Open to opportunities

Siva Palapala

@sivapalapala

Message

SAP Security and GRC lead specializing in S/4HANA, Fiori and access governance.

India

Message

What I'm looking for

I seek a senior SAP security/GRC role where I can lead access governance, drive S/4HANA and Fiori security implementations, collaborate with auditors, and mentor teams in a compliance-focused, growth-oriented organization.

I am an SAP Security and GRC professional with 11+ years delivering security frameworks, role design, and GRC access control across large enterprises.

I have led S/4HANA and Fiori security implementations, configured GRC Access Control modules (ARA, ARM, EAM, BRM), and integrated GRC with SAP landscapes to meet SOX and audit requirements.

I have acted as SME and team lead, handling greenfield and brownfield projects, user provisioning, SoD management, MSMP workflows, emergency access (Firefighter) administration, and audit remediation with Big Four auditors.

I focus on pragmatic role administration, troubleshooting authorization issues, stakeholder collaboration, and delivering compliant, operational security solutions that support business processes.

Experience

Work history, roles, and key accomplishments

Current

SAP Security & GRC Lead

Current

Virtusa

Apr 2023 - Present (2 years 6 months)

Led SAP S/4HANA, Fiori and GRC Access Control security architecture and implementations for Lloyds Banking Group, configured ARA/ARM/EAM/BRM modules, and supported internal and external audits to ensure SOX and ITGC compliance.

FIORI SAP GRC Access Controls ARA Arm SOX Compliance

SAP Security & GRC Consultant

Infosys

Dec 2014 - Apr 2023 (8 years 4 months)

Led security and GRC implementations across ECC, CRM, BW and S/4HANA for Unilever, designing role/user management, delivering GRC Access Control (10.x→12.0) projects, and driving audit readiness and remediation for SOX/GDPR.

SAP ECC CRM GRC BRM SU53

SAP Security Consultant

Tekskills India Pvt Ltd

Apr 2014 - Sep 2014 (5 months)

Provided SAP security support for Infosys/Unilever engagements, performing role creation/transport, authorization troubleshooting (SU53/ST01), user administration, and FFID/CUP management during April–Sep 2014.

PFCG AGR_USERS SU53 ST01