Security GRC Specialist: Cloud & Compliance Leadership

SAP-Fionee; Österreich; Hybrid; EUR 90.000 - 120.000; Vollzeit

Zusammenfassung

SAP Fioneer is seeking a Security GRC Specialist to strengthen security practices across products, operations, and customer commitments. You will partner with engineering, IAM, IT, and business teams to ensure controls are effective, measurable, and aligned with business goals.

The role requires hands-on experience with SOC 2 and ISO 27001, risk management, and the ability to translate requirements into scalable processes. Fluent English and German proficiency are highly valued.

Qualifikationen

• 5+ years of information security experience or related security disciplines.
• Hands-on experience managing or supporting SOC 2 programs including control design and audit coordination.
• Strong knowledge of security frameworks and control standards such as SOC 2 and ISO 27001.
• Ability to assess security risks and communicate recommendations to technical and non-technical stakeholders.
• Experience working cross-functionally with engineering, product, and business teams to drive security initiatives.

Aufgaben

• Assist engineering teams to ensure security controls across cloud, SaaS, identity, infrastructure, and applications meet requirements.
• Perform security risk assessments, control reviews, gap analyses, and remediation planning with teams.
• Drive SOC 2, ISO 27001, and related assurance activities including evidence readiness and audit support.
• Partner with Engineering, IAM, IT, Security Operations and other stakeholders to embed security requirements into projects and processes.
• Support customer-facing security activities, including security inquiries, due diligence, and customer audits.

Kenntnisse

Security governance

SOC 2

ISO 27001

Risk management

Cross-functional work

Security frameworks

Jobbeschreibung

SAP Fioneer is seeking a Security GRC Specialist to strengthen security practices across products, operations, and customer commitments. You will partner with engineering, IAM, IT, and business teams to ensure controls are effective, measurable, and aligned with business goals.

The role requires hands-on experience with SOC 2 and ISO 27001, risk management, and the ability to translate requirements into scalable processes. Fluent English and German proficiency are highly valued.