CF- IT Security and Compliance Engineer- Building Management (m/f/d) (BUM)
hace 3 días
Málaga
ppFor REWE digital Spain, a subsidiary of the REWE Group located in Málaga, we are looking for an IT Security Compliance Engineer (m/f/d) to strengthen our Building Management product team. As the central solution provider for information and telecommunications systems, REWE digital plans, develops, and operates digital solutions for one of the leading retail and tourism groups in Europe. /p pYour Home of IT is our Building Management (BUM) product within the Corporate Functions (CF) domain and the Digital Office IT (DOIT) organization. The Building Management product supports a diverse portfolio of digital solutions that are essential for planning, constructing, operating, maintaining, and securing REWE Group facilities. These include building and maintenance management platforms, construction planning tools, room and workplace booking solutions, package tracking systems, and physical security solutions such as access control, video surveillance, and intrusion detection systems. /p pAs our IT Security Compliance Engineer, you will act as the central point of contact for security, compliance, and governance topics across this application landscape. You will coordinate security measures with software vendors, infrastructure teams, security managers, and business stakeholders while ensuring that all relevant security controls and compliance requirements are implemented and maintained. /p h3What You Will Do /h3 ul liAct as the primary contact for IT Security, Compliance, and Internal Control System (IKS) topics within the Building Management product. /li liCoordinate security-related activities across a broad application and infrastructure landscape. /li liEnsure compliance with internal security policies, governance requirements, and audit obligations. /li liTranslate security requirements into implementation plans and coordinate their execution with vendors and infrastructure teams. /li liDrive and monitor the implementation of security measures such as: /li liMulti-Factor Authentication (MFA) /li liPatch and Vulnerability Management /li liFirewall Rule Management /li liSecure Communication and Encryption Standards /li liIdentity and Access Management (IAM) /li liSecurity Hardening Measures /li liDefine, maintain, and continuously improve authorization concepts and permission models. /li liCoordinate access reviews, user recertifications, and entitlement audits. /li liPerform risk assessments, protection requirement analyses, and security evaluations. /li liReview vulnerability reports, assess findings, derive mitigation plans, and coordinate remediation activities. /liliSupport security audits and ensure timely implementation of corrective actions. /li liMaintain security documentation, audit evidence, and compliance records. /li liCoordinate and track security measures through Jira, service management tools, and governance processes. /li liAct as the interface between business stakeholders, software manufacturers, infrastructure specialists, security teams, and external partners. /li liSupport vendor management activities from a security and compliance perspective. /li liContribute to the continuous improvement of governance, compliance, and security processes within the Building Management landscape. /li /ul h3What You Will Bring /h3 ul liFirst and foremost, your personality: You enjoy coordinating complex topics, connecting different stakeholders, and driving sustainable solutions. You are interested in cybersecurity and governance topics, communicate confidently with technical and non-technical audiences, and take ownership of security-related challenges. /li liAt least 3 years of professional experience in IT Security, Security Governance, Compliance, Risk Management, Application Security, Infrastructure Security, or a comparable field. /li liExperience coordinating security activities across multiple applications, stakeholders, and vendors. /li liGood understanding of common IT security controls and security best practices. /li liExperience with Identity Access Management, authorization concepts, and user lifecycle processes. /liliExperience with vulnerability management, security assessments, and risk evaluations. /li liExperience supporting audits, compliance initiatives, or internal control systems. /li liAbility to coordinate implementation activities with software vendors and technical infrastructure teams. /li liUnderstanding of server, database, network, and cloud-based environments. /li liStrong analytical, organizational, and communication skills. /li liAbility to work independently after onboarding while collaborating effectively within an international team. /li liProfessional English language skills (required). /li liGerman language skills are a strong plus. /li liExperience with Jira and Confluence is desirable. /li /ul h3Nice to have /h3 ul liExperience with ISO 27001, NIS2, BSI-related frameworks, or comparable security standards. /li liExperience working with Internal Control Systems (IKS). /li liKnowledge of SaaS governance and third-party risk management. /li liExperience with enterprise application security. /li liUnderstanding of security requirements in retail, logistics, facility management, or corporate environments. /li liSecurity certifications such as: ul liCompTIA Security+ /li liCISSP /li liCISM /li liISO 27001-related certifications /li /ul /li /ul h3What We Offer /h3 ul liA startup-like culture combined with the stability and strength of the REWE Group. /li liThe opportunity to take ownership of security and compliance activities for a diverse and business-critical application landscape. /li liClose collaboration with experienced security experts, infrastructure specialists, architects, and software vendors. /li liAn international and collaborative work environment with colleagues in Germany and Spain. /li liFlexible working hours and a hybrid working model. /li liModern office facilities in Málaga. /li liPrivate medical insurance benefits. /li liTicket Restaurant. /li liProfessional development opportunities including technical training and language courses. /li liDay off on your birthday. /li li25 days of paid vacation. /li liOpen communication culture and the opportunity to shape security processes across a growing international organization. /li /ul h3Why join us? /h3 pSecurity and compliance are essential foundations for reliable digital business processes. In this role, you will become the central security coordinator for a broad portfolio of applications supporting construction, facility management, workplace services, logistics, and physical security within the REWE Group. /p pYou will work at the intersection of application security, infrastructure security, governance, compliance, and stakeholder management. Rather than operating a single technology, you will ensure that security requirements are successfully implemented across a diverse ecosystem of applications, vendors, and infrastructure environments. /p pBy coordinating security initiatives, reducing vulnerabilities, driving compliance activities, and supporting audits, you will make a tangible contribution to the resilience and security of REWE Group's Building Management landscape. /p pApply now in English and become part of REWE digital Spain's growing technology organization. /p /p #J-18808-Ljbffr
Avenida de Andalucía, Distrito Centro, Málaga
