Security & Compliance Engineer for Building Management

REWE digital Spain; Málaga; Híbrido; EUR 45.000 - 65.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work model

Private medical insurance

Ticket Restaurant

25 days paid vacation

Birthday day off

Descripción de la vacante

REWE digital Spain seeks an IT Security & Compliance Engineer to coordinate security, governance, and compliance across Building Management and related applications. You will work with vendors, infrastructure teams, and business stakeholders to implement security controls and drive audits.

We value experience in IT security, risk assessments, and IAM, with English proficiency and strong coordination skills. A hybrid work model and international collaboration are offered in Málaga, Spain.

Formación

• 3+ years of professional experience in IT Security, Security Governance, Compliance, Risk Management, Application Security, Infrastructure Security, or a comparable field.
• Experience coordinating security activities across multiple applications, stakeholders, and vendors.
• Good understanding of common IT security controls and security best practices.
• Experience with Identity & Access Management, authorization concepts, and user lifecycle processes.

Responsabilidades

• Act as the primary contact for IT Security, Compliance, and Internal Control System (IKS) topics within the Building Management product.
• Coordinate security-related activities across a broad application and infrastructure landscape.
• Ensure compliance with internal security policies, governance requirements, and audit obligations.
• Translate security requirements into implementation plans and coordinate their execution with vendors and infrastructure teams.
• Drive and monitor the implementation of security measures such as MFA, Patch and Vulnerability Management, Firewall Rule Management, Secure Communication and Encryption Standards, IAM, Security Hardening Measures.
• Define, maintain, and continuously improve authorization concepts and permission models.
• Coordinate access reviews, user recertifications, and entitlement audits.
• Perform risk assessments, protection requirement analyses, and security evaluations.
• Review vulnerability reports, assess findings, derive mitigation plans, and coordinate remediation activities.
• Support security audits and ensure timely implementation of corrective actions.
• Maintain security documentation, audit evidence, and compliance records.
• Coordinate and track security measures through Jira, service management tools, and governance processes.
• Act as the interface between business stakeholders, software manufacturers, infrastructure specialists, security teams, and external partners.
• Support vendor management activities from a security and compliance perspective.
• Contribute to the continuous improvement of governance, compliance, and security processes within the Building Management landscape.

Conocimientos

IT Security

Security Governance

Compliance

Risk Management

Application Security

Infrastructure Security

IAM

Vendor Coordination

Herramientas

Jira

Confluence

Descripción del empleo

REWE digital Spain seeks an IT Security & Compliance Engineer to coordinate security, governance, and compliance across Building Management and related applications. You will work with vendors, infrastructure teams, and business stakeholders to implement security controls and drive audits.

We value experience in IT security, risk assessments, and IAM, with English proficiency and strong coordination skills. A hybrid work model and international collaboration are offered in Málaga, Spain.