Security GRC Specialist

SAP Fioneer; United States; Hybrid; USD 110,000 - 170,000; Full time

Job summary

SAP Fioneer is seeking a Security GRC Specialist to strengthen and scale the security practices that support our products, operations, and customer commitments.

You will partner with Engineering, IAM, IT, Security Operations and other teams to embed security requirements, perform risk assessments, drive SOC 2 and ISO 27001 programs, and enable measurable, practical compliance across the organization.

Qualifications

• 5+ years of experience in information security, security compliance, risk management, audit, or related disciplines.
• Hands-on experience managing or supporting SOC 2 programs, including control design, evidence collection, audit coordination, and remediation tracking.
• Strong knowledge of security frameworks and control standards such as SOC 2 and ISO 27001.
• Ability to assess security risks, evaluate control effectiveness, and communicate recommendations to varied stakeholders.
• Experience working cross-functionally with engineering, infrastructure, product, and business teams.

Responsibilities

• Assist engineering teams to ensure security controls across cloud, SaaS, identity, infrastructure, and applications meet thresholds.
• Perform security risk assessments, control reviews, gap analyses, and remediation planning with teams.
• Drive SOC 2, ISO 27001, and related assurance activities including evidence readiness and audit support.
• Partner with Engineering, IAM, IT, Security Operations and others to embed security requirements into projects.
• Support customer-facing security activities including reviewing contracts and security inquiries.

Skills

Information security

Security frameworks

Risk management

Cross-functional

Tools

Governance tooling

Job description

Innovation is and will always be the core to SAP Fioneer, and it is the promise of why we were spun out of SAP: agility, innovation, and delivery.

SAP Fioneer builds on a heritage of outstanding technology and a deep understanding of corporate and consumer demands. At the heart of it all it is simple: We bring financial services to the next level with innovative software solutions and platforms.

We are helping companies in the financial services industry to achieve speed, scalability, and cost-efficiency through digital business innovation, cloud technology, and solutions that cover banking and insurance processes end-to-end.

A global company, rapid growth, innovative people, and a lean organization make SAP Fioneer a place where you accelerate your future!

About the role

We’re looking for a Security GRC Specialist to help strengthen and scale the security practices that support our products, operations, and customer commitments. This role partners closely with engineering, infrastructure, product, and business teams to ensure security controls are effective, measurable, and aligned with business objectives. The ideal candidate combines a strong understanding of security frameworks and risk management with the ability to translate requirements into practical, scalable processes.

Responsibilities

• Assist engineering teams to ensure security controls across cloud, SaaS, identity, infrastructure, and application environments are effective and meet requirement thresholds.
• Perform security risk assessments, control reviews, gap analyses, and technical design assessments, working with teams to define practical remediation.
• Drive SOC 2, ISO 27001, and related assurance activities, including control design, evidence readiness, audit support, and continuous compliance.
• Partner with Engineering, IAM, IT, Security Operations, and other stakeholders to embed security requirements into technology, projects, and operational processes.
• Support customer-facing security activities, including reviewing security clauses in contracts, RFPs, security inquiries, due diligence, and incoming customer audits.
• 5+ years of experience in information security, security compliance, risk management, audit, or related security disciplines.
• Hands-on experience managing or supporting SOC 2 programs, including control design, evidence collection, audit coordination, and remediation tracking while leveraging compliance automation and governance tooling.
• Strong knowledge of security frameworks and control standards such as SOC 2 & ISO 27001, amongst others
• Ability to assess security risks, evaluate control effectiveness, and communicate recommendations to both technical and non-technical stakeholders.
• Experience working cross-functionally with engineering, infrastructure, product, and business teams to drive security and compliance initiatives.

Language

• Fluent professional English — required.
• Professional working proficiency in German, ideally C1 or higher — required

Join forces with some of the industry’s most brilliant minds in a thrilling venture to shape the ever-evolving financial landscape.

Picture an environment that offers the best of both worlds: the agility, enthusiasm, and dynamism of a startup, seamlessly blended with the tried-and-true expertise, robust market presence, and vast customer network of a well-established organization.

At SAP Fioneer, you’ll thrive in a flexible work setting that not only fosters creativity but also empowers you to think beyond conventional boundaries, bringing fresh concepts to the forefront and challenging the status quo. Here, you’ll become an integral part of a diverse and globally connected team that we take immense pride in – a team that’s perpetually expanding and innovating.

As a member of our workforce, you’ll have the opportunity to carve your own career path, all while enjoying competitive compensation packages and advancement prospects based solely on your achievements.