Security Governance & Controls Engineer — Cloud & Compliance Leader

SAP Fioneer; Österreich; Hybrid; EUR 70.000 - 110.000; Vollzeit

Zusammenfassung

SAP Fioneer is seeking a Security Governance & Controls Engineer to strengthen and scale security practices across our products, operations, and customer commitments. You will partner with engineering, infrastructure, product and business teams to ensure security controls are effective, measurable, and aligned with business goals.

The role requires expertise in security frameworks, risk management, and translating requirements into practical, scalable processes.

Qualifikationen

• Minimum 5 years in information security, compliance, risk, audit, or related fields.
• Hands-on SOC 2 program experience with design, evidence, audit coordination, remediation.
• Strong knowledge of SOC 2 and ISO 27001 standards.
• Ability to assess risks and communicate to both tech and business audiences.
• Experience working cross-functionally with engineering, product, and business teams.

Aufgaben

• Design, implement, and improve security controls across cloud, SaaS, identity, infrastructure, and application environments
• Perform security risk assessments, control reviews, gap analyses, and design remediation
• Drive SOC 2, ISO 27001, and related assurance activities, including audit support and continuous compliance
• Partner with Engineering, IAM, IT, Security Ops to embed security requirements into technology and processes
• Support customer-facing security activities including reviewing security clauses in contracts, RFPs, inquiries, due diligence, audits

Kenntnisse

Information security

SOC 2 programs

ISO 27001

Risk management

Cross-functional collaboration

Tools

Compliance automation

Governance tooling

Jobbeschreibung

SAP Fioneer is seeking a Security Governance & Controls Engineer to strengthen and scale security practices across our products, operations, and customer commitments. You will partner with engineering, infrastructure, product and business teams to ensure security controls are effective, measurable, and aligned with business goals.

The role requires expertise in security frameworks, risk management, and translating requirements into practical, scalable processes.