SAP Info Security Compliance Senior Specialist - SAP Converged Cloud 

Germany, Berlin 

816414139

With our global platform we are not only meeting international certification standards, but also fulfil local regulations and certifications with variations of the controls, terminology and methodology for audits. The job will include designing, maintaining and implementing controls, negotiating compensations and providing management responses.

• Collaboratively maintain roadmap of ongoing and upcoming audit activities
• Develop and document the pattern for planning, preparation, execution and follow-up of audit related activities
• Distinguish relevant controls and coordinate activities within and outside the team
• Continuously contribute to the security posture of our platform by automating the execution, monitoring and reporting of local security controls
• Act as contact person towards team-external stakeholders
• Create regular reporting to share progress status within the leadership team
  

What you bring:

• 10+ years of experience in the IT industry
• Solid understanding of various layers of cloud computing (IaaS, PaaS, SaaS), operational processes and their contractual, regulatory and legal relevance (ITIL Process Library, Shared Responsility Model, Knowledge of legal frameworks (EUDP/GDPR, SOX, etc.) and the ability to map them to audit controls and technical platform features)
• Experience with audit certification procedures, terminiology and controls, e.g.SOC 1 & 2, ISO 27001, 22301, BSI C5, PCI DSS, NIST SP 800
• Capability to negotiate control fulfilment criteria with auditors and derive specific requirements for the team
• Become a team-player with software engineers across GCID PlusOne to guide implementation of compliance-relevant requirements
• Fluent in English & German