Security GRC Specialist: Drive SOC 2 & ISO 27001 in Cloud

SAP Fioneer; Österreich; Vor Ort; EUR 70.000 - 110.000; Vollzeit

Zusammenfassung

SAP Fioneer is seeking a Security GRC Specialist to strengthen and scale security controls across cloud, SaaS, identities, and operations. You will partner with engineering, IAM, IT, security operations, and business teams to ensure controls are effective and measurable.

The ideal candidate has extensive experience in information security, SOC 2 and ISO 27001, and can translate requirements into practical risk-based processes that improve governance and compliance across the organization.

Qualifikationen

• 5+ years of experience in information security, security compliance, risk management, audit, or related security disciplines.
• Hands-on experience managing or supporting SOC 2 programs, including control design, evidence collection, audit coordination, and remediation tracking while leveraging compliance automation and governance tooling.
• Strong knowledge of security frameworks and control standards such as SOC 2 & ISO 27001, amongst others.
• Ability to assess security risks, evaluate control effectiveness, and communicate recommendations to both technical and non-technical stakeholders.
• Experience working cross-functionally with engineering, infrastructure, product, and business teams to drive security and compliance initiatives.

Aufgaben

• Assist engineering teams to ensure security controls across cloud, SaaS, identity, infrastructure, and application environments are effective and meet requirement thresholds.
• Perform security risk assessments, control reviews, gap analyses, and technical design assessments, working with teams to define practical remediation
• Drive SOC 2, ISO 27001, and related assurance activities, including control design, evidence readiness, audit support, and continuous compliance
• Partner with Engineering, IAM, IT, Security Operations, and other stakeholders to embed security requirements into technology, projects, and operational processes
• Support customer-facing security activities, including reviewing security clauses in contracts, RFPs, security inquiries, due diligence, and incoming customer audits

Kenntnisse

SOC 2

ISO 27001

Risk assessment

Cross-functional collaboration

Security controls

Jobbeschreibung

SAP Fioneer is seeking a Security GRC Specialist to strengthen and scale security controls across cloud, SaaS, identities, and operations. You will partner with engineering, IAM, IT, security operations, and business teams to ensure controls are effective and measurable.

The ideal candidate has extensive experience in information security, SOC 2 and ISO 27001, and can translate requirements into practical risk-based processes that improve governance and compliance across the organization.