Sovereign Cloud Product Security Expert

**We help the world run better
**At SAP, we enable you to bring out your best. Our company culture is focused on collaboration and a shared passion to help the world run better. How? We focus every day on building the foundation for tomorrow and creating a workplace that embraces differences, values flexibility, and is aligned to our purpose-driven and future-focused work. We offer a highly collaborative, caring team environment with a strong focus on learning and development, recognition for your individual contributions, and a variety of benefit options for you to choose from.

**COMPANY DESCRIPTION**

SAP recently decided to combine and harmonize all SAP Sovereign Cloud offerings, establishing an end-to-end process for the Public Sector and regulated industries. The newly created Global Sovereign Cloud Delivery & Operations business unit is part of SAP Product Engineering with responsibility across the relevant Sovereign Cloud portfolio of SAP. Global Sovereign Cloud Delivery & Operations is collaborating closely with all Board areas to establish a harmonized, scalable, and consistent offering with transparent and standardized deliverables.

**WHAT YOU'LL DO**

We are looking for a Product Security Expert (f/m/d) within the Security Engineering group in the Technology & Engineering unit of the newly formed Sovereign Cloud Delivery & Operations team as part of the Customer Service & Delivery board area.

In this role you will analyze security requirements, translate requirements into security design, and execute their implementation. You will implement/review the technical security measures necessary to support policies and prove compliance. You will implement and maintain security solutions to protect data in adherence to the data protection and privacy strategy.

You will conduct security assessments of SAP products as part of their adoption into the Sovereign Cloud portfolio. You will work closely together with the SAP product teams as well as Sovereign Cloud engineering to communicate assessment results with the relevant stakeholders and follow-up on remediation activities with the overall goal of pushing security requirements left.

You will develop, implement, integrate, and operate tools to support detection, prevention, analysis, and resolution of security threats

You will inspire innovation and drive execution of disciplined and standardized security processes and tools addressing mission-critical capability gaps and opportunities for maximized efficiency. You will help identify trade-offs in security deployment plans and any key day-to-day operational decisions impacting infrastructure investments significantly.

You need to ensure the team’s knowledge base is kept consistently up-to-date with native hyperscaler capabilities and modern infrastructure management tools. Starting from this status quo, you will design security concepts for our infrastructure management on the global scale.

This will involve significant coordination with the global Sovereign Cloud operations teams and our hyperscaler provider partners.

**WHAT YOU'LL BRING**
- Bachelor’s or Master's degree in Computer Science, Information Technology or Engineering or other relevant disciplines
- Ability to manage through ambiguities while being innovative and collaborative
- Ability to take a technical approach to design specifications of our large-scale network
- Strong analytical research and technology skills and the willingness to learn new topics quickly
- Ability to think strategically, delivering services to meet stakeholders’ demands on a timely basis
- Proven ability to produce documentation for processes and procedures
- Proven ability to work and lead in cross-architecture teams
- Capability to influence without formal authority
- Strong communication and interpersonal skills
- Strong cultural awareness and intercultural competencies
- Ability to build trusted relationships with key stakeholders
- Proven ability to deliver against challenging timelines
- Persistence, self-motivation and willingness to work under pressure
- English and German (fluent)

WORK EXPERIENCE
- 7+ years of experience in information security
- Very good understanding of infrastructure and security related topics
- Experience with CI/CD pipelines and DevOps practices
- Very good understanding of SAP Product Standards and SDOL is a plus
- Thorough understanding of infrastructure firewalls, load balancers, storage, monitoring, security, IAM etc. and have experience with orchestration to develop a cloud solution
- Working knowledge of Log Correlation, Vulnerability Management, Web Application Testing concepts is a plus
- Exposure to either NIST, ISO, or other compliance frameworks
- Experience with securing products on AWS, Azure, and/or GCP is a plus

SAPCloudreq, #ICC24 #SAPCareersSovereignCloud

**Bring out your best**

**We win with inclusion**

SAP’s culture of inclusion, focus on health and well-being, and flexible working models help en