Security GRC Specialist

atSAP FioneerRemote

Germany Austria

Full-time Cybersecurity / Security EngineerMid-levelSenior

Posted Sep 4

This is a fully remote position, open to applicants in Germany, +1 more country.

📋 Description

• Support engineering teams in ensuring that security measures across cloud, SaaS, identity, infrastructure, and application environments are effective and meet established standards.

• Conduct security risk assessments, control evaluations, gap analyses, and technical design reviews.

• Collaborate with teams to define actionable remediation strategies.

• Lead SOC 2, ISO 27001, and other related assurance initiatives, including control design, evidence preparation, audit assistance, and ongoing compliance.

• Collaborate with Engineering, IAM, IT, Security Operations, and other stakeholders to integrate security requirements into technology, projects, and operational workflows.

• Assist with customer-facing security tasks, including evaluating security clauses in contracts, RFPs, security inquiries, due diligence, and responding to customer audits.

⛳️ Requirements

• Over 5 years of experience in information security, security compliance, risk management, auditing, or other related security fields.

• Practical experience in managing or supporting SOC 2 programs, including control design, evidence gathering, audit coordination, and remediation tracking.

• Familiarity with compliance automation and governance tools.

• In-depth knowledge of security frameworks and control standards such as SOC 2 and ISO 27001.

• Capability to assess security risks and evaluate the effectiveness of controls.

• Proficiency in communicating recommendations to both technical and non-technical audiences.

• Experience collaborating across functions with engineering, infrastructure, product, and business teams.

• Fluent professional English is required.

• Professional working proficiency in German, ideally at C1 level or higher, is highly preferred.