Compliance & Obligation Manager (f/m/d)

SAP Deutschland SE & Co. KG; Walldorf; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

SAP is seeking a Compliance & Obligation Manager to lead the design, implementation, and ongoing management of our Information Security Management System in line with BSI IT-Grundschutz and GDPR. You will drive risk assessments, oversee audits, mentor teams, and coordinate with internal and external stakeholders to maintain cloud security and regulatory compliance across SAP’s enterprise services.

Fluent English and German are required; 5+ years in IT security and a proven delivery track record

Qualifikationen

• Master’s or Bachelor’s degree in Cybersecurity, IT, or related field.
• Deep understanding of information security processes and their contractual, regulatory, and legal significance (GDPR, IT security).
• Experience with standards such as BSI IT-Grundschutz, SOC, ISO 27001, BSI C5, and other industry practices.
• Minimum of 5+ years’ experience in IT security & compliance environments.
• Proven track record in managing IT and Data Protection security systems within cloud environments.
• Established project management skills and ability to lead projects and teams.
• Strong analytical and problem‑solving skills.
• Relevant certifications such as BSI IT‑Grundschutz, ISO27001 Lead Implementer, CISSP, CISM, PMP desirable.
• Proficiency in English and German – verbal and written.

Aufgaben

• Improve, develop, implement, and manage the Information Security Management Systems including IT Grundschutz building blocks and scope extension in line with BSI standards.
• Establish and support strategies to comply with Information Security Compliance standards and address threats.
• Support internal audits and compliance assessments, preparing reports and documentation for internal & external assessments, checks, and audits.
• Provide expert guidance and mentorship to various teams & stakeholders, promoting knowledge‑sharing and skills growth from IT Grundschutz and Information Security best practices.
• Conduct and orchestrate comprehensive risk assessments and develop response strategies to protect cloud‑based IT-systems and supporting processes.
• Collaborate with internal stakeholders and external partners to ensure seamless implementation of information security standards.
• Establish and manage compliance policies and procedures to maintain high standards and regulatory compliance.
• Oversee compliance security incidents and coordinate effective response strategies.

Kenntnisse

Analytical thinking

Problem solving

Project management

Communication skills

English & German proficiency

Ausbildung

Master's or Bachelor's degree in Cybersecurity/IT

Tools

BSI IT-Grundschutz

ISO27001 Lead Implementer

CISSP

CISM

PMP

SOC

ISO 27001

Jobbeschreibung

Compliance & Obligation Manager (f/m/d)

What you’ll build

• Continue to improve, develop, implement, and manage the Information Security Management Systems including IT Grundschutz building blocks and scope extension in line with BSI standards and methodologies.
• Establish and support strategies and initiatives to comply with Information Security Compliance standards and address emerging threats.
• Support internal audits and compliance assessments, preparing reports and documentation for internal & external assessments, checks, and audits.
• Provide expert guidance and mentorship to various teams & stakeholders, promoting knowledge‑sharing and skills growth from IT Grundschutz and Information Security best practices.
• Conduct and orchestrate comprehensive risk assessments and develop response strategies to protect cloud‑based IT‑systems and supporting processes.
• Collaborate with internal stakeholders and external partners to ensure seamless implementation of information security standards.
• Establish and manage compliance policies and procedures to maintain high standards and regulatory compliance.
• Oversee compliance security incidents and coordinate effective response strategies.

What you bring

• Master’s or Bachelor’s degree in Cybersecurity, Information Technology, or other related field.
• Deep understanding of technology and information security processes, and their contractual, regulatory, and legal significance, such as GDPR and IT security.
• Relevant experience with standards such as BSI IT‑Grundschutz, SOC, ISO 27001, BSI C5 and other industry good practices.
• Minimum of 5+ years’ experience in IT security & compliance environments.
• Proven track record in managing IT and Data Protection security systems within cloud environments.
• Established project management skills and ability to successfully develop projects and their team members.
• Strong analytical and problem‑solving skills.
• Relevant certifications such as BSI IT‑Grundschutz, ISO27001 Lead Implementer, CISSP, CISM, PMP, or similar are highly desirable.
• Profession in English and German – verbal and written.

Where you belong

Governance, Compliance and Certifications is responsible to provide customers trust anchors, allowing them to innovate with confidence on their path to an intelligent enterprise. The organization supports SAP's solutions to deliver state‑of‑the‑art Cloud Compliance posture.

Equal Employment Opportunity Statement

SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e‑mail with your request to Recruiting Operations Team: [e-mail].