Do you have a knack for navigating the maze of software regulations? Can you spot a compliance glitch faster than a coder can write "Hello World"? If so, we want you! We're hunting for a (Senior) Software Compliance Engineer to join our squad. You'll be the Yennefer of our software realm, ensuring that everything we produce is lawful, ethical, and downright awesome.

Tasks

• Regulatory Wizardry: Use your magic wand to build a platform, compliance-as-code-framework and standards to ensure our software development conjures up compliance with GDPR, IT-Grundschutz, C5, ISO 27001, SSDLC, KRITIS, DORA  and any other acronym that comes our way.
• Audit Adventures: Embark on automating compliance conformance to identify findings before the auditor does.
• Documentation Dungeon Master: Maintain a treasure trove of tools for tools generating compliance documentation, ensuring everything is neatly filed away and ready for the next epic quest.
• Incident Inquisitor: Investigate any compliance mishaps or breaches. Devise cunning plans to fix issues and prevent future blunders.
• Collaborative Conjuror: Work hand-in-hand with legal, security, and QA. Be the go-to guru for all compliance as code related quests; Share your knowledge and train our software sorcerers on the art of compliance. Create a culture where compliance is nature.
• Continuous Improvement Crusader: Stay on top of changing regulations and industry standards. Always be on the lookout for ways to enhance our compliance standing.

Qualifications

• Engineering Extraordinaire: You've got a track record of developing, testing, and deploying top-notch code, preferably in Go.
• Security Scholar: Extensive knowledge of software security principles and best practices – You've got experience with threat modeling, security code reviews, and vulnerability management. You're not just a compliance guru/gurvi but a security sage.
• Regulatory Rockstar: Deep understanding of GDPR, IT-Grundschutz, C5, ISO 27001, SSDLC, and other relevant standards. You've navigated the murky waters of regulatory requirements and emerged victorious.

Bonus Points for:

• Certifications in relevant compliance or security domains.
• Experience with DevSecOps practices and integrating compliance into CI/CD pipelines.

Location: Berlin, Karlsruhe.

Note: At the end of the application process, candidates must undergo a security check. Your consent will be requested in good time during the process.

Benefits

• Hybrid working model with home office option.
• Flexible working hours through trust-based working hours.
• At some locations a subsidized canteen and various free drinks.
• Modern office space with very good transport connections.
• Various employee discounts for activities and products.
• Employee events such as summer and winter parties, as well as workshops.
• Numerous training and development opportunities.
• Various health offers, such as sports and health courses.

Job info

Location: Berlin
Type: Full-time
Category: IT Software Development
Work experience: Professionals
Reference ID: 364