Product Security Senior Specialist (fmd) Sovereign Cloud

SAPLeanIXis expanding into Sovereign Cloud environments - a strategic initiative that will make our product available to customers in regulated industries and the public sector who operate under strict data residency security and compliance requirements.

We are starting with NS2 in the United States with the ambition to extend to further sovereign and government cloud environments globally over time.
This is a greenfield effort that spans engineering product and compliance and it includes building the infrastructure processes and capabilities to meet the highest standards of data sovereignty while delivering the full power of SAPLeanIXto an entirely new category of customers.

The SAPLeanIXSecurity Compliance and Governance team is looking for a motivatedProduct SecuritySenior Specialist to engage in activities related to the SAPLeanIXInformation SecurityManagement System and drive implementation and design of compliance controls for the SAPLeanIXEnterprise Architecture position puts particular focus on Sovereign Cloud / Cloud in Country certifications such as FedRAMPor equivalent national standards and on control ownership for selectedcross-engineeringcontrols.

What Youll Do:

• Work together with colleagues in development governance and security functions.

• Organize workshops and trainings for control owners and security champions to better understandrequirements and best practices.

• Assist incompliance certification efforts for Sovereign Cloud and Cloud in Country environmentsforLeanIXEnterprise Architecture portfolio including frameworks likeFedRAMP or equivalent national standards.

• Translate complex regulatory and government compliance requirements into actionable technical tasks andpolicy updates.

• Stay current with global and local regulations related to data sovereignty privacy and government cloudsecurity to ensure proactive compliance.

• Collaborate with certification bodies and internal certification intermediaries.

• Engage as control owner for selected cross-engineering controls that are owned by theLeanIXSecurity Compliance and Governance unit.

• Oversee the resolution ofCorrective and Preventive Action(CAPA)items.

• Coordinate certification projects and small networks of functional colleagues for successfully obtainingcertifications.

• Engagein Audit sessions together with internal and external auditors.

What You Bring:

• Bachelors degree in information technology Information Security or related Science TechnologyEngineering and Mathematics (STEM) disciplines.

• 7 years in Information Security with at least 4 years focus on GRC (Governance Risk and Compliance)IT Audit or a similar compliance-related role.

• Proven experience leading certification or attestation projects for at least one major information securityframework (e.g. ISO 27001 SOC 2 C5).

• Deep understanding of GRC assessment methodologies control design and the audit lifecycle.

• Excellent written and verbal communication skills in English with the ability to articulate complex technicaland compliance concepts to diverse audiences (from engineers to executives).

• Experience with Jira.

• Youre an open-minded team player.

• Fluent spoken and written English communication skills.

Beneficial skills:

• Experience in BCM / DR topics

• Direct hands-on experience with government-specific cloud compliance frameworks such as FedRAMP(US) IRAP (Australia) or similar national programs.

• Experience with NIST standards particularly the NIST Risk Management Framework (RMF) and controlsdefined in NIST SP 800-53.

• Industry recognized professional certification such as CISSP CISA Lead Auditor or SANS

• Familiarity with scripting languages (e.g. Python PowerShell) for automating compliance tasks andevidence gathering

• Experience with using AI tools such as Claude.

• Spoken and written German communication skills

Meet your team:

The Information Security team is responsible for managing the security of SAPLeanIXenterprise architecture solutionin coordination with Product and Engineering organization as well as SAPs central security team.

Taking a risk-based approach to security compliance and governance we support thousands of colleagues and customerswithin and outside of team up with others in SAP (e.g. SAP Global Security and CloudCompliance SAP DPP SAP BTP) to identify implement and operate technically effective and trade-off efficientsecurity compliance and governance solutions.

Skills included: Agentic AI Day-to-Day PracticeAI Adoption CapabilityAI Output Quality AssuranceContext EngineeringAI-Assisted Automation and Prototyping Learning AgilityCollaborationComplex Problem SolvingCreative ThinkingEffective Communication Information security management cloud security application security security engineering AI-Assisted engineering.