Profiles search
Mahesh Behede
Sr. Information Security Analayt - Sap/Jde
Irving, TX, United States
Details
Experience:
2022 : Present
McKesson
Sr. Information Security Analsyt - Sap/Jde
Lead JDE Security Controls and Configurations
Qsoftware security tool installation and configuration and upgrade
Segregation of Duties Rule setup and monitoring, Mitigation setup
Quarterly compliance reporting, user validation for SOD
Review of SOD Rules definition, Mitigation approvals, business justification
Actively involved in Audit activities, managing standard access grid for end users, role definitions etc
Support and maintenance of JDE 91 and JDE 92 environments
Configuration of JAS HTML server, AIS servers and BSSV servers
Installation of Full fat clients and weblogic installation
Package Deployments and troubleshooting
Manage Data Refresh activities from prod to non prod environments
UDOs, Orchestration, Landing pages creation and management in JDE 92
Manage and maintain Reports Now servers
Create and configure reports now dashboards and reports
Vertex 9 oseries installation and data migration
Vertex 9 role access configuration and user maintenance
OATS server installation and load testing scripts creation, management
Good knowledge of Tidal scheduler tool in job creation and management
Oracle E-Procurement Solution troubleshooting and server maintenance
2020 : 2022
Martin Marietta
Sr. Systems Analyst
• Lead the ERP projects for Application security and Internal Controls
• Identifying and addressing client needs by building meaningful client relationships and understand the client's business processes
• Follow and participate in SDLC, SOX Compliance and General Computing controls
• Support/troubleshoot End User issues by providing preventative maintenance, and timely resolution of complex problems
• Provide direction, training and guidance for junior resources
• Define and monitor metrics for SLAs for system being developed
• Analyze, design, develop, test, debugs, implements existing or new system
• Expertise in advance security solution designing and redesigning
• Utilizing creative thinking and flexibility in prioritizing task completion
• Lead ERP audit, control assessment and testing utilizing new techniques
• Leveraging project management skills during our client engagements, by developing project plans and work breakdown structure
• Review and sign off on Access controls and internal controls
• Contribute to Business Strategy as per Vision/Mission - Capability Models, Journey Maps, Business Goals and Measurement Criteria.
• Trust Building; Leadership Skills to work with people at different levels
• Design and modify procedures for problem solving
• Take ownership of ticket management and resolution including customer satisfaction, resolution monitoring
• Meets daily, weekly and monthly reporting
2012 : 2020
Birlasoft
Senior GRC Consultant
• User setup with appropriate security roles and review for inappropriate access in various SAP system landscapes like ECC, SRM, BI and Solution manager.
• Assist end users with security issues, including password resets and authorizations issues through email and phone.
• Day-to-day Security administration across all systems and modules such as new user setup, termination of users by utilizing standard SAP Security roles. Have performed mass maintenance of ID's.
• Central user administration (CUA) – User creation and maintenance.
• Setting up Central User Administration (CUA) and maintain RFC for CUA systems.
• IDOC administration using the the Tcode SCUL for SCUL logs.
• Have created and used CATT scripts for mass generation of roles and user assignments.
• Analyzing reports in SAP using SUIM, and security related tables (AGR*, USR*, etc), and customized Query reports.
• Debugging the user authorization problems using SU53 / authorization trace.
• Use PFCG (Profile Generator) to create, modify and customize Authorizations, Transactions, roles and Authorization Profiles.
• SU24 Authorization maintenance.
• Supported successful system audit by documenting significant processes and controls for SOD issues and continuously improving security configuration to reflect best practices.
• Worked on CHARM process (in Solution manager) for Role change requests.
• Worked on SAP GRC Access control CUP (Compliant User Provisioning)
• Prepare and review weekly audit reports
• Maintain the Security Team manual and Methodology
• Process access requests & incidents from end-users
• Work with internal audit to ensure compliance to Security Policies, Procedures, and Control Sets. This includes SOD resolution.
• Involved in the onsite implementation of North America project. Resolving the BI issues and SRM issues. Supporting the Post Go Live issues.
• Mapping of GRC roles according to profile.
• Performance and formulate the compensation plan for the resources.
2009 : 2012
Honeywell Automation India Limited
Business Analyst
Interaction with clinets, MIS reporting
2006 : 2008
IBM Daksh
MIS Analyst
McKesson
Sr. Information Security Analsyt - Sap/Jde
Lead JDE Security Controls and Configurations
Qsoftware security tool installation and configuration and upgrade
Segregation of Duties Rule setup and monitoring, Mitigation setup
Quarterly compliance reporting, user validation for SOD
Review of SOD Rules definition, Mitigation approvals, business justification
Actively involved in Audit activities, managing standard access grid for end users, role definitions etc
Support and maintenance of JDE 91 and JDE 92 environments
Configuration of JAS HTML server, AIS servers and BSSV servers
Installation of Full fat clients and weblogic installation
Package Deployments and troubleshooting
Manage Data Refresh activities from prod to non prod environments
UDOs, Orchestration, Landing pages creation and management in JDE 92
Manage and maintain Reports Now servers
Create and configure reports now dashboards and reports
Vertex 9 oseries installation and data migration
Vertex 9 role access configuration and user maintenance
OATS server installation and load testing scripts creation, management
Good knowledge of Tidal scheduler tool in job creation and management
Oracle E-Procurement Solution troubleshooting and server maintenance
2020 : 2022
Martin Marietta
Sr. Systems Analyst
• Lead the ERP projects for Application security and Internal Controls
• Identifying and addressing client needs by building meaningful client relationships and understand the client's business processes
• Follow and participate in SDLC, SOX Compliance and General Computing controls
• Support/troubleshoot End User issues by providing preventative maintenance, and timely resolution of complex problems
• Provide direction, training and guidance for junior resources
• Define and monitor metrics for SLAs for system being developed
• Analyze, design, develop, test, debugs, implements existing or new system
• Expertise in advance security solution designing and redesigning
• Utilizing creative thinking and flexibility in prioritizing task completion
• Lead ERP audit, control assessment and testing utilizing new techniques
• Leveraging project management skills during our client engagements, by developing project plans and work breakdown structure
• Review and sign off on Access controls and internal controls
• Contribute to Business Strategy as per Vision/Mission - Capability Models, Journey Maps, Business Goals and Measurement Criteria.
• Trust Building; Leadership Skills to work with people at different levels
• Design and modify procedures for problem solving
• Take ownership of ticket management and resolution including customer satisfaction, resolution monitoring
• Meets daily, weekly and monthly reporting
2012 : 2020
Birlasoft
Senior GRC Consultant
• User setup with appropriate security roles and review for inappropriate access in various SAP system landscapes like ECC, SRM, BI and Solution manager.
• Assist end users with security issues, including password resets and authorizations issues through email and phone.
• Day-to-day Security administration across all systems and modules such as new user setup, termination of users by utilizing standard SAP Security roles. Have performed mass maintenance of ID's.
• Central user administration (CUA) – User creation and maintenance.
• Setting up Central User Administration (CUA) and maintain RFC for CUA systems.
• IDOC administration using the the Tcode SCUL for SCUL logs.
• Have created and used CATT scripts for mass generation of roles and user assignments.
• Analyzing reports in SAP using SUIM, and security related tables (AGR*, USR*, etc), and customized Query reports.
• Debugging the user authorization problems using SU53 / authorization trace.
• Use PFCG (Profile Generator) to create, modify and customize Authorizations, Transactions, roles and Authorization Profiles.
• SU24 Authorization maintenance.
• Supported successful system audit by documenting significant processes and controls for SOD issues and continuously improving security configuration to reflect best practices.
• Worked on CHARM process (in Solution manager) for Role change requests.
• Worked on SAP GRC Access control CUP (Compliant User Provisioning)
• Prepare and review weekly audit reports
• Maintain the Security Team manual and Methodology
• Process access requests & incidents from end-users
• Work with internal audit to ensure compliance to Security Policies, Procedures, and Control Sets. This includes SOD resolution.
• Involved in the onsite implementation of North America project. Resolving the BI issues and SRM issues. Supporting the Post Go Live issues.
• Mapping of GRC roles according to profile.
• Performance and formulate the compensation plan for the resources.
2009 : 2012
Honeywell Automation India Limited
Business Analyst
Interaction with clinets, MIS reporting
2006 : 2008
IBM Daksh
MIS Analyst
Company:
McKesson
Spoken Language:
English, Hindi, Marathi, Marwari
About
Career Objective:
Competent Professional, seeking for challenging and rewarding senior level position in field of Access Control and Risk Management