SAP Security Analyst

Xylem is seeking a Senior Analyst, SAP Security & GRC to provide hands-on functional and administrative leadership across SAP Security, SAP GRC, and Rev Trac-related transport and change controls.

This senior-level position will be responsible for designing, maintaining, and continuously improving secure and scalable SAP access models. The role will also oversee governance, risk, and compliance processes and support audit readiness through strong documentation, effective controls, and disciplined execution.

The ideal candidate will have strong hands-on experience with SAP Security, SAP GRC, and Rev Trac, along with the ability to work independently, collaborate effectively with technical and business stakeholders, and drive secure and compliant processes across a complex SAP environment.

• Lead the design, development, maintenance, and continuous improvement of SAP security roles and authorization concepts.
• Define and maintain scalable access models aligned with business requirements and enterprise security standards.
• Partner with business and IT stakeholders to evaluate access requirements and ensure appropriate segregation of duties (SoD).
• Support and oversee user access provisioning, role modifications, access reviews, and remediation activities.
• Analyze authorization issues and recommend appropriate security and access‑control solutions.
• Ensure SAP security practices align with established governance, compliance, and internal control requirements.

• Serve as a primary subject matter resource for SAP GRC design, configuration support, and administration.
• Maintain and enhance SAP GRC processes supporting access governance, risk management, and compliance objectives.
• Support access risk analysis, mitigation, remediation, and periodic review activities.
• Partner with stakeholders to identify control gaps and implement sustainable improvements.
• Monitor and continuously improve GRC processes, workflows, and controls to support business and compliance requirements.
• Provide guidance on access governance and risk management best practices.

• Support and administer Rev Trac processes related to SAP transport and change management.
• Help ensure SAP changes and transports follow established approval, segregation of duties, and governance requirements.
• Maintain effective transport controls and supporting documentation.
• Partner with development, functional, security, and change management teams to resolve transport‑related issues.
• Identify opportunities to standardize and improve SAP change and transport control processes.

• Develop, maintain, and organize documentation supporting internal and external audit requirements.
• Ensure SAP Security, GRC, access governance, and transport‑control evidence is accurate, complete, current, and readily accessible.
• Support internal and external audit requests, walkthroughs, control testing, and evidence collection.
• Coordinate remediation activities related to audit findings, control deficiencies, and access risks.
• Maintain clear documentation of security configurations, processes, procedures, and control activities.
• Promote strong documentation and control discipline across SAP security and governance processes.

• Work closely with SAP functional teams, IT infrastructure, business stakeholders, internal controls, audit, and compliance teams.
• Translate business and compliance requirements into effective SAP security and access‑control solutions.
• Manage multiple priorities independently while meeting established deadlines and service expectations.
• Identify opportunities to improve, standardize, and automate…