Senior Manager SAP GRC Solution Architect, Audit & Compliance Governance
Senior Manager SAP GRC Solution Architect, Audit & Compliance Governance
XylemEarly Applicant
- Posted a day ago
- Be among the first 10 applicants
Job Description
Qualifications
Required
- 15+ years in SAP security and GRC, with at least 5 years in a solution architect or global leadership capacity.
- Deep hands-on SAP GRC Access Control expertise — ARA, EAM, BRM, ARM — including ruleset design, workflow configuration, and connector architecture in production.
- Expert-level S/4HANA authorization design: authorization objects, Fiori catalogs, groups and spaces, business roles, and the differences from classical ECC role design.
- Proven ownership of SoD ruleset design and remediation on a global program, with demonstrated conflict reduction rather than documented conflict.
- Strong SOX ITGC and application control experience in a publicly listed environment, with direct external audit engagement.
- Demonstrated design of controls that are automated and continuously evidenced, not dependent on manual periodic execution.
- Experience delivering security and controls through multi-wave global S/4HANA deployments, including cutover and hypercare
- Ability to hold a control position under delivery pressure — the credibility to explain to a program leader why an exception costs more than the delay.
Preferred
- SAP Identity Management, IAG, or third-party IAM integration (SailPoint, Saviynt, Okta).
- SAP Process Control, Risk Management, or continuous control monitoring platforms.
- RISE with SAP security and shared responsibility model experience
- BTP security architecture, identity propagation, and authorization models
- CISA, CISM, CRISC, or SAP security certification
- Manufacturing or industrial sector control environment, including plant-level and trade compliance considerations.
More Info
Key Skills
SoD ruleset design and remediation
SAP Identity Management
BTP security architecture
SAP Process Control Risk Management
Continuous control monitoring platforms
S/4HANA authorization design
Authorization objects
Identity propagation and authorization models
Ruleset design
Workflow configuration
Connector architecture
RISE with SAP security and shared responsibility model
Business roles
SOX ITGC and application control
