Qualifications Required
• 15+ years in SAP security and GRC, with at least 5 years in a solution architect or global leadership capacity.
• Deep hands-on SAP GRC Access Control expertise — ARA, EAM, BRM, ARM — including ruleset design, workflow configuration, and connector architecture in production.
• Expert-level S/4HANA authorization design: authorization objects, Fiori catalogs, groups and spaces, business roles, and the differences from classical ECC role design.
• Proven ownership of SoD ruleset design and remediation on a global program, with demonstrated conflict reduction rather than documented conflict.
• Strong SOX ITGC and application control experience in a publicly listed setting, with direct external audit engagement.
• Demonstrated design of controls that are automated and continuously evidenced, not dependent on manual periodic execution.




• Experience delivering security and controls through multi-wave global S/4HANA deployments, including cutover and hypercare
• Ability to hold a control position under delivery pressure — the credibility to explain to a program leader why an exception costs more than the delay. Preferred
• SAP Identity Management, IAG, or third-party IAM integration (SailPoint, Saviynt, Okta).
• SAP Process Control, Risk Management, or continuous control monitoring platforms.
• RISE with SAP security and shared responsibility model experience
• BTP security architecture, identity propagation, and authorization models
• CISA, CISM, CRISC, or SAP security certification
• Manufacturing or industrial sector control environment, including plant-level and trade compliance considerations.

📌 Senior Manager — SAP GRC Solution Architect, Audit (Bengaluru)
🏢 Xylem
📍 Bengaluru