Senior Information Security Compliance

**We help the world run better**

**What you´ll do**

We are looking for a Senior Information Security Compliance & Audit Specialist (f/m/d) as a key partner with SAP´s External Auditors, as well as internal risk, continuous monitoring, remediation and cyber compliance program managers. The Senior Information Security Compliance & Audit Specialist (f/m/d) is key to safeguarding SAP, its customers, reputation, assets and the interests of shareholders, by assisting in identifying audit issues, threats and opportunities for the achievement of business objectives.

This position coordinates within SAP and with others to support all aspects of enhancing the Audit Support process, including but not limited to the implementation, maintenance and monitoring of internal and external audits, the development of audit dashboards as well as tracking and reporting of audit issues, to appropriate levels of management. You will also provide the operational support for the program through monitoring and analysis, and assessment activities in accordance with control objectives and activities.

Position Responsibilities:

- Manages the partnership and collaboration with external auditors and collect/report key metrics provided by multiple stakeholders, assist with the development and reporting of key audit dashboards for SAP products
- Oversees and maintain a centralized audit register and calendar for SAP products
- Lead the Internal Audit IT risk assessment process and provide input to a risk-based audit plan for SAP products
- Responsible for coordination of IT audit plan for SAP products
- Develop valuable and positive relationships with the Product Lines of Businesses and other business leaders by offering practical insight on complex issues impacting operations, and system/infrastructure/technology related to SAP products
- Provide oversight and management of the external Audit Support program to ensure efficient execution and effective collaboration with external auditors related to SAP products
- Coordinate and support global audit professionals, providing direction and ensuring accomplishment of audits and projects for SAP products
- Assist audit support leadership in identifying opportunities to improve business processes and IT operations making recommendations to the audit team and to the relevant management teams for SAP products
- Determine the impact of systems development and the implementation and use of technology on the operational and control environment (both technology and business functions) for SAP products.
- Facilitate the audit, review and assessment of key processes and controls, as needed For SAP products
- Assist with reporting to Senior Management, as required
- Articulates the value and importance of audit, compliance and risk management in a positive and business-sensitive manner to all business groups and sectors

**What you bring**
- 5+ years of related professional experience ideally with Big 4 or equivalent audit, consulting or industry experience
- Experience IT/Cloud auditing and controls, preferably in two of the following FedRAMP, SOX, SSAE 16 - SOC 1 & SOC 2, PCI compliance, NIST,, ISO 27001 & ISO 27002
- Strong working knowledge of Cloud IT processes and Cloud IT infrastructure
- Broad understanding of business functions and processes, IT processes, IT systems, IT general controls and emerging technologies including cloud computing, mobile computing, privacy and cybersecurity
- Understanding the role of an auditor, the definition of a high-quality audit and an understanding of expectations of all parties involved in an external audit
- Utilize quantitative and qualitative skills to analyze data and influence audit response and audit issues management/remediation plans
- Stong interpersonal skills and ability to collaborate with others to promote the exchange of ideas and experience among stakeholders with responsibility for Audit Support and serve as independent voice to help pressure test risk and control levels and appropriate mitigation strategies
- Ability to handle multiple engagements with overlapping deadlines. A demonstrated ability to write clear, coherent and precise reports on a multiplicity of complex technical issues is essential
- Very good communications skills in English language - verbal and written

SAPSecurityCareersSGS
SGRC_Careers

**We build breakthroughs together**

**We win with inclusion**

SAP’s culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone - regardless of background - feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better and more equitable world.

Requisition ID: 368103 | Work Area: Information Technology | Expected Tr