Security GRC Specialist

SAP Fioneer GmbH; Deutschland; Hybrid; EUR 70.000 - 95.000; Vollzeit

Zusammenfassung

SAP Fioneer GmbH is seeking a Security GRC Specialist to strengthen and scale security practices across products, operations, and customer commitments. You will work with engineering, IAM, IT, and security teams to ensure effective, measurable controls aligned with business goals.

The role emphasizes risk assessment, control design, and continuous compliance, including support for customer security inquiries and audits. Fluency in English and strong German skills are preferred.

Qualifikationen

• 5+ years of experience in information security, security compliance, risk management, audit, or related security disciplines.
• Hands-on experience managing or supporting SOC 2 programs, including control design, evidence collection, audit coordination, and remediation tracking.
• Strong knowledge of security frameworks and control standards such as SOC 2 & ISO 27001, amongst others
• Ability to assess security risks, evaluate control effectiveness, and communicate recommendations to both technical and non-technical stakeholders.
• Experience working cross-functionally with engineering, infrastructure, product, and business teams to drive security and compliance initiatives.

Aufgaben

• Assist engineering teams to ensure security controls across cloud, SaaS, identity, infrastructure, and application environments are effective and meet requirement thresholds.
• Perform security risk assessments, control reviews, gap analyses, and technical design assessments, working with teams to define practical remediation.
• Drive SOC 2, ISO 27001, and related assurance activities, including control design, evidence readiness, audit support, and continuous compliance.
• Partner with Engineering, IAM, IT, Security Operations, and other stakeholders to embed security requirements into technology, projects, and operational processes.
• Support customer-facing security activities, including reviewing security clauses in contracts, RFPs, security inquiries, due diligence, and incoming customer audits.

Kenntnisse

Security governance

Risk management

Audit & compliance

Cloud security

Stakeholder communication

Tools

SOC 2

ISO 27001

Governance tooling

Jobbeschreibung

Innovation is and will always be the core to SAP Fioneer, and it is the promise of why we were spun out of SAP: agility, innovation, and delivery.

SAP Fioneer builds on a heritage of outstanding technology and a deep understanding of corporate and consumer demands. At the heart of it all it is simple: We bring financial services to the next level with innovative software solutions and platforms.

We are helping companies in the financial services industry to achieve speed, scalability, and cost-efficiency through digital business innovation, cloud technology, and solutions that cover banking and insurance processes end-to-end.

A global company, rapid growth, innovative people, and a lean organization make SAP Fioneer a place where you accelerate your future!

About the role

We're looking for a Security GRC Specialist to help strengthen and scale the security practices that support our products, operations, and customer commitments. This role partners closely with engineering, infrastructure, product, and business teams to ensure security controls are effective, measurable, and aligned with business objectives. The ideal candidate combines a strong understanding of security frameworks and risk management with the ability to translate requirements into practical, scalable processes.

Responsibilities

• Assist engineering teams to ensure security controls across cloud, SaaS, identity, infrastructure, and application environments are effective and meet requirement thresholds.
• Perform security risk assessments, control reviews, gap analyses, and technical design assessments, working with teams to define practical remediation.
• Drive SOC 2, ISO 27001, and related assurance activities, including control design, evidence readiness, audit support, and continuous compliance.
• Partner with Engineering, IAM, IT, Security Operations, and other stakeholders to embed security requirements into technology, projects, and operational processes.
• Support customer-facing security activities, including reviewing security clauses in contracts, RFPs, security inquiries, due diligence, and incoming customer audits.

• 5+ years of experience in information security, security compliance, risk management, audit, or related security disciplines.
• Hands-on experience managing or supporting SOC 2 programs, including control design, evidence collection, audit coordination, and remediation tracking while leveraging compliance automation and governance tooling.
• Strong knowledge of security frameworks and control standards such as SOC 2 & ISO 27001, amongst others
• Ability to assess security risks, evaluate control effectiveness, and communicate recommendations to both technical and non-technical stakeholders.
• Experience working cross-functionally with engineering, infrastructure, product, and business teams to drive security and compliance initiatives.

Language

• Fluent professional English - required.
• Professional working proficiency in German, ideally C1 or higher - strongly preferred.

Join forces with some of the industry's most brilliant minds in a thrilling venture to shape the ever-evolving financial landscape.

Picture an environment that offers the best of both worlds: the agility, enthusiasm, and dynamism of a startup, seamlessly blended with the tried-and-true expertise, robust market presence, and vast customer network of a well-established organization.

At SAP Fioneer, you'll thrive in a flexible work setting that not only fosters creativity but also empowers you to think beyond conventional boundaries, bringing fresh concepts to the forefront and challenging the status quo. Here, you'll become an integral part of a diverse and globally connected team that we take immense pride in - a team that's perpetually expanding and innovating.

As a member of our workforce, you'll have the opportunity to carve your own career path, all while enjoying competitive compensation packages and advancement prospects based solely on your achievements.