[Hiring] Security GRC Specialist @SAP Fioneer

Role Description

We're looking for a Security GRC Specialist to help strengthen and scale the security practices that support our products, operations, and customer commitments. This role partners closely with engineering, infrastructure, product, and business teams to ensure security controls are effective, measurable, and aligned with business objectives. The ideal candidate combines a strong understanding of security frameworks and risk management with the ability to translate requirements into practical, scalable processes.

Responsibilities

• Assist engineering teams to ensure security controls across cloud, SaaS, identity, infrastructure, and application environments are effective and meet requirement thresholds.
• Perform security risk assessments, control reviews, gap analyses, and technical design assessments, working with teams to define practical remediation.
• Drive SOC 2, ISO 27001, and related assurance activities, including control design, evidence readiness, audit support, and continuous compliance.
• Partner with Engineering, IAM, IT, Security Operations, and other stakeholders to embed security requirements into technology, projects, and operational processes.
• Support customer-facing security activities, including reviewing security clauses in contracts, RFPs, security inquiries, due diligence, and incoming customer audits.

Qualifications

• 5+ years of experience in information security, security compliance, risk management, audit, or related security disciplines.
• Hands-on experience managing or supporting SOC 2 programs, including control design, evidence collection, audit coordination, and remediation tracking while leveraging compliance automation and governance tooling.
• Strong knowledge of security frameworks and control standards such as SOC 2 & ISO 27001, amongst others.
• Ability to assess security risks, evaluate control effectiveness, and communicate recommendations to both technical and non-technical stakeholders.
• Experience working cross-functionally with engineering, infrastructure, product, and business teams to drive security and compliance initiatives.

Language

• Fluent professional English — required.
• Professional working proficiency in German, ideally C1 or higher — strongly preferred.

Benefits

• Opportunity to carve your own career path.
• Competitive compensation packages.
• Advancement prospects based solely on your achievements.