Compliance Officer

Software Defined Automation GmbH; München; Vor Ort; EUR 60.000 - 80.000; Vollzeit

Benefits dieser Stelle

28 days of annual paid vacation

Flexibility in working hours

In-office weightlifting station

Outdoor trails for running and biking

Zusammenfassung

A global deep tech company in Munich seeks a Compliance Officer to manage compliance certifications and support data privacy frameworks. Responsibilities include overseeing SOC 2 and ISO 27001 compliance, collaborating on security controls with engineering teams, and developing compliance documentation. The ideal candidate will have a Bachelor's degree in Computer Science or equivalent, with a proven track record in compliance management and fluency in English. This role offers a permanent full-time position with a competitive salary and benefits.

Qualifikationen

• Minimum 3 years of hands-on experience in compliance management.
• Proven track record of implementing and maintaining SOC 2 and ISO 27001.
• Fluent written and verbal communication skills in English.

Aufgaben

• Manage SOC 2, ISO 27001, and NIS2 compliance certifications.
• Collaborate on security controls implementation in cloud and DevOps.
• Oversee GDPR compliance and data privacy initiatives.

Kenntnisse

Compliance management

GDPR compliance

ISO 27001

Data privacy frameworks

Risk management

Strong communication skills

Ausbildung

Bachelor’s degree in Computer Science

Master’s degree in Computer Science

Tools

AWS

ISO 27001 certification

Jobbeschreibung

Description

At SDA, we are hiring a Compliance Officer responsible for managing and maintaining all compliance certifications and data privacy frameworks across our organization in close collaboration with our engineering and cloud infrastructure team. The successful candidate will lead our compliance initiatives, ensuring adherence to international standards and regulations while supporting our cloud‑first technology infrastructure.

Responsibilities

• Manage and maintain SOC 2, ISO 27001, and NIS2 compliance certifications
• Collaborate with technical teams on security controls implementation. Support automation and integration of compliance controls into cloud and DevOps workflows (e.g., AWS, CI/CD, IAM).
• Oversee GDPR compliance and data privacy initiatives
• Develop and implement data classification frameworks and policies
• Coordinate with external auditors and certification bodies
• Monitor regulatory changes and assess impact on organizational compliance
• Develop comprehensive compliance guidelines and documentation
• Establish information security management system (ISMS) documentation
• Draft risk assessment and treatment plans
• Create training materials and compliance awareness programs
• Collaborate with technical teams on security controls implementation
• Manage compliance incident response and remediation activities
• Manage vendor risk assessments and third‑party compliance reviews

We offer

• A mission no less than to work at the forefront of technology to improve productivity of mankind
• A fast‑scaling global deep tech company environment led by industry veterans, where your area of responsibility grows with the company
• Impact on the next level real‑time control systems for Industrial Automation, Robotics and Motion Control
• Opportunity to build a fully automated global B2B SaaS application based on latest cloud technologies
• Collaboration with engineering teams of our technology partners (e.g. AWS, Bosch Rexroth, VMWare, etc.) on joint, new offerings
• A competitive salary, based on a fixed compensation and a virtual stock option program
• A permanent full‑time position with 28 days of annual paid vacation
• Flexibility in working hours and time to work from home
• Flat hierarchies and short decision paths
• We play the long game, which is why we consider recreation and exercise a priority. We have an in‑office weightlifting station, several outdoor trails for running and biking nearby as well as shower and washroom facilities.

Basic Qualifications

• Bachelor’s degree in Computer Science or equivalent degree with strong information technology focus
• Proven ability to translate compliance requirements into actionable plan (including technical)
• Minimum 3 years of hands‑on experience in compliance management
• Mandatory: Proven track record of successfully implementing and maintaining SOC 2 and ISO 27001. Hands‑on experience completing multiple ISO 27001 certifications or audits as lead auditor, implementer, or equivalent role
• Demonstrated experience with GDPR compliance and data privacy frameworks
• Extensive experience writing and implementing ISO 27001‑type policies and procedural documents
• Background in risk management and business continuity planning
• Understanding of information security frameworks and controls
• Experience with data classification and handling procedures
• Strong sense of ownership, urgency, and drive
• Fluent written and verbal communication skills in English

Preferred Qualifications

• Master’s degree in Computer Science or equivalent degree with strong information technology focus
• Relevant certifications such as CISA, CISSP, or ISO 27001 Lead Auditor
• Strong knowledge of cloud technologies in general and AWS specifically
• Knowledge of the AWS Well Architected Framework
• Knowledge of the NIS2
• Knowledge of the Cyber Resilience Act (CRA)
• Background as an auditor