SAP Security Analyst

TekOne IT Services Pvt. Ltd.; Charlotte (NC); On-site; USD 110,000 - 170,000; Full time

Job summary

Xylem is seeking a Senior Analyst, SAP Security & GRC to lead hands-on SAP security, GRC, and RevTrac activities across transport and change controls. The role will design and maintain scalable SAP access models, drive governance, and support audit readiness through strong documentation and disciplined execution.

The ideal candidate will bring hands-on experience with SAP Security, SAP GRC, RevTrac, and the ability to collaborate with technical and business stakeholders to implement secure and

Qualifications

• Bachelor’s degree or equivalent professional experience.
• Senior-level experience supporting SAP Security in a complex enterprise environment.
• Hands-on experience with SAP GRC design, administration, and access governance.
• Strong understanding of SAP role design, authorization concepts, access controls, and governance principles.
• Experience supporting audits, including documentation and evidence preparation.
• Strong SoD and access risk management understanding.
• Excellent written and verbal communication; ability to collaborate with stakeholders.

Responsibilities

• Lead design, development, maintenance, and improvement of SAP security roles and authorization concepts.
• Define scalable access models aligned with business requirements and security standards.
• Oversee SoD evaluation, access provisioning, reviews, and remediation activities.
• Provide governance for SAP GRC design and administration, including risk and compliance objectives.
• Manage RevTrac transport and change controls, ensuring proper approvals and governance.
• Develop and maintain audit documentation and evidence for internal/external reviews.
• Collaborate with SAP functional teams and IT to translate requirements into secure solutions.

Skills

SAP Security

SAP GRC

RevTrac

SoD concepts

Audit readiness

Documentation

Communication

Education

Bachelor’s degree or equivalent

Tools

RevTrac

SAP GRC

SAP Security

Job description

Xylem is seeking a Senior Analyst, SAP Security & GRC to provide hands-on functional and administrative leadership across SAP Security, SAP GRC, and RevTrac-related transport and change controls.

This senior-level position will be responsible for designing, maintaining, and continuously improving secure and scalable SAP access models. The role will also oversee governance, risk, and compliance processes and support audit readiness through strong documentation, effective controls, and disciplined execution.

The ideal candidate will have strong hands-on experience with SAP Security, SAP GRC, and RevTrac, along with the ability to work independently, collaborate effectively with technical and business stakeholders, and drive secure and compliant processes across a complex SAP environment.

Key Responsibilities

SAP Security & Role Design

• Lead the design, development, maintenance, and continuous improvement of SAP security roles and authorization concepts.
• Define and maintain scalable access models aligned with business requirements and enterprise security standards.
• Partner with business and IT stakeholders to evaluate access requirements and ensure appropriate segregation of duties (SoD).
• Support and oversee user access provisioning, role modifications, access reviews, and remediation activities.
• Analyze authorization issues and recommend appropriate security and access‑control solutions.
• Ensure SAP security practices align with established governance, compliance, and internal control requirements.

SAP GRC Design & Administration

• Serve as a primary subject matter resource for SAP GRC design, configuration support, and administration.
• Maintain and enhance SAP GRC processes supporting access governance, risk management, and compliance objectives.
• Support access risk analysis, mitigation, remediation, and periodic review activities.
• Partner with stakeholders to identify control gaps and implement sustainable improvements.
• Monitor and continuously improve GRC processes, workflows, and controls to support business and compliance requirements.
• Provide guidance on access governance and risk management best practices.

RevTrac & Transport Controls

• Support and administer RevTrac processes related to SAP transport and change management.
• Help ensure SAP changes and transports follow established approval, segregation of duties, and governance requirements.
• Maintain effective transport controls and supporting documentation.
• Partner with development, functional, security, and change management teams to resolve transport‑related issues.
• Identify opportunities to standardize and improve SAP change and transport control processes.

Audit, Compliance & Documentation

• Develop, maintain, and organize documentation supporting internal and external audit requirements.
• Ensure SAP Security, GRC, access governance, and transport‑control evidence is accurate, complete, current, and readily accessible.
• Support internal and external audit requests, walkthroughs, control testing, and evidence collection.
• Coordinate remediation activities related to audit findings, control deficiencies, and access risks.
• Maintain clear documentation of security configurations, processes, procedures, and control activities.
• Promote strong documentation and control discipline across SAP security and governance processes.

Stakeholder Collaboration & Continuous Improvement

• Work closely with SAP functional teams, IT infrastructure, business stakeholders, internal controls, audit, and compliance teams.
• Translate business and compliance requirements into effective SAP security and access‑control solutions.
• Manage multiple priorities independently while meeting established deadlines and service expectations.
• Identify opportunities to improve, standardize, and automate SAP security and governance processes.
• Provide subject matter expertise and guidance on SAP Security, GRC, access governance, and transport controls.

Required Qualifications

• Bachelor’s degree in Information Systems, Computer Science, Business, or a related discipline, or equivalent professional experience.
• Senior‑level experience supporting SAP Security in a complex enterprise environment.
• Demonstrated hands‑on experience with SAP GRC design, administration, and access governance.
• Strong understanding of SAP role design, authorization concepts, access controls, and governance principles.
• Experience supporting internal and external audits, including documentation and evidence preparation.
• Strong understanding of segregation of duties (SoD) and access risk management concepts.
• Strong analytical, organizational, and problem‑solving skills.
• Ability to work independently, manage competing priorities, and operate effectively in a structured enterprise environment.
• Excellent written and verbal communication skills.
• Demonstrated ability to collaborate effectively with both technical and business stakeholders.

Preferred Qualifications

• Experience supporting SAP Security and GRC within a global enterprise environment.
• Hands‑on experience with RevTrac and SAP transport/change control processes.
• Experience improving, standardizing, or optimizing SAP security and transport‑control processes.
• Experience working in regulated, highly controlled, or compliance‑driven environments.
• Knowledge of SAP access risk analysis, mitigation controls, and periodic access review processes.
• Experience supporting cross‑functional compliance, audit, risk management, and change management initiatives.
• Strong understanding of enterprise IT controls and governance frameworks.

Core Competencies

• SAP Security & Authorization Management
• SAP GRC Administration & Access Governance
• Role Design & Segregation of Duties
• Access Risk Management
• RevTrac & SAP Transport Controls
• Audit & Compliance Support
• Control Documentation & Evidence Management