Security and Compliance Associate

**We help the world run better**

**Summary**
Cloud Lifecycle Management Application Management team is providing central tools and architectures for provisioning and operating various SAP Cloud solutions. One of our main tools is the Service Provider Cockpit (SPC), which is the de-facto standard suite for service operations in SAP’s major cloud units like S/4HANA, C/4HANA, HANA Enterprise Cloud, HCM and others. In addition to managing SAP’s inhouse IaaS platforms, SPC is also used to orchestrate workloads on all major hyperscalers (Azure, AWS, GCP, Ali Cloud).

The team drives the design, implementation and “productization” of the key lifecycle management services required to drive operations excellence for SAP’s cloud delivery

**The Role**
- SPC Operations’ key responsibility is to manage and operate various cloud products running on HANA Database for our global OnDemand customers.
- Operations needs to ensure the various productive assets are running well according to agreed SLAs and being operated in secure and a compliant manner.

**Role Requirements**:

- Implement existing and new compliance requirements.
- Collaborate with stakeholders to ensure corrective actions are in place; document lessons learned.
- Provide support in due-diligence and third party risk assessment efforts.
- Ensure adherence of risk policies with required standards.
- Provide reports on analysis and corrective actions in the event of security incidents and alerts.
- Support internal and external audit processes, as needed.
- Takes the full responsibility for the adherence of the audit controls and is accountable for the success
- Drive Operational efficiency and productization
- Own operational tasks, escalations, and process improvements.
- Working closely with Internal/External Stakeholders, Development Architects/Managers & developers, across locations, to ensure timely delivery of tasks related to any controls.
- Participate and contribute towards organization’s goals and objectives, collaborating with multiple teams and solutions.

**Key Responsibilities**:

- Document policies, procedures, and guidelines in accordance with regulatory and business requirements.
- Support security and compliance assessments, and collaborate with stakeholders to close identified gaps.
- Be able to demonstrate knowledge for audit, risk management, or SoX controls.
- Demonstrates proactive engagement to address identified risks and issues and to solve problems with moderate to high complexity.
- Works independently and collaboratively, able to take sole responsibility for driving end-to-end projects.
- Has advanced functional skills and special knowledge in several areas such as IT automations.
- Utilizes demonstrated creativity and specialist professional knowledge to deliver high quality results & solutions.
- Works as a role model within team and demonstrates thought professional judgement, best practices concepts and strategies.

***
**Work Experience**:

- Experience must involve minimum of two (2) years in the following:

- Technology Risk Assessment
- IT Audit and Compliance Operations
- User Access Management
- Project Management
- IT System Architecture and
- Network Security is a plus
- General knowledge of the International Standards for the professional practice of Internal Auditing over IT Applications
- Experience and exposure to Cloud Operations, Networking and Server Management.
- Expert knowledge of Openstack, Linux, Security Group/Rules, etc.
- Experience in operating/administering SAP Basis/ NetWeaver stack and Cloud Native Technologies is an advantage
- Good understanding of Virtualization, Storage and Network, Containers, etc
- Experience or exposure to SAP HANA or other Database technologies is an advantage.
- Understanding of SaaS and Cloud offerings or products, and related processes is an advantage.
- Knowledge of IaaS Infrastructures and experience of setting up, working in, and managing virtualized landscapes
- Expertise in SAP’s Lifecycle Management tools as well as SAP’s operations and support processes is a major plus

**Expectations & Tasks**:

- Internally recognized for good level knowledge of audit
- Utilizes demonstrated creativity and specialist professional knowledge to deliver high quality results & solutions
- Works as a role model within team and demonstrates thought leadership capabilities, best practices concepts and strategies
- Performs quality reviews of the work of associates and specialists
- Provides regular updates on assignment outcomes and performs ongoing monitoring of key risks & findings within assigned responsibilities
- Demonstrates proactive engagement to address identified risks and issues and to solve problems with moderate to high complexity
- Develops and maintains fundamental network to collaborate effectively within similar functions across SAP
- Communicates clearly, in a way that others can understand within defined processes & policies, Presents messages/work