CF- IT Security and Compliance Engineer- Building Management (m/f/d) (BUM)
hace 5 días
Málaga
Experteer Overview As IT Security u0026amp; Compliance Engineer, you will be the central security and governance contact for the Building Management product landscape. You will coordinate security measures with vendors, infra teams, and stakeholders to ensure controls and compliance are implemented and maintained. The role sits at the intersection of application and infrastructure security, governance, and audit readiness within a large, international organization. This is an opportunity to shape security processes across a diverse portfolio and contribute to REWE Group’s resilience. Compensaciones / Beneficios • Serve as the primary contact for IT security, compliance, and IKs topics within Building Management • Coordinate security activities across applications and infrastructure • Ensure compliance with internal policies, governance, and audit obligations • Translate security requirements into implementation plans and coordinate with vendors and infrastructure teams • Drive implementation of MFA, patch/vulnerability management, firewall rule management, encryption standards, IAM, and security hardening • Define and maintain authorization concepts and permission models • Coordinate access reviews, recertifications, and entitlement audits • Conduct risk assessments, protection requirement analyses, and security evaluations • Review vulnerability reports, derive mitigation plans, and coordinate remediation • Support audits and ensure timely corrective actions • Maintain security documentation, audit evidence, and compliance records • Track security measures via Jira and governance processes • Interface between business stakeholders, software manufacturers, infrastructure specialists, security teams, and external partners • Support vendor management from security and compliance perspectives • Contribute to continuous improvement of governance, compliance, and security processes Responsabilidades • 3+ years in IT Security, Security Governance, Compliance, Risk Management, Application/Infrastructure Security or related field • Experience coordinating security activities across multiple applications, stakeholders, and vendors • Good understanding of IT security controls and best practices • Experience with IAM, authorization concepts, and user lifecycle • Experience with vulnerability management, security assessments, and risk evaluations • Experience supporting audits or internal control systems • Ability to coordinate with software vendors and infra teams • Understanding of server, database, network, and cloud environments • Strong analytical, organizational, and communication skills • Ability to work independently after onboarding in an international team • Professional English required; German a strong plus • Experience with Jira and Confluence desirable Requisitos principales • Hybrid working model • Modern Málaga office • Private medical insurance • Ticket Restaurant • Professional development and language courses • Birthday day off