Information Security Compliance Senior Specialist (f/m/d)

In this role you will lead and coordinate customer audits, ensuring SAP’s security posture meets client and regulatory expectations. You’ll collaborate across SAP lines of business, communicate progress to leadership, and document or mitigate findings with a focus on risk reduction. You’ll stay ahead of regulatory changes and influence audit planning and remediation. This is a chance to shape security governance in a global, customer-centric cloud environment.

• Lead audit fieldwork with external customer auditors using established documentation and gather new evidence to satisfy compliance demands
• Align customer requirements with internal constraints to transparently convey SAP's security posture and protect confidential information
• Communicate project status and results to senior management, project teams, and stakeholders; establish cross-functional communication channels
• Assist with continuous evaluation and upgrading of policies, procedures, and auditing best practices
• Maintain strong stakeholder relationships internally and externally; stay informed about regulatory changes and emerging risks
• Collaborate with SAP Lines of Business to implement remediation and improvement actions
• Help document findings, mitigate risks, and support audit planning and execution
• Support post-sales customer audits and assessments coordinated by the Customer Security Audits team

• 6+ years in program or project management and audit compliance related to Risk, Compliance, and Security (ITGC controls preferred)
• 5+ years leading audit projects and experience with Financial Services
• Experience with regulatory intake, compliance analysis, and control mapping for new/changed regulations
• Experience with DORA, ISO 27000 family, SOC, PCI DSS, FedRAMP, CSA Star or equivalent certifications
• Ability to translate compliance requirements into operational/technical control objectives
• Proven track record of managing globally dispersed internal and external stakeholders
• Fluent written and verbal German for business contexts
• Based in Walldorf or Frankfurt, Germany

• Stakeholder management
• Cross-functional collaboration
• Effective communication
• Audit fieldwork and methodology
• Regulatory analysis and control mapping
• ITGC controls