ROBERT R. SORIA

Senior SAP Security Consultant

Senior SAP Security Consultant with 16+ years of experience in SAP Security, IAM, role design, authorization architecture, User Administration, SoD, SAP GRC, Fiori, RISE, S/4HANA and global AMS/support. Proven expertise in secure, audit-ready access solutions across implementations, role redesigns, transitions, rollouts and production support, with strong focus on Least Privilege, authorization troubleshooting, SIT/UAT, Cutover, SoD and SLA/KPI/SOX compliance. Strong track record in cross-functional collaboration, team leadership and complex SAP security problem resolution.

[email protected] +54 911 2166 4717 Argentina
LinkedIn
0
Language
0
Skills
0
Certification
Work Experience
SAP Security Analyst
AES Corp
04/2010 — 07/2011
  • Provided SAP Security support for AES employees worldwide through HP OpenView across SAP R/3 environments.
  • Managed SAP users executing SU01/SU10, including provisioning, user maintenance, passwords, and locks/unlocks across SAP Landscape
  • Created and transported PFCG roles across the SAP landscape, supporting controlled security changes.
  • Created and maintained OSS user accounts for customer-system analysis and issue resolution.
  • Used ZSE16N and AGR_DEFINE to analyze role assignments and identify alternate roles for authorization requirements.
  • Resolved SAP authorization issues using SU53/ST01 and supported access requests across the SAP landscape.
  • Worked with HP OpenView, Virsa Access Enforcer, SAP GRC, and SAP R/3 to support SAP Security operations and access governance.
Senior SAP Security Consultant
Freelance | Client: Cencosud
07/2013 — 11/2013
  • Provided SAP Security support across Argentina, Brazil, Chile, Colombia, and Peru for an enterprise with 16+ brands, 400 stores, and 130,000 employees.
  • Served as SAP Security Consultant on a SOX role-redesign project, gathering requirements and developing secure role solutions.
  • Designed and modified PFCG roles across multiple SAP modules, ensuring compliance with authorization-object documentation and enhancing security governance.
  • Assessed and resolved SAP Security requests through JIRA, Solution Manager, and Portal, including authorization issues using SU53/ST01.
  • Executed GRC Access Control 10 Risk Analysis and Remediation, addressing SoD conflicts and ensuring compliance through role uploads to GRC.
  • Provisioned role-based access and managed user accounts aligned with job responsibilities and approved requirements.
  • Supported business testing and migrated SAP Security roles across DEV, QA, and Production.
  • Maintained SAP Security procedures and role documentation while enforcing SOX, SoD, and regulatory controls.
Senior SAP Security Consultant
Freelance @ AB InBev
11/2013 — 07/2014Argentina, Brazil, Chile, Colombia, Ecuador, Paraguay & Peru
  • Assessed and Resolved SAP Security incidents and authorization issues using SU53/ST01, ensuring timely restoration of business access.
  • Served as SAP Security liaison between business, Functional, and technical teams, translating requirements into access and security solutions.
  • Designed, configured, tested, and deployed SAP Security roles and managed user administration through SU01/SU10.
  • Provisioned role-based access aligned with job responsibilities and implemented user lifecycle controls, including 45-day locks and 90-day deactivation.
  • Analyzed and remediated Segregation of Duties (SoD) conflicts across roles and users using GRC Access Control.
  • Generated monthly SoD Risk Analysis reports using CSI Audit, reviewed access risks, and produced recurring management and audit reports.
  • Prepared SAP Security audit evidence and recurring reports for internal/external audits, supporting SOX, SoD, and regulatory compliance.
  • Created custom SAP Authorization Objects and resolved complex authorization access requests through root-cause analysis.
  • Assessed and approved Firefighter (FF) access requests and managed associated security controls and reporting.
  • Led and developed a team of 4 SAP Security professionals, providing technical guidance and supporting continuous knowledge development.
  • Supported SAP GRC implementation, including connector creation/activation, BC Sets, workflow configuration, and Firefighter ID setup.
  • Recommended SAP Security process improvements and enforced governance across SOX, SoD, SLA, KPI, reporting, and audit requirements.
Senior SAP Security Consultant
Indra @ Client Telefonica
07/2014 — 02/2015
  • Provided global SAP Security support for Telefonica users via BMC Remedy, SAP Solution Manager, and Portal.
  • Managed SAP user administration via SU01/SU10, including provisioning, lifecycle management, locks/unlocks, passwords, and naming conventions.
  • Created Single, Parent, Derived, and Composite Roles in PFCG and maintained authorization documentation.
  • Created QA test IDs, assigned roles, and resolved authorization issues using SU53/ST01.
  • Reviewed security requirements and change documentation and coordinated Business/Security Lead approvals.
  • Managed GRC Access Control 10 requests, uploaded roles to BRM, and resolved SoD conflicts.
  • Created RFC connections and configured SAP and SAP Print Server printers.
Senior SAP Security Consultant | ENARSA
ENARSA
07/2017 — 11/2017
  • Supported SAP Security operations for ENARSA employees and contributed to SAP BCS implementation activities.
  • Designed the SAP Security Role Matrix and developed roles supporting the BCS implementation.
  • Managed SAP user administration through SU01/SU10, including user IDs, naming conventions, passwords, and access provisioning.
  • Designed and modified Single, Derived, and Composite Roles in PFCG and maintained authorization-object documentation.
  • Redesigned SD/MM roles and created QA test IDs for Functional Leads to support security validation.
  • Created and administered SAP OSSUSER and Developer accounts across SAP and SAP Marketplace.
  • Managed Active Directory/VPN accounts and SAP transport requests through STMS.
  • Transported SAP Security roles across DEV, QA, and PRD environments, ensuring controlled deployment and security governance.
Senior SAP Security Consultant / IT Compliance Lead | ITProviders Consulting @ AB InBev Brewery
ITProviders Consulting @ AB InBev Brewery
09/2018 — 04/2019
  • Served as SAP Security liaison to business teams, translating requirements into access, security, and compliance solutions.
  • Managed internal and external SAP IT Security audit requests, coordinating evidence and supporting audit readiness.
  • Designed, tested, and deployed SAP Security roles and administered users through SU01/SU10.
  • Implemented SAP user-lifecycle controls, locking users inactive for 45+ days and deactivating users inactive for 90+ days.
  • Performed GRC Access Control 10 Risk Analysis and Remediation, resolving SoD conflicts and enforcing access controls.
  • Generated monthly SoD Risk Analysis reports using CSI Audit and reviewed identified access risks.
  • Resolved authorization issues using SU53/ST01 and created custom SAP authorization objects.
  • Managed Firefighter (FF) access approvals and generated monthly security reports for management.
  • Led and mentored a team of 4 SAP Security professionals, supporting technical development and knowledge growth.
  • Supported GRC implementation activities, including connector configuration, BC Sets, workflow configuration, and workflow setup.
Team Leader | Senior SAP Security Consultant | Everis Consulting @ ENEL Energy
Everis Consulting @ ENEL Energy
06/2019 — 02/2020
  • Led and mentored 4 Junior SAP Security Consultants, providing technical guidance and professional development.
  • Translated business and Functional Lead requirements into SAP Security role design, testing, and deployment for an S/4HANA rollout.
  • Designed and maintained Single, Parent, Derived, and Composite Roles in PFCG, including role documentation and authorization requirements.
  • Managed SAP user administration through SU01/SU10 and provisioned role-based access aligned with approved business responsibilities.
  • Performed authorization troubleshooting using STAUTHTRACE and uploaded SAP roles to GRC Business Role Management (BRM).
  • Executed GRC Access Control 10 Risk Analysis/Remediation and resolved Segregation of Duties (SoD) conflicts using GRC Access Control 12.
  • Created and transported SAP Security roles and generated QA test IDs for Functional Leads, supporting controlled testing and deployment.
  • Recommended SAP Security process improvements and enforced governance across SOX, SoD, SLA, KPI, and project delivery requirements.
Senior SAP Security Consultant | Globant @ DirecTV / SKY
Globant @ DirecTV / SKY
10/2020 — 05/2021
  • Provided global SAP Security support and maintenance for DirecTV users, ensuring secure and continuous business access.
  • Resolved SAP authorization incidents using SU53/ST01 and provisioned access based on approved job responsibilities and security requirements.
  • Created QA test IDs and roles and collaborated with requesters to validate new roles and transaction codes during testing.
  • Managed user administration, including locks, unlocks, passwords, and Single, Derived, and Composite Role creation using PFCG.
  • Performed GRC Access Control 10 Risk Analysis and Remediation, identifying and mitigating Segregation of Duties (SoD) conflicts across roles and users.
  • Created and transported SAP Security roles using SCC1 and analyzed role assignments, transactions, authorization objects, and values using SE16/SUIM.
  • Enforced SAP Security governance, SoD, SOX, and Business/Security Lead approval requirements for security changes and access controls.
Senior SAP Security Consultant | Globant @ Vital Supermarkets
Globant @ Vital Supermarkets
08/2021 — 12/2021
  • Partnered with Business Teams and Functional Leads to translate requirements into secure SAP S/4HANA and Fiori role designs.
  • Designed, configured, tested, and deployed Single, Derived, and Composite Roles using PFCG and standardized naming conventions.
  • Managed SAP user creation and modification through SU01/SU10 and provisioned role-based access aligned with approved business responsibilities.
  • Performed authorization troubleshooting using STAUTHTRACE and collaborated with requesters to validate and resolve role and access issues.
  • Used SE16 and SUIM to analyze role assignments, parent/derived roles, transactions, authorization objects, and authorization values.
  • Created and configured custom Z Authorization Objects with required fields and values to support business-specific security requirements.
  • Configured SAP Fiori Apps, Catalogs, and Groups and partnered with SAP BI consultants to design, review, and validate security roles.
  • Documented security changes and managed SAP transport activities across the system landscape, ensuring controlled deployment and governance.
Senior SAP Security Consultant | Globant @ Deloitte UK
Globant @ Deloitte UK
01/2022 — 05/2022
  • Provided global SAP Security support for Globant users supporting Deloitte UK operations, ensuring secure access across the SAP landscape.
  • Managed SAP user provisioning through SU01/SU10 and validated user-to-role mappings across SAP, IDM, and Active Directory.
  • Audited SAP/IDM user records via PA20, ZMRT_USER_MAPPING, ZMRT_USER_SECURTY, and Active Directory
  • Created QA test IDs, assigned roles for Functional Leads, and administered users in HANA Studio to support controlled testing and access validation.
  • Designed and maintained Single, Derived, and Composite Roles using PFCG and managed user locks, unlocks, and password administration.
  • Resolved SAP authorization requests using SU53/ST01 and transported security roles across the SAP landscape, supporting controlled deployment.
  • Applied SAP Security governance, SOX, SoD, SLA, KPI, and audit requirements across user administration and security change activities.
Senior SAP Security Consultant
Syntax @ Barrick Gold
Jan 2026 — Jul 2026
  • Led SAP Security across the TSA lifecycle: discovery, design, role development, testing, cutover, go-live, hypercare, stabilization and exit
  • Partnered with Business Owners, PMs, SAP Basis, IAM, Infrastructure and application teams to deliver SAP Security, access controls and governance
  • Designed, developed and optimized Single, Derived and Composite Roles using Least Privilege, authorization concepts and business requirements
  • Designed and implemented authorizations for various organizational levels to enforce access segregation and legal-entity separation
  • Managed SAP users and roles, including provisioning, deprovisioning, mass assignments, validity, access removal and migration
  • Performed SAP authorization troubleshooting and root-cause analysis using SU53, ST01, STAUTHTRACE, SU56, SUIM and PFCG across SAP environments
  • Supported SIT, UAT, Cutover, Go-Live, validation and Hypercare, validating roles/authorizations, resolving defects and ensuring access and stabilization
  • Executed SAP Security governance, compliance and TSA exit activities across role matrices, access reviews, certification, testing and audit documentation
  • Managed change management, peer reviews, access decommissioning and obsolete authorization removal, ensuring a secure TSA exit
Senior SAP Security Consultant
Freelance @ Crucianelli S.A.
Oct 2024 — Mar 2025
  • Translated business and Functional Lead requirements into SAP role design, configuration, testing and deployment within SAP RISE environments
  • Managed SAP user administration via SU01/SU10, provisioning access based on roles, responsibilities and approved business requirements
  • Designed SAP roles using standardized naming conventions and implemented Fiori Catalogs, Groups, and Spaces for controlled application access
  • Analyzed Functional and client change requests, translating requirements into actionable SAP Security configuration and access-control updates
  • Created, tested and transported SAP Security roles across system landscapes, ensuring controlled and compliant promotion of security changes
  • Analyzed and remediated Segregation of Duties (SoD) conflicts across roles and users, strengthening access governance and reducing compliance risk
  • Resolved GRC Access Control 12 SoD reporting issues involving repository synchronization, role-user mappings and rule-set configuration
  • Corrected GRC connectors and rule sets and rebuilt ARM workflows using MSMP/BRF+, resolving routing and provisioning issues
Senior SAP Security Consultant
Globant @ Corven
Jul 2023 — Sep 2024
  • Designed the SAP Security Role Matrix for SD, MM, FI, CO, EWM, PP and PM, establishing the S/4HANA security framework
  • Provisioned SAP access based on job responsibilities and approved business requirements, maintaining controlled and compliant system access
  • Created Single, Derived and Composite Roles in PFCG and configured Fiori Catalogs, Groups and application assignments
  • Resolved SAP Security and authorization issues using STAUTHTRACE, performing root-cause analysis and access corrections
  • Analyzed and remediated SoD conflicts using GRC Access Control 12, strengthening preventive and detective access controls
  • Supported SIT and UAT by analyzing security defects, updating roles and resolving authorization gaps identified during testing
  • Created and transported SAP Security roles across the landscape using SCC1, supporting controlled deployment of security changes
  • Enforced security change governance through required approvals, ensuring auditability, SOX, SLA and project compliance
Senior SAP Security Consultant
Globant @ DirecTV / SKY
Apr 2023 — Jul 2023
  • Provided global SAP Security support and maintenance for DirecTV users, ensuring secure and continuous business access worldwide
  • Resolved SAP authorization incidents using SU53 and ST01, performing root-cause analysis and restoring required user access
  • Provisioned user access and created QA test IDs and roles based on job responsibilities, approved requirements and business validation
  • Designed and maintained Single, Derived and Composite Roles in PFCG and validated new roles and transaction codes with business requesters
  • Managed SAP user administration, including user locks, unlocks, password maintenance and access assignments
  • Performed GRC Access Control 10 Risk Analysis and Remediation, identifying and mitigating Segregation of Duties (SoD) conflicts and access risks
  • Created and transported SAP Security roles via SCC1, analyzing roles, transactions, authorization objects and values using SE16/SUIM
  • Enforced SAP Security governance through required Business and Security Lead approvals for security changes, supporting SOX, SoD audit requirements
Skills
Fluent in SpanishIndependent contributor and collaborative team member with global SAP Security support experienceProactive ownership of goals, commitments, decisions, controls, and delivery outcomesSAP Security & IAM: User Administration, Provisioning, Deprovisioning, Least Privilege, Authorization Objects, Access ReviewsRole Engineering: Single, Derived, Parent & Composite Roles, PFCG, Role Matrix, Redesign, Optimization, Testing, Transport & Landscape SynchronizationSAP GRC: Access Control 10/12, ARA, BRM, ARM, EAM, CUP & SoDSAP Platforms: SAP ECC, SAP S/4HANA, SAP RISE, SAP Fiori, SAP HANA Studio, SAP Ariba, SAP SuccessFactors, SAP Portal, SAP BCSCompliance & Governance: SOX, Segregation of Duties, ITIL, Security Policies, Regulatory Compliance, Audit Support Controls, Evidence, SLA, KPILeadership & Delivery: Team Leadership, Mentoring, Global SAP Support, Incident Management, SIT/UAT, Cutover, Hypercare, TSA, Change ManagementSAP SecuritySAP S/4HANASAP user administrationSU01SU10PFCGFiori CatalogsECCSAP AribaSuccessFactorsQA test IDsSIT/UAT testingSU53ST01Segregation of Duties (SoD)SCC1SE16SUIMSOXIDMActive DirectoryHANA StudioSTAUTHTRACECustom Z Authorization ObjectsSAP BIGRC Access Control 10GRC Access Control 12GRC Business Role Management (BRM)SAP IT Security auditUser-lifecycle controlsCSI AuditFirefighter (FF) accessConnector configurationBC SetsWorkflow configurationSAP OSSUSERSAP MarketplaceActive Directory/VPNSTMSSAP PortalSAP ECCSAP RISESAP GRCSAP FioriSAP BCSSAP HANA StudioSAP SuccessFactorsSAP BTP/Cloud SecurityAccess ControlRisk AnalysisSoDComplianceCHARMSTADGRC AC 10/12ARAARMBRMEAMCUPMSMPBRF+GroupsSpacesAuthorization Objects
Education
Bachelor of Fine Arts
Briarcliffe College
1997 — 2002
Certifications
SAP Business Intelligence 7.0
SAP Certification
October 2008
Languages
Spanish
Fluent
SAP COURSES
SAP Security
Axigma Technologies
2013

Completed

SAP Basis
Axigma Technologies
2015

Completed

SAP MM
Axigma Technologies
2020

Completed

Project Management Framework & Project Management Processes
Project Management Institute
2007

Completed

SAP Fiori Security and Authorizations ADM945
SAP Learning Hub
Completed
Principles of SAP Governance, Risk and Compliance GRC100
SAP Learning Hub
Completed
Access Control Implementation and Configuration GRC300
SAP Learning Hub
Completed
ADM900 SAP Security Fundamentals
SAP Learning Hub
Completed
LEADERSHIP TRAINING
Leap Leadership Certification
Globant Training
The Leaders Path
Globant Training
The Basics of Leading Teams
Globant Training
Team Coordination
Globant Training
References available upon request.
Last updated 3 hours agoMade with freecv.org