Information Technology

Info Security Compliance Specialist/Control Remediation process/CISSP, CISA, CISM/Securitytesting

We help the world run better

Our company culture is focused on helping our employees enable innovation by building breakthroughs together. How? We focus every day on building the foundation for tomorrow and creating a workplace that embraces differences, values flexibility, and is aligned to our purpose-driven and future-focused work. We offer a highly collaborative, caring team environment with a strong focus on learning and development, recognition for your individual contributions, and a variety of benefit options for you to choose from. Apply now!

Team: You will be part of a fast-growing Internal Controls Testing Team within Security Risk & Compliance which constitutes a bunch of highly motivated, diverse and passionate professionals scattered across the US and the UK.


What you'll do

  • Bring Technical Expertise for compliance matters around Cloud Security, Application Security and Infrastructure Security
  • Assess design, effectiveness, and remediation of Technical & ITGC controls
  • Consults with business and technical leadership to ensure that data, processes and technology are designed for data protection and compliance such as SOC 1/2, NIST, PCI-DSS, C5, ISMS etc
  • Ensures appropriate treatment of risk, compliance, and assurance from internal and external perspectives for information security topics
  • Conducts and/or oversees information security risk assessments and compliance audits.
  • Monitors investigations and documentation of cybersecurity compliance issues and incidents.
  • Reviews information security risk findings and non-compliance with business leaders and proposes solutions to mitigate risks.
  • Establishes IT security audit procedures relevant to Information Security Standards and international data privacy laws.


Role and Requirements:


Bachelor’s degree in computer science, engineering, or equivalent work experience

3-5 years experience working in with information security risk

Working knowledge of technical aspects of Information Security, which may include cloud security, application security, and infrastructure configuration & hardening, or encryption management

Familiarity with Risk Management solutions and processes

Security certifications like CISSP, CISA, CISM, GCFA, GCIH, GCIA, GNFA, GREM, GCCC, or Security+ are an asset


Hands-on experience on following:

  •  Vulnerability Management / Security Testing
  •  OWASP / SANS Top 25
  •  Control Remediation process
  •  C5, SoC 1 / 2, ISO 27001 etc.
  •  Experience with frameworks such as NIST CSF, FAIR etc


#VulnerabilityManagement  #Security Testing

We build breakthroughs together

SAP innovations help more than 400,000 customers worldwide work together more efficiently and use business insight more effectively. Originally known for leadership in enterprise resource planning (ERP) software, SAP has evolved to become a market leader in end-to-end business application software and related services for database, analytics, intelligent technologies, and experience management. As a cloud company with 200 million users and more than 100,000 employees worldwide, we are purpose-driven and future-focused, with a highly collaborative team ethic and commitment to personal development. Whether connecting global industries, people, or platforms, we help ensure every challenge gets the solution it deserves. At SAP, we build breakthroughs, together.

We win with inclusion

SAP’s culture of inclusion, focus on health and well-being, and flexible working models help ensure that everyone – regardless of background – feels included and can run at their best. At SAP, we believe we are made stronger by the unique capabilities and qualities that each person brings to our company, and we invest in our employees to inspire confidence and help everyone realize their full potential. We ultimately believe in unleashing all talent and creating a better and more equitable world.
SAP is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to the values of Equal Employment Opportunity and provide accessibility accommodations to applicants with physical and/or mental disabilities. If you are interested in applying for employment with SAP and are in need of accommodation or special assistance to navigate our website or to complete your application, please send an e-mail with your request to Recruiting Operations Team:
For SAP employees: Only permanent roles are eligible for the SAP Employee Referral Program, according to the eligibility rules set in the SAP Referral Policy. Specific conditions may apply for roles in Vocational Training.

EOE AA M/F/Vet/Disability:

Qualified applicants will receive consideration for employment without regard to their age, race, religion, national origin, ethnicity, age, gender (including pregnancy, childbirth, et al), sexual orientation, gender identity or expression, protected veteran status, or disability.
Successful candidates might be required to undergo a background verification with an external vendor.

Requisition ID: 334631  | Work Area: Information Technology  | Expected Travel: 0 - 10%  | Career Status: Professional  | Employment Type: Regular Full Time   | Additional Locations: #LI-Hybrid

Requisition ID:  334631
Posted Date:  Jun 23, 2022
Work Area:  Information Technology
Career Status:  Professional
Employment Type:  Regular Full Time
Expected Travel:  0 - 10%

Bangalore, KA, IN, 560066

Job alert

Job Segment: ERP, Testing, Cloud, Information Security, Computer Science, Technology