Senior Lead Security Compliance Engineer

Join the Security IT team and take an active role in implementing and maintaining compliance-related requirements within our platforms and enterprise systems. You work hands-on with systems and tools to apply defined security policies and standards, understand setups in detail, and identify gaps or inconsistencies in configurations and processes.

This is a practical role requiring solid technical understanding of the systems in use, combined with structured handling of documentation and compliance topics. You work on security vulnerabilities, findings, and technical risks within the team and ensure they are properly tracked and implemented. You also maintain documentation and evidence of implementation, acting as a link between defined requirements and their application in real systems.

Responsibilities:

• Implement security compliance and process requirements within platforms and enterprise systems.
• Analyze system configurations and setups to identify gaps, inconsistencies, or weaknesses.
• Apply required changes in collaboration with engineering and platform teams.
• Handle security vulnerabilities and findings within the team, including coordination and follow-up.
• Create and maintain security risk records based on identified gaps and system issues.
• Drive assigned risks to closure by coordinating actions and verifying resolution.
• Support issue resolution by proposing practical approaches based on system understanding.
• Use security tooling and system data to validate configurations and identify deviations.
• Maintain clear documentation of system setups, requirements, and implementation status.
• Provide technical input and evidence for audits and internal reviews.
• Track ownership and progress of findings to ensure accountability within the team.
• Contribute to improving workflows by simplifying handling of recurring topics.

Requirements:

• Degree in computer science, information security, or a related technical field, or equivalent professional experience.
• Solid understanding of IT systems, architectures, and platforms (cloud and/or on-premises).
• Experience in a hands-on technical role within IT security
• Experience implementing or supporting compliance and audit requirements in a technical context.
• Ability to analyze system configurations and identify gaps, inconsistencies, or weaknesses.
• Familiarity with vulnerabilities, risk handling, and remediation processes in real systems.
• Structured and reliable working style with strong attention to detail and documentation.
• Ability to work across teams and follow up on topics until closure.
• Excellent command of spoken and written English.
• ISO 27001 (Foundation/Implementer/Auditor), CISSP, CISA, CRISC, Security+, or equivalent certifications are a plus.
• Proficiency in written and spoken English; German language skills will be an asset.