{ "$schema": "https://cvjson.com/schema/v1.json", "basics": { "name": "ROBERT R. SORIA", "label": "Senior SAP Security Consultant", "email": "Robert.soria@gmail.com", "phone": "+54 911 2166 4717", "summary": "Senior SAP Security Consultant with 16+ years of experience in SAP Security, IAM, role design, authorization architecture, User Administration, SoD, SAP GRC, Fiori, RISE, S/4HANA and global AMS/support. Proven expertise in secure, audit-ready access solutions across implementations, role redesigns, transitions, rollouts and production support, with strong focus on Least Privilege, authorization troubleshooting, SIT/UAT, Cutover, SoD and SLA/KPI/SOX compliance. Strong track record in cross-functional collaboration, team leadership and complex SAP security problem resolution.", "location": "Argentina", "profiles": [ { "network": "LinkedIn", "username": "soriarobert71", "url": "https://linkedin.com/in/soriarobert71" } ] }, "work": [ { "company": "AES Corp", "position": "SAP Security Analyst", "startDate": "2010-04", "endDate": "2011-07", "highlights": [ "Provided SAP Security support for AES employees worldwide through HP OpenView across SAP R/3 environments.", "Managed SAP users executing SU01/SU10, including provisioning, user maintenance, passwords, and locks/unlocks across SAP Landscape", "Created and transported PFCG roles across the SAP landscape, supporting controlled security changes.", "Created and maintained OSS user accounts for customer-system analysis and issue resolution.", "Used ZSE16N and AGR_DEFINE to analyze role assignments and identify alternate roles for authorization requirements.", "Resolved SAP authorization issues using SU53/ST01 and supported access requests across the SAP landscape.", "Worked with HP OpenView, Virsa Access Enforcer, SAP GRC, and SAP R/3 to support SAP Security operations and access governance." ] }, { "company": "Freelance | Client: Cencosud", "position": "Senior SAP Security Consultant", "startDate": "2013-07", "endDate": "2013-11", "highlights": [ "Provided SAP Security support across Argentina, Brazil, Chile, Colombia, and Peru for an enterprise with 16+ brands, 400 stores, and 130,000 employees.", "Served as SAP Security Consultant on a SOX role-redesign project, gathering requirements and developing secure role solutions.", "Designed and modified PFCG roles across multiple SAP modules, ensuring compliance with authorization-object documentation and enhancing security governance.", "Assessed and resolved SAP Security requests through JIRA, Solution Manager, and Portal, including authorization issues using SU53/ST01.", "Executed GRC Access Control 10 Risk Analysis and Remediation, addressing SoD conflicts and ensuring compliance through role uploads to GRC.", "Provisioned role-based access and managed user accounts aligned with job responsibilities and approved requirements.", "Supported business testing and migrated SAP Security roles across DEV, QA, and Production.", "Maintained SAP Security procedures and role documentation while enforcing SOX, SoD, and regulatory controls." ] }, { "company": "Freelance @ AB InBev", "position": "Senior SAP Security Consultant", "location": "Argentina, Brazil, Chile, Colombia, Ecuador, Paraguay & Peru", "startDate": "2013-11", "endDate": "2014-07", "highlights": [ "Assessed and Resolved SAP Security incidents and authorization issues using SU53/ST01, ensuring timely restoration of business access.", "Served as SAP Security liaison between business, Functional, and technical teams, translating requirements into access and security solutions.", "Designed, configured, tested, and deployed SAP Security roles and managed user administration through SU01/SU10.", "Provisioned role-based access aligned with job responsibilities and implemented user lifecycle controls, including 45-day locks and 90-day deactivation.", "Analyzed and remediated Segregation of Duties (SoD) conflicts across roles and users using GRC Access Control.", "Generated monthly SoD Risk Analysis reports using CSI Audit, reviewed access risks, and produced recurring management and audit reports.", "Prepared SAP Security audit evidence and recurring reports for internal/external audits, supporting SOX, SoD, and regulatory compliance.", "Created custom SAP Authorization Objects and resolved complex authorization access requests through root-cause analysis.", "Assessed and approved Firefighter (FF) access requests and managed associated security controls and reporting.", "Led and developed a team of 4 SAP Security professionals, providing technical guidance and supporting continuous knowledge development.", "Supported SAP GRC implementation, including connector creation/activation, BC Sets, workflow configuration, and Firefighter ID setup.", "Recommended SAP Security process improvements and enforced governance across SOX, SoD, SLA, KPI, reporting, and audit requirements." ] }, { "company": "Indra @ Client Telefonica", "position": "Senior SAP Security Consultant", "startDate": "2014-07", "endDate": "2015-02", "highlights": [ "Provided global SAP Security support for Telefonica users via BMC Remedy, SAP Solution Manager, and Portal.", "Managed SAP user administration via SU01/SU10, including provisioning, lifecycle management, locks/unlocks, passwords, and naming conventions.", "Created Single, Parent, Derived, and Composite Roles in PFCG and maintained authorization documentation.", "Created QA test IDs, assigned roles, and resolved authorization issues using SU53/ST01.", "Reviewed security requirements and change documentation and coordinated Business/Security Lead approvals.", "Managed GRC Access Control 10 requests, uploaded roles to BRM, and resolved SoD conflicts.", "Created RFC connections and configured SAP and SAP Print Server printers." ] }, { "company": "ENARSA", "position": "Senior SAP Security Consultant | ENARSA", "startDate": "2017-07", "endDate": "2017-11", "highlights": [ "Supported SAP Security operations for ENARSA employees and contributed to SAP BCS implementation activities.", "Designed the SAP Security Role Matrix and developed roles supporting the BCS implementation.", "Managed SAP user administration through SU01/SU10, including user IDs, naming conventions, passwords, and access provisioning.", "Designed and modified Single, Derived, and Composite Roles in PFCG and maintained authorization-object documentation.", "Redesigned SD/MM roles and created QA test IDs for Functional Leads to support security validation.", "Created and administered SAP OSSUSER and Developer accounts across SAP and SAP Marketplace.", "Managed Active Directory/VPN accounts and SAP transport requests through STMS.", "Transported SAP Security roles across DEV, QA, and PRD environments, ensuring controlled deployment and security governance." ] }, { "company": "ITProviders Consulting @ AB InBev Brewery", "position": "Senior SAP Security Consultant / IT Compliance Lead | ITProviders Consulting @ AB InBev Brewery", "startDate": "2018-09", "endDate": "2019-04", "highlights": [ "Served as SAP Security liaison to business teams, translating requirements into access, security, and compliance solutions.", "Managed internal and external SAP IT Security audit requests, coordinating evidence and supporting audit readiness.", "Designed, tested, and deployed SAP Security roles and administered users through SU01/SU10.", "Implemented SAP user-lifecycle controls, locking users inactive for 45+ days and deactivating users inactive for 90+ days.", "Performed GRC Access Control 10 Risk Analysis and Remediation, resolving SoD conflicts and enforcing access controls.", "Generated monthly SoD Risk Analysis reports using CSI Audit and reviewed identified access risks.", "Resolved authorization issues using SU53/ST01 and created custom SAP authorization objects.", "Managed Firefighter (FF) access approvals and generated monthly security reports for management.", "Led and mentored a team of 4 SAP Security professionals, supporting technical development and knowledge growth.", "Supported GRC implementation activities, including connector configuration, BC Sets, workflow configuration, and workflow setup." ] }, { "company": "Everis Consulting @ ENEL Energy", "position": "Team Leader | Senior SAP Security Consultant | Everis Consulting @ ENEL Energy", "startDate": "2019-06", "endDate": "2020-02", "highlights": [ "Led and mentored 4 Junior SAP Security Consultants, providing technical guidance and professional development.", "Translated business and Functional Lead requirements into SAP Security role design, testing, and deployment for an S/4HANA rollout.", "Designed and maintained Single, Parent, Derived, and Composite Roles in PFCG, including role documentation and authorization requirements.", "Managed SAP user administration through SU01/SU10 and provisioned role-based access aligned with approved business responsibilities.", "Performed authorization troubleshooting using STAUTHTRACE and uploaded SAP roles to GRC Business Role Management (BRM).", "Executed GRC Access Control 10 Risk Analysis/Remediation and resolved Segregation of Duties (SoD) conflicts using GRC Access Control 12.", "Created and transported SAP Security roles and generated QA test IDs for Functional Leads, supporting controlled testing and deployment.", "Recommended SAP Security process improvements and enforced governance across SOX, SoD, SLA, KPI, and project delivery requirements." ] }, { "company": "Globant @ DirecTV / SKY", "position": "Senior SAP Security Consultant | Globant @ DirecTV / SKY", "startDate": "2020-10", "endDate": "2021-05", "highlights": [ "Provided global SAP Security support and maintenance for DirecTV users, ensuring secure and continuous business access.", "Resolved SAP authorization incidents using SU53/ST01 and provisioned access based on approved job responsibilities and security requirements.", "Created QA test IDs and roles and collaborated with requesters to validate new roles and transaction codes during testing.", "Managed user administration, including locks, unlocks, passwords, and Single, Derived, and Composite Role creation using PFCG.", "Performed GRC Access Control 10 Risk Analysis and Remediation, identifying and mitigating Segregation of Duties (SoD) conflicts across roles and users.", "Created and transported SAP Security roles using SCC1 and analyzed role assignments, transactions, authorization objects, and values using SE16/SUIM.", "Enforced SAP Security governance, SoD, SOX, and Business/Security Lead approval requirements for security changes and access controls." ] }, { "company": "Globant @ Vital Supermarkets", "position": "Senior SAP Security Consultant | Globant @ Vital Supermarkets", "startDate": "2021-08", "endDate": "2021-12", "highlights": [ "Partnered with Business Teams and Functional Leads to translate requirements into secure SAP S/4HANA and Fiori role designs.", "Designed, configured, tested, and deployed Single, Derived, and Composite Roles using PFCG and standardized naming conventions.", "Managed SAP user creation and modification through SU01/SU10 and provisioned role-based access aligned with approved business responsibilities.", "Performed authorization troubleshooting using STAUTHTRACE and collaborated with requesters to validate and resolve role and access issues.", "Used SE16 and SUIM to analyze role assignments, parent/derived roles, transactions, authorization objects, and authorization values.", "Created and configured custom Z Authorization Objects with required fields and values to support business-specific security requirements.", "Configured SAP Fiori Apps, Catalogs, and Groups and partnered with SAP BI consultants to design, review, and validate security roles.", "Documented security changes and managed SAP transport activities across the system landscape, ensuring controlled deployment and governance." ] }, { "company": "Globant @ Deloitte UK", "position": "Senior SAP Security Consultant | Globant @ Deloitte UK", "startDate": "2022-01", "endDate": "2022-05", "highlights": [ "Provided global SAP Security support for Globant users supporting Deloitte UK operations, ensuring secure access across the SAP landscape.", "Managed SAP user provisioning through SU01/SU10 and validated user-to-role mappings across SAP, IDM, and Active Directory.", "Audited SAP/IDM user records via PA20, ZMRT_USER_MAPPING, ZMRT_USER_SECURTY, and Active Directory", "Created QA test IDs, assigned roles for Functional Leads, and administered users in HANA Studio to support controlled testing and access validation.", "Designed and maintained Single, Derived, and Composite Roles using PFCG and managed user locks, unlocks, and password administration.", "Resolved SAP authorization requests using SU53/ST01 and transported security roles across the SAP landscape, supporting controlled deployment.", "Applied SAP Security governance, SOX, SoD, SLA, KPI, and audit requirements across user administration and security change activities." ] }, { "company": "Syntax @ Barrick Gold", "position": "Senior SAP Security Consultant", "startDate": "2026-01", "endDate": "2026-07", "highlights": [ "Led SAP Security across the TSA lifecycle: discovery, design, role development, testing, cutover, go-live, hypercare, stabilization and exit", "Partnered with Business Owners, PMs, SAP Basis, IAM, Infrastructure and application teams to deliver SAP Security, access controls and governance", "Designed, developed and optimized Single, Derived and Composite Roles using Least Privilege, authorization concepts and business requirements", "Designed and implemented authorizations for various organizational levels to enforce access segregation and legal-entity separation", "Managed SAP users and roles, including provisioning, deprovisioning, mass assignments, validity, access removal and migration", "Performed SAP authorization troubleshooting and root-cause analysis using SU53, ST01, STAUTHTRACE, SU56, SUIM and PFCG across SAP environments", "Supported SIT, UAT, Cutover, Go-Live, validation and Hypercare, validating roles/authorizations, resolving defects and ensuring access and stabilization", "Executed SAP Security governance, compliance and TSA exit activities across role matrices, access reviews, certification, testing and audit documentation", "Managed change management, peer reviews, access decommissioning and obsolete authorization removal, ensuring a secure TSA exit" ] }, { "company": "Freelance @ Crucianelli S.A.", "position": "Senior SAP Security Consultant", "startDate": "2024-10", "endDate": "2025-03", "highlights": [ "Translated business and Functional Lead requirements into SAP role design, configuration, testing and deployment within SAP RISE environments", "Managed SAP user administration via SU01/SU10, provisioning access based on roles, responsibilities and approved business requirements", "Designed SAP roles using standardized naming conventions and implemented Fiori Catalogs, Groups, and Spaces for controlled application access", "Analyzed Functional and client change requests, translating requirements into actionable SAP Security configuration and access-control updates", "Created, tested and transported SAP Security roles across system landscapes, ensuring controlled and compliant promotion of security changes", "Analyzed and remediated Segregation of Duties (SoD) conflicts across roles and users, strengthening access governance and reducing compliance risk", "Resolved GRC Access Control 12 SoD reporting issues involving repository synchronization, role-user mappings and rule-set configuration", "Corrected GRC connectors and rule sets and rebuilt ARM workflows using MSMP/BRF+, resolving routing and provisioning issues" ] }, { "company": "Globant @ Corven", "position": "Senior SAP Security Consultant", "startDate": "2023-07", "endDate": "2024-09", "highlights": [ "Designed the SAP Security Role Matrix for SD, MM, FI, CO, EWM, PP and PM, establishing the S/4HANA security framework", "Provisioned SAP access based on job responsibilities and approved business requirements, maintaining controlled and compliant system access", "Created Single, Derived and Composite Roles in PFCG and configured Fiori Catalogs, Groups and application assignments", "Resolved SAP Security and authorization issues using STAUTHTRACE, performing root-cause analysis and access corrections", "Analyzed and remediated SoD conflicts using GRC Access Control 12, strengthening preventive and detective access controls", "Supported SIT and UAT by analyzing security defects, updating roles and resolving authorization gaps identified during testing", "Created and transported SAP Security roles across the landscape using SCC1, supporting controlled deployment of security changes", "Enforced security change governance through required approvals, ensuring auditability, SOX, SLA and project compliance" ] }, { "company": "Globant @ DirecTV / SKY", "position": "Senior SAP Security Consultant", "startDate": "2023-04", "endDate": "2023-07", "highlights": [ "Provided global SAP Security support and maintenance for DirecTV users, ensuring secure and continuous business access worldwide", "Resolved SAP authorization incidents using SU53 and ST01, performing root-cause analysis and restoring required user access", "Provisioned user access and created QA test IDs and roles based on job responsibilities, approved requirements and business validation", "Designed and maintained Single, Derived and Composite Roles in PFCG and validated new roles and transaction codes with business requesters", "Managed SAP user administration, including user locks, unlocks, password maintenance and access assignments", "Performed GRC Access Control 10 Risk Analysis and Remediation, identifying and mitigating Segregation of Duties (SoD) conflicts and access risks", "Created and transported SAP Security roles via SCC1, analyzing roles, transactions, authorization objects and values using SE16/SUIM", "Enforced SAP Security governance through required Business and Security Lead approvals for security changes, supporting SOX, SoD audit requirements" ] } ], "education": [ { "institution": "Briarcliffe College", "degree": "Bachelor of Fine Arts", "startDate": "1997", "endDate": "2002" } ], "skills": [ "Fluent in Spanish", "Independent contributor and collaborative team member with global SAP Security support experience", "Proactive ownership of goals, commitments, decisions, controls, and delivery outcomes", "SAP Security & IAM: User Administration, Provisioning, Deprovisioning, Least Privilege, Authorization Objects, Access Reviews", "Role Engineering: Single, Derived, Parent & Composite Roles, PFCG, Role Matrix, Redesign, Optimization, Testing, Transport & Landscape Synchronization", "SAP GRC: Access Control 10/12, ARA, BRM, ARM, EAM, CUP & SoD", "SAP Platforms: SAP ECC, SAP S/4HANA, SAP RISE, SAP Fiori, SAP HANA Studio, SAP Ariba, SAP SuccessFactors, SAP Portal, SAP BCS", "Compliance & Governance: SOX, Segregation of Duties, ITIL, Security Policies, Regulatory Compliance, Audit Support Controls, Evidence, SLA, KPI", "Leadership & Delivery: Team Leadership, Mentoring, Global SAP Support, Incident Management, SIT/UAT, Cutover, Hypercare, TSA, Change Management", "SAP Security", "SAP S/4HANA", "SAP user administration", "SU01", "SU10", "PFCG", "Fiori Catalogs", "ECC", "SAP Ariba", "SuccessFactors", "QA test IDs", "SIT/UAT testing", "SU53", "ST01", "Segregation of Duties (SoD)", "SCC1", "SE16", "SUIM", "SOX", "IDM", "Active Directory", "HANA Studio", "STAUTHTRACE", "Custom Z Authorization Objects", "SAP BI", "GRC Access Control 10", "GRC Access Control 12", "GRC Business Role Management (BRM)", "SAP IT Security audit", "User-lifecycle controls", "CSI Audit", "Firefighter (FF) access", "Connector configuration", "BC Sets", "Workflow configuration", "SAP OSSUSER", "SAP Marketplace", "Active Directory/VPN", "STMS", "SAP Portal", "SAP ECC", "SAP RISE", "SAP GRC", "SAP Fiori", "SAP BCS", "SAP HANA Studio", "SAP SuccessFactors", "SAP BTP/Cloud Security", "Access Control", "Risk Analysis", "SoD", "Compliance", "CHARM", "STAD", "GRC AC 10/12", "ARA", "ARM", "BRM", "EAM", "CUP", "MSMP", "BRF+", "Groups", "Spaces", "Authorization Objects" ], "languages": [ { "language": "Spanish", "fluency": "Fluent" } ], "certificates": [ { "name": "SAP Business Intelligence 7.0", "issuer": "SAP Certification", "date": "2008-10" } ], "referencesMode": "on-request", "x-customSections": [ { "name": "SAP COURSES", "items": [ { "name": "SAP Security", "summary": "Axigma Technologies · 2013. Completed", "date": "2013" }, { "name": "SAP Basis", "summary": "Axigma Technologies · 2015. Completed", "date": "2015" }, { "name": "SAP MM", "summary": "Axigma Technologies · 2020. Completed", "date": "2020" }, { "name": "Project Management Framework & Project Management Processes", "summary": "Project Management Institute · 2007. Completed", "date": "2007" }, { "name": "SAP Fiori Security and Authorizations ADM945", "summary": "SAP Learning Hub · Completed" }, { "name": "Principles of SAP Governance, Risk and Compliance GRC100", "summary": "SAP Learning Hub · Completed" }, { "name": "Access Control Implementation and Configuration GRC300", "summary": "SAP Learning Hub · Completed" }, { "name": "ADM900 SAP Security Fundamentals", "summary": "SAP Learning Hub · Completed" } ] }, { "name": "LEADERSHIP TRAINING", "items": [ { "name": "Leap Leadership Certification", "summary": "Globant Training" }, { "name": "The Leaders Path", "summary": "Globant Training" }, { "name": "The Basics of Leading Teams", "summary": "Globant Training" }, { "name": "Team Coordination", "summary": "Globant Training" } ] } ], "availability": { "status": "actively-looking", "roles": [ "SAP SECURITY CONSULTANT" ], "employmentType": [ "full-time", "contract", "part-time" ], "startDate": "2026-08-24", "sponsorship": false }, "ats": { "keywords": [ "SAP Security Analyst", "AES Corp", "Senior SAP Security Consultant", "Freelance | Client: Cencosud", "Freelance @ AB InBev", "Indra @ Client Telefonica", "Senior SAP Security Consultant | ENARSA", "ENARSA", "ITProviders Consulting @ AB InBev Brewery", "Everis Consulting @ ENEL Energy", "Senior SAP Security Consultant | Globant @ DirecTV / SKY", "Globant @ DirecTV / SKY", "Globant @ Vital Supermarkets", "Senior SAP Security Consultant | Globant @ Deloitte UK", "Globant @ Deloitte UK", "Syntax @ Barrick Gold", "Freelance @ Crucianelli S.A.", "Globant @ Corven", "Fluent in Spanish", "SAP GRC: Access Control 10/12, ARA, BRM, ARM, EAM, CUP & SoD", "SAP Security", "SAP S/4HANA", "SAP user administration", "SU01", "SU10", "PFCG", "Fiori Catalogs", "ECC", "SAP Ariba", "SuccessFactors", "QA test IDs", "SIT/UAT testing", "SU53", "ST01", "Segregation of Duties (SoD)", "SCC1", "SE16", "SUIM", "SOX", "IDM", "Active Directory", "HANA Studio", "STAUTHTRACE", "Custom Z Authorization Objects", "SAP BI", "GRC Access Control 10", "GRC Access Control 12", "GRC Business Role Management (BRM)", "SAP IT Security audit", "User-lifecycle controls", "CSI Audit", "Firefighter (FF) access", "Connector configuration", "BC Sets", "Workflow configuration", "SAP OSSUSER", "SAP Marketplace", "Active Directory/VPN", "STMS", "SAP Portal", "SAP ECC", "SAP RISE", "SAP GRC", "SAP Fiori", "SAP BCS", "SAP HANA Studio", "SAP SuccessFactors", "SAP BTP/Cloud Security", "Access Control", "Risk Analysis", "SoD", "Compliance", "CHARM", "STAD", "GRC AC 10/12", "ARA", "ARM", "BRM", "EAM", "CUP", "MSMP", "BRF+", "Groups", "Spaces", "Authorization Objects", "Spanish", "SAP Business Intelligence 7.0", "Axigma Technologies", "SAP Basis", "SAP MM", "Project Management Framework & Project Management Processes", "Project Management Institute", "SAP Fiori Security and Authorizations ADM945", "SAP Learning Hub", "Principles of SAP Governance, Risk and Compliance GRC100", "Access Control Implementation and Configuration GRC300", "ADM900 SAP Security Fundamentals", "Leap Leadership Certification", "Globant Training", "The Leaders Path", "The Basics of Leading Teams", "Team Coordination" ], "yearsOfExperience": 0, "seniority": "lead", "highestEducation": "Bachelor's" }, "verification": { "email": true, "platform": "freecv.org" }, "i18n": { "primary": "en" }, "meta": { "version": "1.2.2", "canonical": "https://livelink.cv/robertr-soria/cv.json", "lastModified": "2026-08-24T01:18:31.907Z", "generator": "FreeCV.org" } }