Ashfaq Zaffer

Background

About Ashfaq Zaffer

PROFESSIONAL SUMMARY: Over 22+ years of Experience as Software Developer. Having 17+ years of Experience as SAP Security /GRC Consultant. WORK EXPERIENCE: Company Name: Astra industries (June 2011-Present) 17+ years of SAP experience with SAP authorizations (ERP and HANA). 5+ years of Governance, Risk, and Compliance (GRC) solutions. SAP Security Consultant - Tata Consultancy Services · Full-time Tata Consultancy Services · Full-time Nov 2013 - Dec 2014 · 1 year 2 month. Manage SAP Support to All the AIG subsidiaries which are spread across different countries Turkey, Jordan, Iraq, Algeria, Sudan, Dubai, Morocco, Oman. SAP Security Consultant Wipro · Full-time Jun 2011 - Nov 2012 · 1 year 6 months Jun 2011 - Nov 2012 Worked to implement SAP Security Authorizations and manage SAP support to AIG subsidiaries. Duties: • Actively involved in the preparation, conception, realization and Go Live of customer implementation projects. • Participated in SAP audit projects reviewing SAP security and SOD controls with PWC, EY and KPMG. KEY SKILLS AND COMPETENCIES: • Expertise in SAP On-Premises and Cloud solutions security management. • Experience of Fiori, HANA, S/4 HANA. • Experience of GRC Access Control (ARA, EAM, ARM, BRM), IDM 7.2 / 8.0 applications and all its component. • Emergency Access, Access Risk Analysis, Access Risk Management, & Business Role Management, Manual/Automated Controls, Policy Management. • Experience with SAP Authorization Concept, Role design, User Administration, SOX, and SOD conflict resolution, modification in S/4, SAP R/3, Fiori, HANA,HR and portal Systems. • Rich experience in designing security for SAP ERP, BI, EWM, SCM, HCM, Ariba,Success factor, Solution manager applications • Five E2E security implementation. • Fiori authorizations and troubleshooting, Security upgrade, Upgrade tool SU25 • Good experience to Identify Authorization errors using SUIM, SU53, and ST01, etc. • Troubleshoot, analyze, and resolve Security related problems. • Experience of managing the role from single role to business roles and the approach of role-based position. • Experience to Customize the SOD rule for Custom transaction and application and consulting Business Units in reducing the SOD violations. • Worked with internal, external audit, segregation of duties analysis, and SOX compliance. Participate in SAP audit discussions, questions, and help resolve the SOD/SOX issues. Expertise in SAP Audit reports (AGR*, USR*) • Managed the Portal roles and understand basic requirements for new portal functionality.