Martin User

Architected and maintained SAP security across S/4HANA and ECC6, managing end-to-end user provisioning, role design, and access governance. Led SAP GRC 12.0 ARA SoD analysis and remediation, automated access request workflows, and delivered audit evidence for SOX ITGC audits with zero critical findings over three consecutive cycles.

Performed enterprise technical risk assessments and vulnerability remediation aligned with NIST 800-53 and ISO 27001. Monitored Data Loss Prevention (DLP) alerts, led incident response for HIPAA/PCI-DSS/SOX-related data events, and built risk registers and compliance dashboards.

Monitored and tracked IT control deficiencies and guided control owners through remediation plans for gaps found during SOX and FFIEC examinations. Supported DR/BCP exercises, advised on control design and testing, and escalated emerging risks to senior leadership.

Coordinated evidence collection and stakeholder interviews for HIPAA, SOC 2, ISO 27001, and FISCAM audits to ensure complete and timely submissions. Tracked vendor and third-party risk remediation across a portfolio of 50+ vendors and authored security documentation including System Security Plans (SSPs) and contingency test reports.

Assisted FedRAMP readiness assessments by reviewing Authorization to Operate (ATO) packages for cloud service providers seeking federal authorization. Implemented and validated NIST 800-53 controls and produced threat/vulnerability assessment reports with remediation recommendations across IaaS, PaaS, and SaaS environments.

Studied Business Administration at Barclay College in 2015.

Studied Computer Information Systems at Guilford College in 2013.