CF- IT Security and Compliance Engineer- Building Management (m/f/d) (BUM)
hace 6 días
Málaga
ph3CF- IT Security and Compliance Engineer- Building Management (m/f/d) (BUM) /h3pFor REWE digital Spain, a subsidiary of the REWE Group located in Málaga, we are looking for an IT Security Compliance Engineer (m/f/d) to strengthen our Building Management product team. As the central solution provider for information and telecommunications systems, REWE digital plans, develops, and operates digital solutions for one of the leading retail and tourism groups in Europe. /ppYour Home of IT is our Building Management (BUM) product within the Corporate Functions (CF) domain and the Digital Office IT (DOIT) organization. The Building Management product supports a diverse portfolio of digital solutions that are essential for planning, constructing, operating, maintaining, and securing REWE Group facilities. These include building and maintenance management platforms, construction planning tools, room and workplace booking solutions, package tracking systems, and physical security solutions such as access control, video surveillance, and intrusion detection systems. As our IT Security Compliance Engineer, you will act as the central point of contact for security, compliance, and governance topics across this application landscape. You will coordinate security measures with software vendors, infrastructure teams, security managers, and business stakeholders while ensuring that all relevant security controls and compliance requirements are implemented and maintained. /ppbWhat you will do /b /pulliAct as the primary contact for IT Security, Compliance, and Internal Control System (IKS) topics within the Building Management product. /liliCoordinate security-related activities across a broad application and infrastructure landscape. /liliEnsure compliance with internal security policies, governance requirements, and audit obligations. /liliTranslate security requirements into implementation plans and coordinate their execution with vendors and infrastructure teams. /liliDrive and monitor the implementation of security measures such as: /liliPatch and Vulnerability Management /liliFirewall Rule Management /liliSecure Communication and Encryption Standards /liliIdentity and Access Management (IAM) /liliSecurity Hardening Measures /liliDefine, maintain, and continuously improve authorization concepts and permission models. /liliCoordinate access reviews, user recertifications, and entitlement audits. /liliPerform risk assessments, protection requirement analyses, and security evaluations. /liliReview vulnerability reports, assess findings, derive mitigation plans, and coordinate remediation activities. /liliSupport security audits and ensure timely implementation of corrective actions. /liliMaintain security documentation, audit evidence, and compliance records. /liliCoordinate and track security measures through Jira, service management tools, and governance processes. /liliAct as the interface between business stakeholders, software manufacturers, infrastructure specialists, security teams, and external partners. /liliSupport vendor management activities from a security and compliance perspective. /liliContribute to the continuous improvement of governance, compliance, and security processes within the Building Management landscape. /li /ulpbWhat you will bring /b /pulliFirst and foremost, your personality: You enjoy coordinating complex topics, connecting different stakeholders, and driving sustainable solutions. You are interested in cybersecurity and governance topics, communicate confidently with technical and non-technical audiences, and take ownership of security-related challenges. /liliAt least 3 years of professional experience in IT Security, Security Governance, Compliance, Risk Management, Application Security, Infrastructure Security, or a comparable field. /liliExperience coordinating security activities across multiple applications, stakeholders, and vendors. /liliGood understanding of common IT security controls and security best practices. /liliExperience with Identity Access Management, authorization concepts, and user lifecycle processes. /liliExperience with vulnerability management, security assessments, and risk evaluations. /liliExperience supporting audits, compliance initiatives, or internal control systems. /liliAbility to coordinate implementation activities with software vendors and technical infrastructure teams. /liliUnderstanding of server, database, network, and cloud-based environments. /liliStrong analytical, organizational, and communication skills. /liliAbility to work independently after onboarding while collaborating effectively within an international team. /liliProfessional English language skills (required). /liliGerman language skills are a strong plus. /liliExperience with Jira and Confluence is desirable. /li /ulpbNice to have /b /pulliExperience with ISO 27001, NIS2, BSI-related frameworks, or comparable security standards. /liliExperience working with Internal Control Systems (IKS). /liliKnowledge of SaaS governance and third-party risk management. /liliExperience with enterprise application security. /liliUnderstanding of security requirements in retail, logistics, facility management, or corporate environments. /liliSecurity certifications such as: /liliCompTIA Security+ /liliCISSP /liliCISM /liliISO 27001-related certifications /li /ulpbWhat we offer /b /pulliAstartup-like culture combined with the stability and strength of the REWEGroup. /liliTheopportunity to take ownership of security and compliance activities for adiverse and business-critical application landscape. /liliClosecollaboration with experienced security experts, infrastructure specialists, architects, and software vendors. /liliAninternational and collaborative work environment with colleagues in Germany and Spain. /liliFlexibleworking hours and a hybrid working model. /liliPrivatemedical insurance benefits. /liliTicketRestaurant. /liliProfessionaldevelopment opportunities including technical training and language courses. /liliDay offon your birthday. /lili25daysof paid vacation. /liliOpencommunication culture and the opportunity to shape security processes across a growing international organization. /li /ulpSecurity and compliance are essential foundations forreliable digital business processes. In this role, you will become the centralsecurity coordinator for a broad portfolio of applications supportingconstruction, facility management, workplace services, logistics, and physicalsecurity within the REWE Group. /ppYou will work at the intersection of applicationsecurity, infrastructure security, governance, compliance, and stakeholdermanagement. Rather than operating a single technology, you will ensure thatsecurity requirements are successfully implemented across a diverse ecosystemof applications, vendors, and infrastructure environments. /ppBy coordinating security initiatives, reducingvulnerabilities, driving compliance activities, and supporting audits, you willmake a tangible contribution to the resilience and security of REWE Group'sBuilding Management landscape. /ppbApply now in English and become part of REWE digitalSpain's growing technology organization. /b /p /p #J-18808-Ljbffr