Acerca de Sandro
- SAP Security & GRC lead with 6+ years in global, regulated environments, delivering User Access Management, SoD/Riskcontrols, and Fiori authorization concepts across multi-country landscapes, including contribution to S/4HANA rollout andtransformation programs in Europe.
- Strong delivery mindset: translate business requirements into scalable role models (Business Roles, Master/Derived),drive backlog execution (Jira), and ensure audit-ready outcomes under tight SLAs.
- Experienced coordinating stakeholders across IT, business, and external partners (integrators, support teams) to alignscope, risks, dependencies, testing evidence, and go-live readiness for large SAP rollout/migration initiatives.
- Hands-on with SAP GRC Access Control (ARA/ARM/BRM/EAM), ChaRM transports, and troubleshooting (SU53,STAUTHTRACE, /IWFND), supporting cutover and hypercare activities when required.
- Fluent Spanish (native) and English (C1); available to travel across Europe.
- SAP program delivery for Security & GRC workstreams: governance, RAID management, stakeholder alignment,milestone tracking
- SAP GRC Access Control: Access Request Management (ARM), Emergency Access (EAM/Firefighter), Access Risk Analysis(ARA/SoD), Business Role Management (BRM)
- SAP User Access Management & Authorizations: single/composite/master/derived roles, SU01/SU10 provisioning, SUIMreporting, SU24 maintenance
- SAP Fiori security: catalogs, groups, spaces/pages, target mappings, OData/SICF activation, hub & embedded setups.
- Change & transport management: ChaRM, SE01; incident/change handling in SLA-driven support models
- Tools: Jira, ServiceNow, HP ALM, BMC Remedy; documentation and traceability for audits (GxP-aligned controls)
- AI & automation: LLM-assisted triage and lightweight RAG pilots over SOPs/policies (security use cases)
Español
Bilingüe o nativo
Inglés
Competencia profesional completa
Catalán
Competencia profesional completa
Experiencia
- Boehringer IngelheimSenior System Analyst - (SAP Authorizations and SAP GRC)INDUSTRIA FARMACÉUTICAjunio de 2023 - Hoy (3 años)
- Own day-to-day delivery for SAP User Access Management and GRC Access Control, ensuring compliant accessprovisioning, SoD checks, and emergency access controls.
- Translate business and audit requirements into scalable role models (Business Roles, Master/Derived) and maintaingovernance across the role lifecycle (design, build, testing evidence, deployment).
- Coordinate with business, SAP technical teams, and external partners to manage dependencies, resolve authorizationissues, and keep milestones on track in regulated (GxP) contexts.
- Supported S/4HANA rollout go-live readiness for the Security & GRC stream: UAT authorization defect triage, roleadjustments, access risk validation, and hypercare stabilization.
- Drive backlog execution and SLA-based incident/change handling using Jira and ITSM tooling; ensure full traceability andaudit-ready documentation.
- Lead SAP Fiori authorization concept activities (catalogs, groups, spaces/pages, target mappings), including OData/SICF activation and troubleshooting with STAUTHTRACE and /IWFND logs.
- AccentureSAP Senior Security & GRC - Business & Integration Arch Analyst / Sr Arch AnalystINDUSTRIA FARMACÉUTICAnoviembre de 2021 - mayo de 2023 (1 año y 6 meses)
- Delivered SAP Security & GRC work packages for enterprise clients, balancing operational support with continuousimprovement initiatives (role redesign, risk ruleset tuning, governance).
- Configured and supported SAP GRC Access Control modules (ARM/MSMP workflows, ARA risk analysis, EAM Firefightercontrols, BRM lifecycle governance).
- Collaborated with functional teams, Basis, and integrators to align authorization design with process design, testingcycles, and go-live readiness.
- Supported transport and change management processes (ChaRM), ensuring consistent deployments acrossenvironments and timely issue resolution.
- Provided reporting (SUIM, t-code usage) to inform access clean-up, least-privilege role design, and risk mitigationplanning.
- CapgeminiSAP Security & GRC ConsultantSECTOR AGROALIMENTARIOjunio de 2019 - octubre de 2021 (2 años y 4 meses)
- Implemented and maintained SAP authorizations and access governance across ECC landscapes, covering role build, userprovisioning, and troubleshooting (PFCG, SU53, SU24).
- Performed SoD/risk analysis and mitigation tracking in SAP GRC; supported Firefighter setup, assignment, and log reviewcontrols.
- Contributed to project delivery through requirements workshops, documentation, testing support, and closecollaboration with cross-functional teams.
- Handled incidents and changes in ticketing tools with end-to-end traceability (HP ALM, ServiceNow, Remedy).
Recomendaciones
Sé el primero en recomendar a Sandro
Ayuda a este freelance a destacar compartiendo tu experiencia.
Estos perfiles de freelance también coinciden con tus criterios
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Formación
- Ingeniería de TelecomunicacionesUniversitat Politécnica de Valencia2020