Senior Risk Specialist (f/m/d)

We help the world run better. At SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We’re builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what’s next. The work is challenging – but it matters. You’ll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What’s in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed.

YOUR FUTURE ROLE

Our mission within the SAP Global Security and Cloud Compliance (SGSC) organization is to strengthen the security foundation for SAP, fitting for a world‑class enterprise software company. Security and Compliance is a critically necessary requirement for the success of SAP’s transformation in the areas of cloud, AI, and sustainability, both internally and externally for our customers. The role within Security Risk Management is part of the Global Security Compliance and Risk unit, which encompasses Governance, Compliance and Certification, as well as Security Risk Management. Security Risk Management aims to proactively safeguard our organization’s assets, reputation, and stakeholders by improving the risk culture for behavior towards risk‑taking, negative outcomes, and policy compliance, while protecting core values at all times.

What You’ll Do

• Collaborate and support the Security Risk Management leadership team to develop and continuously improve the existing risk quantification practice enabling risk‑informed decision‑making.
• Develop tools, models, and/or processes to gather, cleanse, leverage, and combine industry data and relevant SAP data.
• Develop processes to increase the use of relevant industry and SAP data in quantitative risk analysis.
• Drive the risk quantification process by building scalable tools, products, and processes that identify and make relevant data usable in risk quantification.
• Collaborate with security risk teams across SAP to build scalable, repeatable, automated processes that enable delivery of quantitative risk assessments.
• Manage simultaneous project work streams.

What You Bring

• Ability to lead, train, and mentor junior analysts in risk quantification topics and in the use of artificial intelligence applications to risk quantification.
• Excellent oral, written, and interpersonal communication skills with the ability to quickly build rapport.
• Ability to understand and interpret information security, IT, and risk management terminology.
• Ability to leverage mathematical or statistical methods to build quantitative models/tools.
• Analytical expertise, attention to detail, logic, and the ability to think creatively.
• Proactive, self‑managed, and able to interface well with interdisciplinary teams across an organization.
• Security certification: CISSP, CRISC, or OpenFAIR preferred.
• At least ten years of experience with information security or risk management is required. Graduate‑level training in a scientific or engineering discipline will be considered in lieu of direct experience in risk management or information security.
• At least seven years of experience with quantitative modeling is required.
• Experience with compliance, regulation, privacy, or governance is a strong plus.
• Experience with quantitative modeling of information security or risk management is a strong plus.
• Development skills are a plus; or the ability to work with developers to build products.
• Experience with one or more of the following is a strong plus: Factor Analysis of Information Risk (FAIR), SIPmath, Applied Information Economics, Bayesian modeling.

Equal Employment Opportunity

SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and you need accommodation or special assistance to navigate our website or to complete your application, please send an e‑mail with your request to Recruiting Operations Team: