01/2007
Baccalaureus: Arabic and Islamic Studies
Arabic and literature Faculty, Damascus
CERTIFICATIONS
SAP Security & Access Governance
SAP Security & Authorisations, User Access Management, Access Governance, Segregation of Duties, Privileged Access Management, Access Reviews, Role Ownership Governance and Risk Ownership Governance
Role Design & Security Architecture
Business, Composite, Single, Derived and Master Roles, Role Redesign, Organisational Value Segregation, Authorisation Concepts, Technical Role Design and Business Role Design
Audit, Compliance & Risk
ISO 27001, SOX, GDPR, Internal & External Audit Support, Compliance Reviews and Audit Engagements with KPMG, PwC and Deloitte
SAP GRC Access Control
Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), Business Role Management (BRM), Mitigation Controls, Risk Analysis & Remediation, Firefighter Administration and SAP Identity Access Governance (IAG)
SAP Transformation Programmes
S/4HANA Upgrades, SAP GRC Upgrades, Business Separation Programmes, Newco/Retainco Security Models, TSA/Non-TSA Access Models, Cutover Planning and Hypercare Support
SAP Landscape Experience
SAP ECC, SAP S/4HANA, SAP Fiori, SAP BW/BW4HANA, SAP GRC Access Control, SAP CRM, SAP MDG, SAP NetWeaver and integrated enterprise applications
Profile
Senior SAP Security, Authorisations & GRC Consultant with 9+ years of experience delivering SAP security, access governance and compliance solutions across SAP ECC, S/4HANA, Fiori, BW and SAP GRC landscapes. SAP GRC 12.0 Access Control Certified and SAP S/4HANA Security & Fiori Certified with experience supporting SAP environments serving 12,700+ users and the governance, review and redesign of 15,000+ Business, Composite, Single and Master Roles. Specialised in SAP Security, User Access Management (UAM), Segregation of Duties (SoD), Access Risk Analysis (ARA), role design, SAP GRC Access Control, audit support and security transformation programmes. Delivered key security workstreams for National Grid?s Gas and Electricity separation programme and Air Liquide?s multi-country User Access Management transformation across 15 countries and 60 business systems.
CAREER HIGHLIGHTS
TECHNICAL EXPERTISE & TOOLSET
SAP Security Administration
Role & Authorisation Management
SAP Security Toolset
SAP GRC Administration
Testing & Deployment
KEY SAP PROJECTS
National Grid ? Gas & Electricity Separation Programme
Supported one of the largest business transformation programmes within National Grid, delivering SAP Security and GRC services for the separation of UK and US Gas and Electricity businesses. Activities included Newco and Retainco role design, business-role governance, technical-role redesign, organisational-value segregation and access-governance controls.
SAP GRC Governance & Role Ownership Transformation
Established and maintained Role Owner, Risk Owner, Mitigation Monitor and Approver governance models within SAP GRC. Supported access-governance processes, risk-management activities, mitigation controls and compliance requirements across large SAP landscapes.
BW Analysis Authorisation Segregation
Designed and supported BW Analysis Authorisation controls to segregate reporting access between Gas and Electricity organisations, ensuring users could only access authorised business data and reporting structures.
MDG Vendor Data Segregation
Supported the implementation of vendor master-data segregation controls using Authorisation Groups and business-process controls, ensuring separation of sensitive vendor information between business entities.
TSA / Non-TSA Access Model
Designed and supported Transitional Service Agreement (TSA), Non-TSA and Cutover access models to ensure secure business continuity throughout organisational separation and transition activities.
SAP S/4HANA, BW & GRC Upgrade Programme
Supported post-upgrade SAP Security and GRC activities including SU25 remediation, role impact assessments, connector validation, synchronisation activities, testing support and deployment readiness across SAP S/4HANA, BW and GRC environments.
Air Liquide User Access Management Transformation
Supported the transformation and standardisation of User Access Management processes across 15 countries, 60+ business systems and 4,700+ users. Activities included role optimisation, position-based access modelling, cluster-role design, reference-user concepts, access reviews and future-state governance design.
01/2007
Baccalaureus: Arabic and Islamic Studies
Arabic and literature Faculty, Damascus
CERTIFICATIONS
SAP Security & Access Governance
SAP Security & Authorisations, User Access Management, Access Governance, Segregation of Duties, Privileged Access Management, Access Reviews, Role Ownership Governance and Risk Ownership Governance
Role Design & Security Architecture
Business, Composite, Single, Derived and Master Roles, Role Redesign, Organisational Value Segregation, Authorisation Concepts, Technical Role Design and Business Role Design
Audit, Compliance & Risk
ISO 27001, SOX, GDPR, Internal & External Audit Support, Compliance Reviews and Audit Engagements with KPMG, PwC and Deloitte
SAP GRC Access Control
Access Risk Analysis (ARA), Access Request Management (ARM), Emergency Access Management (EAM), Business Role Management (BRM), Mitigation Controls, Risk Analysis & Remediation, Firefighter Administration and SAP Identity Access Governance (IAG)
SAP Transformation Programmes
S/4HANA Upgrades, SAP GRC Upgrades, Business Separation Programmes, Newco/Retainco Security Models, TSA/Non-TSA Access Models, Cutover Planning and Hypercare Support
SAP Landscape Experience
SAP ECC, SAP S/4HANA, SAP Fiori, SAP BW/BW4HANA, SAP GRC Access Control, SAP CRM, SAP MDG, SAP NetWeaver and integrated enterprise applications
Profile
Senior SAP Security, Authorisations & GRC Consultant with 9+ years of experience delivering SAP security, access governance and compliance solutions across SAP ECC, S/4HANA, Fiori, BW and SAP GRC landscapes. SAP GRC 12.0 Access Control Certified and SAP S/4HANA Security & Fiori Certified with experience supporting SAP environments serving 12,700+ users and the governance, review and redesign of 15,000+ Business, Composite, Single and Master Roles. Specialised in SAP Security, User Access Management (UAM), Segregation of Duties (SoD), Access Risk Analysis (ARA), role design, SAP GRC Access Control, audit support and security transformation programmes. Delivered key security workstreams for National Grid?s Gas and Electricity separation programme and Air Liquide?s multi-country User Access Management transformation across 15 countries and 60 business systems.
CAREER HIGHLIGHTS
TECHNICAL EXPERTISE & TOOLSET
SAP Security Administration
Role & Authorisation Management
SAP Security Toolset
SAP GRC Administration
Testing & Deployment
KEY SAP PROJECTS
National Grid ? Gas & Electricity Separation Programme
Supported one of the largest business transformation programmes within National Grid, delivering SAP Security and GRC services for the separation of UK and US Gas and Electricity businesses. Activities included Newco and Retainco role design, business-role governance, technical-role redesign, organisational-value segregation and access-governance controls.
SAP GRC Governance & Role Ownership Transformation
Established and maintained Role Owner, Risk Owner, Mitigation Monitor and Approver governance models within SAP GRC. Supported access-governance processes, risk-management activities, mitigation controls and compliance requirements across large SAP landscapes.
BW Analysis Authorisation Segregation
Designed and supported BW Analysis Authorisation controls to segregate reporting access between Gas and Electricity organisations, ensuring users could only access authorised business data and reporting structures.
MDG Vendor Data Segregation
Supported the implementation of vendor master-data segregation controls using Authorisation Groups and business-process controls, ensuring separation of sensitive vendor information between business entities.
TSA / Non-TSA Access Model
Designed and supported Transitional Service Agreement (TSA), Non-TSA and Cutover access models to ensure secure business continuity throughout organisational separation and transition activities.
SAP S/4HANA, BW & GRC Upgrade Programme
Supported post-upgrade SAP Security and GRC activities including SU25 remediation, role impact assessments, connector validation, synchronisation activities, testing support and deployment readiness across SAP S/4HANA, BW and GRC environments.
Air Liquide User Access Management Transformation
Supported the transformation and standardisation of User Access Management processes across 15 countries, 60+ business systems and 4,700+ users. Activities included role optimisation, position-based access modelling, cluster-role design, reference-user concepts, access reviews and future-state governance design.