SAP Security / Authorisations opporunity - Switzerland

[AshleyERA]

SAP R/3 Security & Authorisation Consultant - Zurich - Permanent - Excellent salary + Benefits.


An urgent and critical opportunity has arisen for an experienced SAP Security/Authorisations consultant in Switzerland. The client an international and highly regarded materials processor, operating within the chemicals market requires a specialist to join the team during the realization phase of the project. The template phase has been completed and the project is now in the roll-in phase with two entities going live early 2010. SAP will be implemented Within 70 countries during the coming years. This is an excellent opportunity for someone with proven skills in a SAP Security and Authorisations role to really drive their career forward whilst making a positive contribution in the area of
Security & Authorizations. The successful candidate will poses strong /CO, STP, QM LOG, ATM, MDM and Solution Manager and SoD, which will be an added bonus.

Technical skills: SAP ECC 6.0,SU24, ST01, SUIM, SU10, STMS, BDC’s, etc.
Excellent analytical, problem solving, communications (Verbal and written), and organizational skills.

Such opportunities fir such companies do not arise so often, especially within such Economically unsteady times. If you would like to know more about this position do not hesitate to contact Ashley.Waithe@era-recruitment.co.uk or call 0044 117 9558654.
For more information about ERA recruitment Ltd please visit http://www.era-recruitment.co.uk

[mjlin4]

Hi Ashley:

I read with great interest in learning about the SAP security position. My resume is listed below for your review. I would like to apply for this position if it is still open. I had worked on eight (DuPont, Pratt & Whitney, US Army, IRS, Raytheon-two implementations, Phelps Dodge, and Ceradyne) full life cycle implementations, three of which were global (Pratt & Whitney, DuPont, Raytheon). Extensive working experience in public sectors along with comprehensive documentation of SAP security policy guidelines and production support projects in R/3 modules in versions (3.1J, 4.0, 4.5, 4.6, 4.7, and ECC 6.0) SCM, SRM, CRM, EBP, SEM, BI 7.0 (BW2.0, 3.0, 3.5) , HR(HCM), APO, SSO, EP(5.0, 6.0), and CUA. I also have solid experience in managing IT audit areas using the GRC Access Control,, Fire Fighter and other components of GRC Suite to address the Segregation of Duties (SoD) compliance.

If you have any questions, please feel free to contact me at 714-552-6068 or visit my personal web site at:www.sapming.com.

Regards,
Ming

**************************** resume **************************
MING J. LIN
10 Encina Street
Irvine, CA 92620-1846
Home Phone Number: 714-832-2942
Cellular Number: 714-552-6068
Email Address: mjlin4@hotmail.com
Personal Web Site: http://www.SAPMing.com
PROFILE
Mr. Ming Lin is a Senior Consultant with special emphasis in SAP Security. His experience involves implementation and production support of application and infrastructure security. Mr. Lin has over ten years in performing complex and conceptual analysis, consulting, project management and providing recommendations in the areas of application security, business process control, information technology design, implementation and assessments of policies and procedures. His specialization is in SAP Security Access Control, regulation compliance, and he possesses general understanding of the business drivers operating on the enterprise level, as well as its components in products, services, finances and strategies. His prior project experiences include SAP projects for DuPont, Pratt& Whitney, Kone Elevator Manufacturer, US Army Logistics Control, Internal Revenue Services, ATMEL Semiconductor, Alpine Electronics, GTECH Corporation, FileNet, Raytheon, T-Mobile, Phelps Dodge Mining, Ingram Micro, DirecTV, Ceradyne, and SAP America.

PROFESSIONAL EXPERIENCE
Ceradyne, Inc (Second Engagement) January 2009 – Present
Project Logistics Implementation (version ECC 6.0)

• Collect and map security requirements with SME and Business owners
• Apply MM, PP, SD security knowledge to client’s user role assignment
• Lead Security in blueprint, realization, test and implementation tasks
• Test and review integration test results, gap analysis, and provide remediation
• Select SAP GRC 5.3 suites package to meet the enterprise access control and audit compliance, will be implemented by the end of 2009
• Document user authorizations, train staff, and model ‘building block’ for third phase and future enterprise implementation

GTECH Corporation September, 2008 – October, 2008
Project Security Remediation (version 4.70)

• Re-designed security requirements with SME and Business owners
• Applied HR, BW/SEM, SD, MM, FI/CO security knowledge to user role assignment
• Worked with Basis team for initiating security logs in Solution Manager 7
• Led Security design and execution tasks for the newly acquired division
• Assessed and reviewed integration test results, gap analysis, and provided remediation
• Reviewed SoD package to meet the enterprise access control and audit compliance
• Documented user authorizations, trained staff, and prepared for next Audit review

Ceradyne, Inc May 2008 – July 2008
Project FI Implementation (version ECC 6.0)

• Mapped security requirements with SME and Business owners
• Applied FI/CO security knowledge to client’s user role assignment
• Led Security design and execution tasks
• Tested and reviewed integration test results, gap analysis, and provided remediation
• Reviewed SAP GRC suites package to meet the enterprise access control and audit compliance
• Documented user authorizations, trained staff, and prepared for second phase implementation

DirecTV May 2008 – May 2008
Project BI Upgrade (BI version 7.0)

• Reviewed BI security processes with Business owners
• Applied BI security knowledge to client’s user role assignment
• Migrated BW 3.5 authorizations to BI 7.0 analysis authorization
• Retested and reviewed integration test results
• Reviewed Virsa 4.0 package to meet the enterprise access control and audit compliance, met with APPOVA upgrade team to discuss 4.0 version schedule
• Documented BI new analysis authorizations impact to developers

Raytheon Company (Second Engagement) Oct 2007 – May 2008
Project PRISM SAP system (version 4.7)

• Collaborated security processes with Business owners requirement and Change management workflow
• Applied CUA security knowledge to redesign client’s user role assignment
• Managed Integration test defects and updated authorization objects and roles
• Prepared Training system and coordinated with trainer and training documentation
• Reviewed Approva package to meet the enterprise access control and audit compliance
• Aligned security guidelines with developers and Business SME for project deliverables

SAP America, Chicago Metro Water District July 2007 – Oct 2007
Senior Security Consultant (version 4.7, ECC 5.0, ECC 6.0)

• Assessed security upgrade from 4.7 to ECC 6.0 with infrastructure architect
• Applied Role based security practice to redesign client’s user role assignment
• Practiced BI 7.0 analysis security and updated authorization objects and roles
• Called upon SEM BPS security with clients about best practices and standards
• Practiced GRC (5.2 version) tools to meet the enterprise access control and audit compliance
• Designed and documented administration policies and procedures to meet SOX compliance

Ingram Micro April, 2007 – June, 2007
Global Financial Initiative SAP Project (ECC 6.0)

• Participated in infrastructure architect for SAP security
• Gathered authorization objects and roles for FI/CO and OTC
• Experienced with eFax OCR software to integrate with SAP A/P user access
• Provided blueprint design in establishing the security procedures for SAP systems
• Led the process of data classification and sensitive data interface matrix
• Selected SOD tool to meet the enterprise access control and audit compliance
• Designed and documented security administration policies and procedures for the production environment to meet SOX compliance

Phelps Dodge Mining Company October, 2006 – March, 2007
RedPoint Moly SAP Project (ECC 6.0)

• Participated in requirements gathering, assessment, design, configuration and testing activities for SAP security
• Configured authorization objects and roles for MM, PP, APO, FI/CO, and OTC
• Managed the CUA establishment of SAP landscape
• Implemented SAP security using best practices and standards for SAP security
• Provided support in establishing and maintaining the security and security procedures for SAP systems
• Led the process, training, and change management teams to implement appropriate role-based security for the production environment including role definition and job/position mapping
• Enforced SOD concept in deploying security roles and established procedures for role simulation after implementation
• Designed and documented security administration policies and procedures for the production environment to meet SOX compliance

T-Mobile Wireless Company
Project SOX Compliance (Version 4.7) January, 2006 – September, 2006

• Responsible for Role Redesign effort of SAP security roles for FI/CO, BW, SEM, EBP, HR, and SD
• Designed and directed governance activities to ensure compliance with the application and enterprise architecture
• Designed and deployed Virsa (4.0 version) CC methodology for documenting Compliance /variance of projects to meet SAP best practices and SOX requirements
• Designed and led the implementation of processes for mapping new application requirements to infrastructure guidance
• Led technical and engineering teams to develop and maintain architecture and standards for Application Development, Delivery, and Deployment
• Developed and led the implementation of application standards, Virsa (4.0 version) Fire Fighter to review with auditors on subjects of design of IT controls, Segregation of Duties, and Sarbanes Oxley compliance
• Evaluated complex technical issues and recommended actions or programs for their resolution

Raytheon Missile Company
Project PRISM SAP system (Version 4.7) April, 2005 – October, 2005

• Responsible for creation of security roles for SCM, FI/CO, BW, SEM, Depot, MM, WM, IM, PS, HR, PM, GPD, SD
• Provided auditors on subjects of IT access controls, Segregation of Duties, and Sarbanes Oxley compliance
• Performed unit and integration test cycles with functional teams to refine the configuration of roles
• Prepared Production Go Live procedures, coordinated hyper care and SCR sustain effort with Help Desk support
• Validated IMG configuration setup with Business Process Team
• Attended Change Control Meetings with functional teams, analyzed and designed the requirements of the post-implementation procedures

Deloitte & Touche, LLP
Project FileNET SAP system (Version 4.6C) September, 2004 – March 2005

• Responsible for auditing IT Operation with COBiT ten areas of General Computer Controls guidelines
• Reviewed design of IT controls, Segregation of Duties, and Sarbanes Oxley compliance
• Performed Walkthrough of Key IT Areas: Change Control, Information Security, Operation, Physical Security, and System Software
• Tested Business Cycle Controls Designated by Financial Audit, worked with internal audit team for follow-up remediation
• Reviewed significant events in the past years, prepared roll-forward procedures at year-end

Deloitte & Touche, LLP
Project Alpine SAP system (Version 4.7) July, 2004 – September 2004

• Responsible for drafting up the SAP Security and Operation Procedures and Policies
• Combined the Indiana Operation with Torrance plants site with uniform Policies
• Worked with Alpine staff to update the overall IS Operation and IS Policy

Deloitte & Touche, LLP
Project ATMEL SAP system (Version 4.6C) May, 2004 – July 2004

• Responsible for compliance work to meet Sarbanes Oxley Act, and provided recommendations to management to sustain SAP Security going forward
• Extracted SAP data and reviewed the possible gaps in both access control and segregation of duties
• Worked with internal and external auditors to align the remediation effort

Computer Sciences Corporation
Staffing Manager March, 2002 – May, 2004

• Assigned and reviewed seven mobile consultants in each of their project progress
• Managed 25 developers to work on the US Military project
• Met with clients to discuss the deliverables in mutual expectations and reconcile any discrepancies that went beyond the scope of the Statement of Work
• Developed management skills and participated management trainings
Computer Sciences Corporation
Project IRS SAP system (Version 4.6C) March, 2003 – May, 2004

• Defined and developed Security Test Strategy and System Integration Test plan of SAP Security
• Created, executed test scripts and test cases for SAP User roles on Basis, Security, Workflow, Developer, AP, AR, CO. GL, FM/BE, Reporting, BW, and SEM
• Responsible for supporting test document of Rational products: ClearAccess, ClearQuest, and Test Manager
• Evaluated and recommended automated functional and performance testing tools
• Applied SAP Enterprise Portal, Microsoft 2000 Active Directory Server, LDAP Directory, Netegrity SiteMinder, and Netegrity User Context Gateway ( UCG), Nfuse and Citrix Web resources to achieve SSO (Single Sign On) architecture for the IRS system network
Computer Sciences Corporation
Project US Military Logistics Program (Version 4.6C) March, 2002 – March 2003

• Provided technical interface analysis and programs for the SAP development team
• Responsible for functional requirement analysis, reviewed Functional Module design, BDC/RFC process design and prototyping, system test plan and execution, and data conversion
• Initiated and assisted architectural design for SAP system utility repository tables and security ABAP programs
• Coordinated middleware interface ( SeeBeyond, eGate ) with client’s legacy systems and SAP IDOC design

Computer Sciences Corporation
Project Kone SAP Basis support (Version 3.1L) January 2001 – February 2002
• Implemented a newly reduced cost measurement that resulted in reducing 2 man/year resources and decentralizing the ALE process: estimated saving of one half a million annually
• Provided daily system monitoring activities, ALE processing of IDOC, troubleshoot system performance issues, and applying the OSS notes
• Managed CTS in a global SAP platform environment, served as a focal point for batch job architecture and archival team lead
• Planned the upcoming 4.6 upgrade, coordinated tasks with Belgium headquarter
Computer Sciences Corporation
Project Pratt & Whitney (Version 4.5B) August, 1999 – December 2000

• Primary responsible for providing SAP Security support, participated as ERP Security coordinator of the Change Control Committee
• Managed SAP/R3 systems user profiles, generated job roles and facilitated the design process for business function owners
• Implemented the BIW security building blocks applying three levels of user profiles to grant optimum access capabilities for Operation Data Storage, InfoSource, and InfoCubes
• Involved in the business security validation process to test security objects, audit the security designs and changes
• An oversea Singapore assignment in May, 2000 to implement the Phase 3 of the SAP security project to cover the following modules: Warehouse Management, Business Warehouse, Plant Maintenance, Quality Assurance, System Delivery, Control and Finance, Fixed Asset, Human Resources, and Engine Components for both Connecticut and Singapore plant sites
Computer Sciences Corporation
Project DuPont SAP Basis (Version 4.0 B) August, 1998 – August, 1999

• Designated as the SAP R/3 Batch Architect
• Assisted in the development of ABAP programs and variants
• Managed Manugistics supply chain jobs, remote EDI interfaces, and dial-in vendor files
TECHNICAL EXPERIENCE
Operating Environments: UNIX, MVS, DOS/Windows, Windows 95/98/NT/2000, HP-MPE/ix
Languages: SQL, Visual Basic, PowerBuilder, Dbase4, COBOL/COBOL II, C++, Cognus PowerHouse, SmallTalk
Databases: Oracle, Informix, Sybase, DB2, IMS, ACCESS, IMAGE, KSAM
Development Tools: SAP profile generator, Vision Data, Visual Basic, WinRunner, PowerBuilder, OO Analysis and Design
Modeling Tools: Rapid prototype Data Modeling
Data Base Tools: QTP, QMF, Quiz, Query, SuperTool, DBArtesian
Development Methodologies: ASAP, Catalyst and CSCMap
Applications: MS Office Products; Lotus Notes



EDUCATION
University of Minnesota, St. Paul, Minnesota
M.S. in Forest Management

University of Chinese Culture, Taipei, Taiwan
B.S. in Natural Resources

BI 7.0 Analysis Authorization
Virsa version 5.0 Training
SAP Enterprise Overview 4.7
SAP BASIS Delta 3.x to 4.6 Training, Chicago
CSC SAP Academy, Newark, Delaware