Senior Manager — SAP GRC Solution Architect, Audit & Compliance Governance

Ebro Electronic GmbH; Bengaluru; Hybrid; INR 2,800,000 - 5,200,000; Full time

Job summary

Xylem Water Solutions Netherlands sucht eine erfahrene Führungskraft im SAP GRC-Bereich zur globalen Bereitstellung von Rollen- und Berechtigungsmanagement. Sie verantworten das GRC-Produkt, leiten eine weltweite Mannschaft und arbeiten eng mit Audit- und Compliance-Teams zusammen, um Prozesse, Sicherheit und Governance zu optimieren.

Die Rolle erfordert Expertise in S/4HANA-Berechtigungen, EAM/ARM-Design sowie Maßnahmen zur SoD-Remediation.

Qualifications

• 15+ Jahre SAP-Sicherheit und GRC, davon ≥5 Jahre Führungsverantwortung.
• Tiefe SAP GRC Access Control Expertise – ARA, EAM, BRM, ARM inklusive Ruleset-Design.
• Expertise in S/4HANA-Berechtigungsdesign: Objekte, Fiori-Kataloge, Berechtigungsgruppen.
• Nachweisliche SoD-Regelsetzung und Remediation in globalen Programmen.
• Starke SOX ITGC- und Anwendungs-Kontroll-Erfahrung in börsennotierten Unternehmen.
• Automatisierte Kontrollen mit evidenzbasierter Laufzeit statt manueller Prüfungen.
• Erfahrung in multi-Wave Globale Deployments, inkl. Cutover und Hypercare.

Responsibilities

• Verantwortung für globale SAP-Rollen-Design-Strategie und Architektur.
• Risikobewertung, Design von Abhilfemaßnahmen und Remediation von SoD-Konflikten.
• Rollenlebenszyklusmanagement: Change-Control, Tests, Freigaben, Recertification.
• Aufbau und Betrieb von SAP GRC-Produktbacklog, Release Cadence und Continuous Improvement.
• Sicherstellen von Provisioning/Deprovisioning, Identity Management und HR-Lifecycle-Integration.
• Schnittstelle zu interner/externer Auditierung, Evidence Bereitstellung und Deficiency-Tracking.
• Zusammenarbeit mit ABAP/BTP, Basis-Team und Prozessverantwortlichen.

Skills

SAP GRC Access Control

SoD Analysis

SOX ITGC

Leadership

Fiori & S/4HANA Authorization

Identity Management

Audit & Compliance

Tools

AR A/EAM/BRM/ARM

ABAP/BTP

Job description

## Senior Manager — SAP GRC Solution Architect, Audit & Compliance GovernanceBewerben: Hybrid: Bangalore: Full time: Heute ausgeschrieben: R51133Xylem ist ein Fortune 500 Wassertechnologieunternehmen mit global 23.000 Mitarbeitenden in über 100 Ländern und einer Mission: unseren Kunden durch innovative Technologielösungen und unser Fachwissen bei der Lösung von Wasserproblemen und -herausforderungen zu helfen. Wir sind der weltweit führende Anbieter effizienter, innovativer und nachhaltiger Wassertechnologien, die dafür sorgen, dass unser Wasser nachhaltig genutzt, optimal verwaltet, erhalten und wiederverwendet wird.**Access control architecture and role design**● Own the global SAP role design strategy and architecture — business role catalog, derivation strategy, namingstandards, and the design principles that keep roles maintainable as segments and waves are added.● Design and maintain the segregation of duties ruleset, aligned to business process risk and validated withinternal audit, external audit, and process owners rather than accepted as a vendor default.● Own risk analysis, mitigation control design, and the remediation roadmap for SoD conflicts across thelandscape, including the standing view of accepted risk and who accepted it.● Establish role lifecycle management: change control, testing, approval, and periodic recertification withbusiness role ownership that is named and accountable. **SAP GRC solution ownership**● Own SAP GRC design, configuration, and operations across Access Control — Access Risk Analysis,Emergency Access Management, Business Role Management, and Access Request Management — andProcess Control where applicable.● Operate GRC as a product with a backlog and release cadence: ruleset maintenance, workflow design,connector management, and continuous improvement.● Own Emergency Access Management end to end — firefighter provisioning model, allocation approach,activity logging, and log review discipline enforced within required windows. Where review timeliness hasslipped in the past, you own the design change that makes it structurally difficult to slip again● Ensure any provisioning path that operates outside GRC — cutover accounts, data load IDs, technical users— is deliberately designed, time-bound, monitored, and formally closed, never left as an undocumentedresidue after go-live.● Own user provisioning and deprovisioning integration with identity management, joiner-mover-leaverprocesses, and HR-driven access lifecycle. **Audit and compliance governance**● Own SOX IT general controls and application controls for the SAP landscape: access to programs and data,program change, program development, and computer operations.● Serve as primary interface to internal audit, external audit, and control owners — evidence provision,walkthrough support, deficiency response, and remediation tracking to closure.● Design controls so evidence is generated as a byproduct of the system operating correctly, rather thanassembled manually at audit time.● Maintain continuous control monitoring across access, configuration, and financial process controls, withexceptions routed to owners for action.● Own the compliance framework for data privacy and regulatory requirements as they apply to SAP data acrossregions. **Deployment wave and program integration**● Provide GRC and controls readiness as a formal go-live gate for every deployment wave: role build, SoDanalysis, mitigating controls in place, and clean provisioning before cutover.● Partner with the ABAP and BTP team on SoD-safe development standards, custom transaction and Fiori apprisk classification, and authorization object design.● Partner with the Basis Leader on technical security operations, privileged access, and audit logging.● Partner with process owners and the Data Conversion and MDG leads so control design reflects the actualprocess design, not an idealized version of it.● Lead a global team of GRC and security consultants across onshore and offshore, and hold AMS and systemintegrator partners accountable for role quality and control adherence. **Qualifications****Required**● 15+ years in SAP security and GRC, with at least 5 years in a solution architect or global leadership capacity.● Deep hands-on SAP GRC Access Control expertise — ARA, EAM, BRM, ARM — including ruleset design,workflow configuration, and connector architecture in production.● Expert-level S/4HANA authorization design: authorization objects, Fiori catalogs, groups and spaces, businessroles, and the differences from classical ECC role design.● Proven ownership of SoD ruleset design and remediation on a global program, with demonstrated conflictreduction rather than documented conflict.● Strong SOX ITGC and application control experience in a publicly listed environment, with direct external auditengagement.● Demonstrated design of controls that are automated and continuously evidenced, not dependent on manualperiodic execution.● Experience delivering security and controls through multi-wave global S/4HANA deployments, including cutover and hypercare. ● Ability to hold a control position under delivery pressure — the credibility to explain to a program leader why anexception costs more than the delay.Preferred● SAP Identity Management, IAG, or third-party IAM integration (SailPoint, Saviynt, Okta).● SAP Process Control, Risk Management, or continuous control monitoring platforms.● RISE with SAP security and shared responsibility model experience.● BTP security architecture, identity propagation, and authorization models.● CISA, CISM, CRISC, or SAP security certification.● Manufacturing or industrial sector control environment, including plant-level and trade complianceconsiderations. **Success in the First 12 Months**A rationalized global role model with named business role owners and a validated SoD ruleset. Firefighter usageunder a controlled model with log reviews completed inside required windows, evidenced automatically. Allnon-GRC provisioning paths inventoried, time-bound, and closed. Controls readiness established as anon-negotiable go-live gate. Audit findings and deficiencies closed on schedule, with a measurable reduction inrepeat findings. And a control environment where evidence is produced by the system rather than assembled bypeople. **Operating Principles You Will Work Under**● Products, not projects. Persistent teams aligned to value streams, funded by capacity rather than projectcycles, each paired with a business process owner accountable for the outcome.● Clean core is non-negotiable. Extensions live on BTP, the core stays standard, and custom code is governed at the point of creation.● Paved road, not toll booth. Golden paths, reference architectures, and reusable patterns, with guardrailsenforced in the pipeline rather than in a design authority meeting.● Compliance by default. Controls are designed into the platform and evidenced automatically, so controlintegrity holds at deployment scale.● Accountable for value, not volume. Success is measured in business process KPIs, adoption, and realizedvalue, not tickets closed or hours delivered.● Intelligent enterprise by design. AI and agent enablement, and the data readiness that makes both credible,are owned capabilities.● Global template authority, local execution. Template integrity is held centrally through the currentdeployment horizon, with a defined path to greater product-team autonomy. Werden Sie Teil des globalen Xylem-Teams und gestalten Sie innovative Technologielösungen mit, die die Nutzung, Verfügbarkeit, den Schutz und die nachhaltige Verwendung von Wasser sicherstellen. Unsere Produkte kommen in der öffentlichen Versorgung, der Industrie, im Wohnbereich und in gewerblichen Gebäuden zum Einsatz – mit dem Ziel, intelligente Maschinen, Anlagen, Messsysteme, Netzwerktechnologien und fortschrittliche Analysen für Wasser-, Strom- und Gasversorger sowie die Industrie bereitzustellen. Arbeiten Sie mit uns an einer Welt, in der die aktuellen und kommenden Wasserherausforderungen mit Kreativität und Engagement gelöst werden und in der Inklusion und Zugehörigkeit als Treiber für Innovation erkannt werden, um unsere Wettbewerbsfähigkeit weltweit zu stärken.