Senior Manager — SAP GRC Solution Architect, Audit & Compliance Governance

Xylem; Bengaluru; On-site; INR 4,800,000 - 9,600,000; Full time

Job summary

Xylem in Bengaluru, India seeks an experienced SAP security and GRC leader to steer global S/4HANA security programs. You will own SoD design, SOX ITGC, and automated control schemes across multi-wave deployments, including cutover and hypercare.

Ideal candidates have 15+ years in SAP security/GRC, hands-on ARA/EAM/BRM/ARM expertise, and a proven track record in governance, risk, and audit engagement in public companies.

Qualifications

• 15+ years in SAP security and GRC with leadership in solution architecture.
• Hands-on SAP GRC Access Control expertise (ARA, EAM, BRM, ARM) incl. ruleset design.
• Expert-level S/4HANA authorization design covering objects, Fiori catalogs, and business roles.
• SoD ruleset design and remediation ownership on global programs with conflict reduction.
• Strong SOX ITGC and application controls experience with external audit engagement.
• Automated controls design and evidence-based, not manual periodic execution.
• Experience delivering security across multi-wave global S/4HANA deployments (cutover, hypercare).
• Ability to justify exceptions under delivery pressure to program leaders.

Skills

SAP security

GRC

solution architecture

global leadership

GRC Access Control

ruleset design

workflow configuration

connector architecture

S/4HANA authorization

authorization design

Fiori catalogs

business roles

SoD design

remediation

SOX ITGC

application controls

external audit

automated controls

continuous evidence

S/4HANA deployments

cutover

hypercare

delivery pressure

risk justification

Job description

• 15+ years in SAP security and GRC, with at least 5 years in a solution architect or global leadership capacity.


• Deep hands-on SAP GRC Access Control expertise — ARA, EAM, BRM, ARM — including ruleset design, workflow configuration, and connector architecture in production.


• Expert-level S/4HANA authorization design: authorization objects, Fiori catalogs, groups and spaces, business roles, and the differences from classical ECC role design.


• Proven ownership of SoD ruleset design and remediation on a global program, with demonstrated conflict reduction rather than documented conflict.


• Strong SOX ITGC and application control experience in a publicly listed environment, with direct external audit engagement.


• Demonstrated design of controls that are automated and continuously evidenced, not dependent on manual periodic execution.


• Experience delivering security and controls through multi-wave global S/4HANA deployments, including cutover and hypercare


• Ability to hold a control position under delivery pressure — the credibility to explain to a program leader why an exception costs more than the delay.

Preferred

• SAP Identity Management, IAG, or third-party IAM integration (SailPoint, Saviynt, Okta).


• SAP Process Control, Risk Management, or continuous control monitoring platforms.


• RISE with SAP security and shared responsibility model experience


• BTP security architecture, identity propagation, and authorization models


• CISA, CISM, CRISC, or SAP security certification


• Manufacturing or industrial sector control environment, including plant-level and trade compliance considerations.