained RFC connections (SM59), performed LDAP syncs, and supported compliance audits to ensure SOX adherence.  Also managed OSS connections and S-User ID maintenance.