(Senior) IT Risk Specialist

We help the world run betterAt SAP, we keep it simple: you bring your best to us, and we'll bring out the best in you. We're builders touching over 20 industries and 80% of global commerce, and we need your unique talents to help shape what's next. The work is challenging – but it matters. You'll find a place where you can be yourself, prioritize your wellbeing, and truly belong. What's in it for you? Constant learning, skill growth, great benefits, and a team that wants you to grow and succeed.   What you’ll build SAP SS&D (Sovereign Services & Delivery) is looking for an IT Risk Specialist – Secrecy IT Infrastructure (SITI) (f/m/d) to operate and further develop the SITI infrastructure at our Walldorf location. In this role, you will be responsible for the secure operation and risk-compliant management of the local SITI environment, including the on-site Micro Data Center. This includes managing and maintaining the hardware infrastructure, performing preventive maintenance and troubleshooting, and applying regular updates and security patches to ensure a compliant and stable system landscape. You will also be responsible for the provisioning, rollout, and support of VS-TOPS (classified client systems) at the site.Your tasks will involve both strategic and hands-on responsibilities: from installing and configuring systems, virtualization, and hardware lifecycle management, to ensuring compliance with relevant IT security, physical protection, and regulatory requirements—especially in the context of German classified environments (VS-NfD).You will support and further develop key infrastructure components, contribute to continuous improvements, and serve as the primary contact for all SITI-related operations at the Berlin site. Your work directly supports secure development and delivery capabilities for public sector and regulated industry customers, helping SAP meet the highest confidentiality and compliance standards.Your primary responsibilities will include: Operating and extending technical and structural infrastructure components for highly secure environments, both for internal platforms and customer-facing projectsSupporting security accreditation processes and administrating relevant systems and security technologiesProviding technical support for SAP processes related to the protection of government-classified information, with a focus on upholding permanent confidentialityActing as the local SITI contact and coordinating liaison with external IT service providers and technology partnersManaging secure IT operations in close alignment with central SAP SS&D operations, especially for externally operated systems and providers in Walldorf and BerlinAdministration and maintenance of virtualized environments (VMS) and support in setting up new virtual machines for classified operationsOperation and management of Active Directory components and secure identity/access controlsManaging backup and recovery operations using VEEAM to ensure high availability and data integrityHandling IT asset management, including lifecycle tracking and compliance for all secure devicesProvisioning and support of VS-TOPS (classified laptops) for users, including onboarding, maintenance, and troubleshootingWorking with SIEM systems, ideally Splunk, to analyze logs, detect anomalies, and support incident responseAdministration and management of ECOS PKI/SMA appliances, ECOS Secure BootSticksSupporting the mitigation of IT security incidents and helping the business fulfill governmental regulatory requirementsEnabling classified development projects by ensuring secure environments according to national and international secrecy requirementsStarting your career in SAP SS&D by learning and applying the strict requirements for handling customer secrecy information, in collaboration with government authorities (e.g. multi-/bilateral agreements and process handling) What you bring You are a committed and proactive IT risk specialist with a strong background in secure infrastructure operations and classified environments. Your profile should demonstrate experience in several of the following areas:Master’s degree (or equivalent) in IT, cybersecurity, or a related field. Alternatively, completed vocational training as an IT specialist (Fachinformatiker) with relevant professional experience4+ years of relevant working experience in secure IT operationsProven knowledge of IT security frameworks and compliance standards, especially VS-NfD, ISO 27001, and BSI IT-GrundschutzHands-on experience with BSI-certified IT security products (7164) and secure IT architectures for both on-premise and cloud deploymentsPractical experience in operating and managing VS-NfD environments, including understanding of related legal and procedural requirementsExperience in setting up and maintaining virtualized environments (VMS)Administration of Active Directory (AD) and management of secure user identitiesOperation and maintenance of backup solutions, ideally using VEEAMFamiliarity with IT asset lifecycle management within secure infrastructures (e.g. via Netbox)First experience in provisioning, rollout, and support of VS-TOPS, ECOS Secure Boot Sticks and SecurePIM Application (classified client systems)First experience with SIEM systems, ideally Splunk, for log analysis, correlation, and incident responseStrong organizational skills and the ability to manage complex operational tasks securely and independentlyA proactive, structured, and solution-oriented working styleConduct guided tours of our VS-NfD-compliant infrastructure for stakeholders and customersHands-on experience with digital certificates, including Certificate Authorities (CAs) and the issuance, renewal, and lifecycle management of certificatesAbility to coordinate effectively with internal teams and external service providersHigh awareness for confidentiality, integrity, and regulatory compliance in the handling of government-classified informationExcellent German and English communication skills, both written and spokenA collaborative, hands-on mindset with strong interpersonal and communication skills Where you belong The SAP Sovereign Services & Delivery unit is part of the SAP Customer Services & Delivery Area and ensures strict liability fulfillment of customers’ national security requirements, business enablement in sensitive industries and compliance with Critical Infrastructure and Telecommunications Compliance for SAP world-wide ​Bring out your bestSAP innovations help more than four hundred thousand customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software, SAP has evolved to become a market leader in end-to-end business application software and related services for database, analytics, intelligent technologies, and experience management. As a cloud company with two hundred million users and more than one hundred thousand employees worldwide, we are purpose-driven and future-focused, with a highly collaborative team ethic and commitment to personal development. Whether connecting global industries, people, or platforms, we help ensure every challenge gets the solution it deserves. At SAP, you can bring out your best.  We win with inclusionSAP’s culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone – regardless of background – feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better world.SAP is committed to the values of Equal Employment Opportunity and provides accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team: Careers@sap.com.For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program, according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training.AI Usage in the Recruitment ProcessFor information on the responsible use of AI in our recruitment process, please refer to our Guidelines for Ethical Usage of AI in the Recruiting Process. Please note that any violation of these guidelines may result in disqualification from the hiring process.Requisition ID: 434824  | Work Area: Administration  | Expected Travel: 0 - 10%  | Career Status: Professional  | Employment Type: Regular Full Time   | Additional Locations:  #LI-Hybrid​