Security and compliance associate

We help the world run better Our company culture is focused on helping our employees enable innovation by building breakthroughs together. How? We focus every day on building the foundation for tomorrow and creating a workplace that embraces differences, values flexibility, and is aligned to our purpose:driven and future:focused work. We offer a highly collaborative, caring team environment with a strong focus on learning and development, recognition for your individual contributions, and a variety of benefit options for you to choose from. Apply now Summary Cloud Lifecycle Management Application Management team is providing central tools and architectures for provisioning and operating various SAP Cloud solutions. One of our main tools is the Service Provider Cockpit (SPC), which is the de:facto standard suite for service operations in SAP s major cloud units like S/4HANA, C/4HANA, HANA Enterprise Cloud, HCM and others. In addition to managing SAP s inhouse IaaS platforms, SPC is also used to orchestrate workloads on all major hyperscalers (Azure, AWS, GCP, Ali Cloud). The team drives the design, implementation and productization of the key lifecycle management services required to drive operations excellence for SAP s cloud delivery The Role - SPC Operations key responsibility is to manage and operate various cloud products running on HANA Database for our global OnDemand customers. - Operations needs to ensure the various productive assets are running well according to agreed SLAs and being operated in secure and a compliant manner. Role Requirements: - Perform security and compliance assessments on new and existing infrastructure and applications to ensure adherence and effective controls are in place. - Implement existing and new compliance requirements. - Collaborate with stakeholders to ensure corrective actions are in place; document lessons learned. - Provide support in due:diligence and third party risk assessment efforts. - Ensure adherence of risk policies with required standards. - Provide reports on analysis and corrective actions in the event of security incidents and alerts. - Support internal and external audit processes, as needed. - Brings technical or application expert knowledge into the operation - Takes the full responsibility for the adherence of the audit controls and is accountable for the success - Drive Operational efficiency and productization - Own operational tasks, escalations, and process improvements. - Working closely with Internal/External Stakeholders, Development Architects/Managers and developers, across locations, to ensure timely delivery of tasks related to any controls. - Participate and contribute towards organization s goals and objectives, collaborating with multiple teams and solutions. Key Responsibilities: - Document policies, procedures, and guidelines in accordance with regulatory and business requirements. - Support security and compliance assessments, and collaborate with stakeholders to close identified gaps. - Be able to demonstrate knowledge for audit, risk management, or SoX controls. - Demonstrates proactive engagement to address identified risks and issues and to solve problems with moderate to high complexity. - Works independently and collaboratively, able to take sole responsibility for driving end:to:end projects. - Has advanced functional skills and special knowledge in several areas such as IT automations. - Utilizes demonstrated creativity and specialist professional knowledge to deliver high quality results and solutions. - Works as a role model within team and demonstrates thought professional judgement, best practices concepts and strategies. Work Experience: - Experience must involve minimum of two (2) years in the following: - Technology Risk Assessment - IT Audit and Compliance Operations - User Access Management - Pr