You're seeing this page as if you were . The main menu is still yours, though. Exit from immersion
Thibaut MorelTM

Thibaut Morel

SAP GRC & Authorizations Consultant

€900/day
Nice, FR
8-15 years

Average response time: 1 hour

Freelancer profile translated to English.
Back to original language

About Thibaut

SAP GRC & Authorizations consultant specialized in securing and transforming SAP access models across ECC and S/4HANA environments.

I support SAP transformation programs by designing sustainable authorization concepts, reducing SoD risks and improving access governance while maintaining operational efficiency.

Core expertise:
• SAP Authorizations design & redesign
• S/4HANA authorization conversion & Fiori security
• SAP GRC Access Control implementation & optimization
• SoD risk analysis and remediation programs
• Business roles & Core model governance

Available for freelance missions supporting SAP transformation and security programs.

------------------------

Consultant SAP GRC & Authorisations spécialisé dans la sécurisation et la transformation des modèles d’accès SAP dans des environnements ECC et S/4HANA.

J’accompagne les programmes de transformation SAP en concevant des concepts d’autorisations durables, en réduisant les risques SoD et en améliorant la gouvernance des accès tout en maintenant l’efficacité opérationnelle.

Expertise principale :
• Conception et refonte des autorisations SAP
• Conversion des autorisations vers S/4HANA et sécurité Fiori
• Implémentation et optimisation de SAP GRC Access Control
• Analyse des risques SoD et programmes de remédiation
• Rôles métiers et gouvernance du core model

Disponible pour des missions freelance dans le cadre de programmes de transformation et de sécurisation SAP.
  • French

    Native or bilingual

  • English

    Fluent

Remote only
Primarily works remotely

Experience

  • TM Consulting
    SAP GRC & Authorizations Consultant — Freelance
    CONSULTING AND AUDITS
    February 2025 - Today (1 year and 4 months)
    Independent SAP GRC & Authorizations consultant supporting organizations in securing and transforming SAP access models.

    Activities:
    • SAP authorization model design and optimization
    • ECC to S/4HANA authorization conversion
    • Business roles definition and governance
    • SoD risk analysis and remediation
    • SAP GRC Access Control implementation and administration
    • Fiori authorization concept adaptation
    SAP Fiori Authorizations SAP GRC Access Control SAP S/4 HANA SAP Audit & Compliance Segregation of Duties
  • ArtimIS
    Governance, Risk & Compliance Advisory
    CONSULTING AND AUDITS
    May 2022 - August 2024 (2 years and 3 months)
    Paris, France
    • CNAV – S/4HANA GRC Transformation (15 months, 3 FTE)
    Led end-to-end implementation of SAP GRC Access Control on flagship S/4HANA migration for France's largest pension fund. Designed unified authorization model with Fiori interface, established SoD risk matrix for critical regulatory environment, and orchestrated secure transition from legacy GRC to SAP-native solution. Impact: Production-ready security architecture for mission-critical government entity.
    • Faurecia – Enterprise Compliance Leadership (12 months, 3 FTE)
    Drove comprehensive IT process compliance program as Compliance Lead, managing role model evolution, SoD risk remediation, and privileged access governance. Mapped complete risk matrix, aligned security policies across group entities, and remediated critical compliance gaps. Impact: Enterprise-wide compliance posture aligned with group security standards.
    • Avril – S/4HANA GRC Adoption Support
    Supported strategic client through S/4HANA transformation program with GRC implementation and access control architecture enablement during critical ramp-up phase. Ensured seamless security framework deployment and user access certification.
  • Mazars
    Governance, Risk & Compliance Advisory
    CONSULTING AND AUDITS
    November 2015 - May 2022 (6 years and 6 months)
    Paris, France
    GRC (Governance, Risk & Compliance) and SAP Authorizations Technology Consulting. Implementation of GRC solutions such as SAP GRC Access Control / Process Control to secure a company's information system and prevent all types of fraud.
    Administration of Risk Management Support Tools.

    • Technical and functional expertise in various SAP modules: Business processes and SAP authorization management
    • Internal control, Governance, and compliance expertise
    • Integration and mastery of SAP GRC Access Control (5.x and 10.x), Process Control, Risk Management tools

    FAURECIA
    Sector: Automotive
    1.5 years
    SAP GRC & Authorizations
    • Implementation of SAP GRC Access Control 10.1 ARA, EAM tools
    • Authorization solution remediation
    • User remediation across a global scope (25,000 users, 380 sites, 23 countries)
    Technical environment: SAP ECC6 GRC AC 10.1

    GROUPE JARDEN
    Sector: Industry/Consumer Goods
    6 months
    SAP GRC & Authorizations
    • Authorization solution remediation
    • Deployment of the solution to newly acquired entities (external growth)
    Technical environment: SAP ECC6 GRC AC 10.1

    L'OREAL
    Sector: Cosmetics & Luxury
    • Administration of the Enablon Solution "Risk Management & Internal Control"
    • Launch and monitoring of Audit campaigns
    • Launch and monitoring of Self-Assessment campaigns
    • Drafting/Implementation and monitoring of Solution evolutions

    • Project for remediation of segregation of duties risks at the Business Roles and SAP user level
    - Iberia (650 users)
    - French Market Business (850 users)

    ALCATEL LUCENT ENTERPRISE
    Sector: Telecommunications
    • SAP Authorizations redesign
    • Review of SAP rights assignment processes
    • Definition of the segregation of tasks matrix
    • Definition of business roles

Recommendations

Be the first to recommend Thibaut

Help this freelancer shine by sharing your experience working together.

These freelancer profiles also match your criteria

AgathaA

Agatha Frydrych

Backend Java Software Engineer

4.7

(3)

2

BaptisteB

Baptiste Duhen

Fullstack developer

4.6

(4)

5

AmedA

Amed Hamou

Senior Lead Developer

4

(2)

7

AudreyA

Audrey Champion

Web developer

4.3

(3)

4

Education

  • MSc Auditing, Management Accounting & Information Systems
    Skema Business School
    2012

Skill set

Categories