(Senior) IT Risk & Compliance Specialist (f/m/d)

In this role, you act as the central authority for IT risk management, compliance, and audit coordination at SAP Walldorf. You’ll govern the local IT landscape to ensure risk-compliant operations, focusing on BSI IT-Grundschutz and ISO 27001 alignment for public sector and regulated customers. You’ll drive audits, maintain ISMS artifacts, and continuously improve security and compliance postures. You’ll collaborate with auditors, authorities, and internal teams to deliver secure, compliant infrastructure and project outcomes.

• great benefits
• health and well-being
• flexible working models
• continuous learning and skill growth
• team that supports personal development
• inclusive culture

• Lead IT compliance, audit, and GRC activities per BSI IT-Grundschutz, ISO 27001, and regulatory requirements
• Prepare, conduct, and follow up on audits with evidence collection and remediation tracking
• Create and maintain audit-ready IT security and compliance documentation (IT-Grundschutz, ISMS artefacts, risk registers)
• Deliver presentations and reports on technical, security, and compliance topics to stakeholders
• Identify, assess, and mitigate operational IT risks and support security accreditation for classified environments
• Operate and maintain secure IT infrastructure (virtualized environments, Active Directory, backups, hardened clients, asset management)
• Utilize SIEM solutions to analyze logs, detect anomalies, and support incident response
• Support procurement by defining requirements and coordinating with vendors and stakeholders
• Coordinate cross-functional topics and act as central interface between departments and auditors
• Coordinate external service providers and serve as local contact for auditors, customers, and authorities
• Conduct infrastructure tours and technical walkthroughs for stakeholders

• 4+ years in IT risk, compliance, or secure IT operations
• Strong expertise in GRC and auditing support including BSI IT-Grundschutz, ISO 27001, gap analyses, and ISMS implementation
• Knowledge of risk mitigation and cyber security, BSI-certified products, secure IT architectures, SIEM (preferably Splunk)
• Project management skills for independent, governance-aligned projects
• Fluency in German and English with strong communication and stakeholder management
• Emotional intelligence and customer orientation with ability to handle high-stakes situations
• Analytical problem-solving mindset and ability to work in ambiguous environments
• Collaborative, hands-on, solution-oriented working style with strong organizational skills
• Experience with AI tools in professional contexts for automation and process improvement

• communication
• stakeholder management
• emotional intelligence
• BSI IT-Grundschutz
• ISO 27001
• ISMS implementation