Security GRC Specialist

Innovation is and will always be the core to SAP Fioneer, and it is the promise of why we were spun out of SAP: agility, innovation, and delivery.

SAP Fioneer builds on a heritage of outstanding technology and a deep understanding of corporate and consumer demands. At the heart of it all it is simple: We bring financial services to the next level with innovative software solutions and platforms.

We are helping companies in the financial services industry to achieve speed, scalability, and cost-efficiency through digital business innovation, cloud technology, and solutions that cover banking and insurance processes end-to-end.

A global company, rapid growth, innovative people, and a lean organization make SAP Fioneer a place where you accelerate your future!

About the role

We're looking for a Security GRC Specialist to help strengthen and scale the security practices that support our products, operations, and customer commitments. This role partners closely with engineering, infrastructure, product, and business teams to ensure security controls are effective, measurable, and aligned with business objectives. The ideal candidate combines a strong understanding of security frameworks and risk management with the ability to translate requirements into practical, scalable processes.

Responsibilities

• Assist engineering teams to ensure security controls across cloud, SaaS, identity, infrastructure, and application environments are effective and meet requirement thresholds.
• Perform security risk assessments, control reviews, gap analyses, and technical design assessments, working with teams to define practical remediation.
• Drive SOC 2, ISO 27001, and related assurance activities, including control design, evidence readiness, audit support, and continuous compliance.
• Partner with Engineering, IAM, IT, Security Operations, and other stakeholders to embed security requirements into technology, projects, and operational processes.
• Support customer-facing security activities, including reviewing security clauses in contracts, RFPs, security inquiries, due diligence, and incoming customer audits.

Requirements

• 5+ years of experience in information security, security compliance, risk management, audit, or related security disciplines.
• Hands-on experience managing or supporting SOC 2 programs, including control design, evidence collection, audit coordination, and remediation tracking while leveraging compliance automation and governance tooling.
• Strong knowledge of security frameworks and control standards such as SOC 2 & ISO 27001, amongst others
• Ability to assess security risks, evaluate control effectiveness, and communicate recommendations to both technical and non-technical stakeholders.