Info Security Compliance Senior Specialist - SAP Converged Cloud

PlusOne Central Engineering is the development team behind the Infrastructure as a Service (IaaS) platform SAP Converged Cloud. We are running in 15 SAP owned data centers distributed world-wide. By augmenting an opinionated OpenStack distribution with bespoke services, we are meeting the demand of SAP's cloud business. As true advocates for open source, we are underpinning our operations with Kubernetes and a cloud-native tech stack.

Our roadmap includes transforming SAP Converged Cloud into a public cloud offering and expanding its capabilities with new services to support SAP Business AI and SAP BTP. A development hotspot is the evolution of network capabilities around firewall and connectivity into API-driven services. We are also reimagining how to provision compute, gpu, storage, and network devices. The development tasks span from bare metal up to the API layer., The SAP Converged Cloud is a private cloud solution managed by SAP. It is an internal Infrastructure-as-a-Service platform deployed worldwide in 17 regions to support all of SAP's cloud businesses on a global scale. The Converged Cloud SRC Team applies a combination of OpenSource and commercial software to a variety of hardware, continuously enhancing and maturing the Security, Reliability and Compliance of our strategic Infrastructure-as-a-Service (IaaS) platform.

Our recruitment process will include an Assessment Day at SAP's Berlin office. This will be a unique opportunity for you to meet your potential team members in person and get a tour of our modern facilities. Further details regarding the process will be provided during the initial virtual interview. We look forward to meeting you and discussing this opportunity in more detail.

Bring out your best

SAP innovations help more than four hundred thousand customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software, SAP has evolved to become a market leader in end-to-end business application software and related services for database, analytics, intelligent technologies, and experience management. As a cloud company with two hundred million users and more than one hundred thousand employees worldwide, we are purpose-driven and future-focused, with a highly collaborative team ethic and commitment to personal development. Whether connecting global industries, people, or platforms, we help ensure every challenge gets the solution it deserves. At SAP, you can bring out your best.

We win with inclusion

SAP's culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone - regardless of background - feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better and more equitable world. SAP is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to the values of Equal Employment Opportunity and provide accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team: Careers@sap.com. For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program, according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training.

Ihre Aufgaben

With our global platform we are not only meeting international certification standards, but also fulfil local regulations and certifications with variations of the controls, terminology and methodology for audits. The job will include designing, maintaining and implementing controls, negotiating compensations and providing management responses.

• Collaboratively maintain roadmap of ongoing and upcoming audit activities

• Develop and document the pattern for planning, preparation, execution and follow-up of audit related activities

• Distinguish relevant controls and coordinate activities within and outside the team

• Continuously contribute to the security posture of our platform by automating the execution, monitoring and reporting of local security controls

• Act as contact person towards team-external stakeholders

• Create regular reporting to share progress status within the leadership team

Ihr Profil

• 10+ years of experience in the IT industry

• Solid understanding of various layers of cloud computing (IaaS, PaaS, SaaS), operational processes and their contractual, regulatory and legal relevance (ITIL Process Library, Shared Responsility Model, Knowledge of legal frameworks (EUDP/GDPR, SOX, etc.) and the ability to map them to audit controls and technical platform features)

• Experience with audit certification procedures, terminiology and controls, e.g.SOC 1 & 2, ISO 27001, 22301, BSI C5, PCI DSS, NIST SP 800

• Capability to negotiate control fulfilment criteria with auditors and derive specific requirements for the team

• Become a team-player with software engineers across GCID PlusOne to guide implementation of compliance-relevant requirements

• Fluent in English & German