Hi Shalini
Without you going into specifics of what type of ABAP support work you have done it is a bit difficult.
I come from a GRC/Security background and the only thing you have in common with security (and some of the GRC Access Controls) - I hope - would be knowing how to properly restrict your code with authority checks and proper DB calls via function modules/etc.
If you were to move down a GRC/Audit path, unless you have some specific audit qualification you would need to start from the beginning. Depending on the support you did for ABAP you might have a specific function module that you supported and could consider transitioning to that (possibly you employer might let you as well).
Having an ABAP background could extend towards the user interfaces and workflow. HANA is a platform (you can read up more look at free courses by searching SCN, check openSAP.com, etc). If you do not like programming, would you like technical topics? There is HANA development (and a lot of resources if you search) but I doubt you would want to do that if you don't like ABAP.
Cloud is how software is hosted/available to the client. At the end of the day it's about the applications... unless you were in a technical area responsible for the hosting, etc.
My recommendation is to think about your strengths, do a little research and find out what opportunities are within your employer. Support work is not bad (I wrote a blog recently after being fed up that people assume support work means not opportunities). However, if you do not believe you have the experience or interest in ABAP, perhaps your employer sees that too and is therefore, reluctant to provide you with opportunities outside of support (like a project).
Regards
Colleen