1. SHRVAN KUMAR KODURU Mobile: +91 8019749987
Email: shravan8687@gmail.com SAP GRC AND SECURITY CONSULTANT
Objective:
To secure a challenging position in an organization which encourages career and
enhances growth and polish my human skills to use the same for the growth of the company with
utmost dedication while gaining valuable experience and training.
SAP Security Skill set:
 Having 3.8 years of experience in SAP security for various environments like R/3, ECC, HR,
Governance Risk and Compliance (GRC).
 Experienced in the areas of User administration, Role management, development and
troubleshooting, Testing and Reports generation in Security environment.
 Experience includes analysis, development, and maintenance of SAP Security in SAP R/3,
ECC,HR, & GRC(Governance Risk and Compliance)
 User Administration - Includes user creation, deletion, changing user access for different
systems and environments, Mass user administration.
 Experienced extensively in using PFCG in creating and modifying Single Roles, Composite
roles and Derived roles.
 Working on role changes as per the business requirement.
 Maintenance of Derived roles based on the Organizational Values differentiation.
 Roles Transportation
 Performed User Master Reconciliation for mass roles in bulk.
 Making user administration easier by using User Groups.
 Maintenance of authorization objects for transactions.
 Effectively analyzed trace files and tracked missing authorizations for users access problems.
 Expertise in Troubleshoot users access problems.
 Proficient knowledge on USR* & AGR* tables.
 Having good exposure on HR security.
 Experienced extensively in User Information System.
 Analyzing system security status and providing recommendations to avoid any kind of
vulnerabilities and mall practices in the system.
Shravan8687@gmail.com Page 1

2.  Good enough in using compliance tool like GRC.
Governance, Risk and compliance Ac 10.0:
 Access Risk Analysis.
 Emergency Access Management.
 Access Request Management.
 Enterprise Role Management.
HR Security Exposure:
 Position based role assignment and PD profile assignment.
 Mapping personnel numbers with SAP login id.
 Knowledge on HR authorization objects & basic info types.
 Troubleshooting HR issues.
Educational Qualification:
 MCA from Osmania University, Hyderabad.
Professional Experience:
 Working as a SAP Security consultant with Hora Software solutions from Aug 2012 to till
date.
Technical Skill set:
ERP : SAP ECC, HR.
Compliance tools : Governance Risk and Compliance 10.0.
Project -2
Project Nissan southafrica
Designation SAP Security and GRC Consultant.
Duration Dec 2013 to Till Date
Client Profile: Nissan counties its quest to optimize product development and deliver highly
innovative technonolgy. Today, in various countries and regions around the world, we enjoy a stellar
reputation for creating truly innovative vehicles and service programs.
Shravan8687@gmail.com Page 2

3. Deliverables
Compliance Activities in GRC :
Risk Analysis and remediation ( RAR ).
 Identifying potential SOD conflicts at different levels.
 Knowledge on Scheduling background jobs to provide organization wide compliance
status report to SME’S as per schedule base.
 Providing violated transactions authorization to users for specific period of time.
 Super User Privilege Management ( SPM ).
 Creation of Firefighter id’s.
 Providing firefighter access to the users as per requirement.
 Generating firefighter log report on periodic basis.
Access Control 10.0 Support Responsibilites.
 Scheduling Background Jobs.
 Role owner changes.
 Import role to Grc system.
 Defining mitigation monitor.
 Mitigation control maintenance.
 Performing Risk analysis in simulation mode.
 Generating Access Rules.
 Updating Rule set as per the business requirement.
 Creation of custom risk id’s & functions as per the business needs.
 Defining Access Control owners.
 Creation of Mitigation controls as per the Organization Risk management strategy.
 Designed GRC Roles.
 Configuration of EAM Application.
 Creating FF id’s, Owners, Controllers as per the defined strategy.
 Create BRF+ rule IDs for defining MSMP workflows.
 Define different types of MSMP workflow as per business requirement.
 Monitoring ARM on daily basis.
 Performing Risk Analysis at various levels and taking necessary action on identified Risk.
 SOD report generation.
 Trouble shooting access request related issues.
SECURITY.
 User Administration
Shravan8687@gmail.com Page 3

4.  Role Administration
 Troubleshooting authorization issues of ECC.
 Generating various reports
 Creation of authorization Groups as per the business requirement.
 Providing table access to the users.
 Transporting Roles.
 Position based role assignment and PD profile assignment.
 Mapping personnel numbers with user’s normal SAP login id.
 Ramping up junior level consultants to deploy them on project engagements.
 Performing audit on scheduled basis.
 Interacting with client to understand the business requirement.
 Providing access to custom transactions.
 Providing security to custom transactions.
 Creation of analysis authorizations.
Project -1
Project SPX Corporation
Designation SAP Associate Security Consultant.
Duration Oct 2012 to Nov 2013
Project Profile : Spx corporation is, along with its subsidiaries, a diversified,global supplier of
infrastructure equipment with scalable growth platforms in heating, ventilation and air
conditioning(HVAC),and detection and measurement markets,and a strong presence in power and
energy markets.
Deliverables:
 User administration.
 Role administration.
 Creating users and assigning approved roles by SME’s.
 Understanding user requirements and assigning the suitable authorizations.
 Assigning proper roles to the users as per the missing access report received.
 Extending validity periods for the expired users on proper approvals.
 Creating, modifying , deleting , and assigning single roles , composite roles and derived roles.
 Working on role changes as per the business requirement.
 Troubleshooting authorization issues of ECC.
 Transporting Roles.
 Providing access to custom transactions.
 Providing security to custom transactions.
 Creation of authorization Groups as per the business requirement.
 Generating various reports.
 Creation of analysis authorization.
Shravan8687@gmail.com Page 4

5.  Providing table access to the users.
 Generating various reports.
Shravan8687@gmail.com Page 5

6.  Providing table access to the users.
 Generating various reports.
Shravan8687@gmail.com Page 5