Tobias Stötzer-Project Manager Business Technology Platform BTP

To achieve savings and optimize compliance, apps were restructured to align with identity management assignments, restrictions were defined, and overuse costs were cut. Communication with stakeholders, permission validation with users, and technical implementation provided significant added value for the group. Documentation was also prepared for the financial audit.

• Design of identity and access management for the new system landscape, including Fiori and integration of various target systems
• Integration of MS Azure, SAP S/4 HANA, and migration of legacy systems
• Preparation of decision templates for GRC, prototypes for EAM, and implementation concepts
• Identification of dependencies and performance of security checks
• Management of the provider and coordination of internal and external stakeholders

• Update of policies and permission concepts for GRC linked to ERP, CRM, and identity management
• Security status analysis and optimization of the GRC solution for monitoring critical permissions
• Ensuring segregation of duties
• Configuration of the approval workflow for critical permissions and SoD, including mitigation
• Audit preparation and review of risk management, including concept creation and review of EAM Fire Fighter

• Improving processes after acquiring new organizational units by using the SAP Business Technology Platform
• Extending GRC customizing and creating extensive functionalities for IAM and organizational structures
• Ensuring end-to-end coverage of data structures in SAP HANA through analysis, tracing, and workshops
• Using efficient methodologies and innovative concepts to improve SSO operations

• Integrating Oracle, SAP system landscape GRC, BTP, security appliances, and cloud services for encrypted communication
• Authentication using RSA RADIUS, Kerberos, SNC, SPNego, SAML, LDAP/AD, 2FA, and Java
• Configuring systems with parameter definitions and designing the IT architecture
• Analyzing logs and tracing authentication

• Further development of the system landscape with implementation of GRC Access Control, EAM, SNC and CheckAud
• Optimization of a multi-level role model with segregation of duties and separation of critical permissions
• Worldwide deployment including provider management
• Implementation of an integrated end-to-end access management to prepare for S/4 HANA with Fiori for authenticity, identity, authorization, availability and traceability

• Conversion of function roles to resolve segregation of duties conflicts
• IAM analysis of transaction distribution
• Implementation of ERP, GRC, Solution Manager and SAP Basis

• Preparation for the OSI audit by the ECB with identity management and authorization concepts
• Analysis of the security status and development of a GRC solution for monitoring segregation of duties
• Access management and monitoring of system parameters via Process Control CCM
• Design of the IT architecture for a new on-premise core banking system with encryption and authenticity requirements

• Implementing an integrated access management solution in a complex, high-security system environment
• Developing authorization concepts for banking solutions, deposit management, and treasury
• Setting up rules based on audit findings