Assistant Manager - Information Security at LeanIX

At SAP LeanIX, we are recognized as a market leader in enterprise architecture management, helping organizations modernize their IT landscapes and navigate complex business transformations. With our data-driven, AI-enhanced software, we empower over 1,400 global companies to visualize and manage their IT architecture effectively. Since joining the SAP family in 2023, we have continued to foster a culture of transparency, innovation, and professional growth among our team of over 700 employees. We are now looking for a dedicated professional to join us in securing our future and supporting our continued success.

About the Role

We are hiring an Assistant Manager - Information Security for a full-time position. In this role, you will be a key player in our security operations, focusing on risk management, auditing, and providing essential support to our Go-To-Market teams. You will act as a primary point of contact for security-related inquiries across the company, offering a unique opportunity to develop your expertise within the IT risk, auditing, and corporate security domains.

Key Responsibilities

• Coordinate and manage external audits, including ISO 27001, SOC 1, SOC 2, TISAX, and BSI C5, while assisting our team with internal audit evidence requests.
• Collaborate with Sales and Solution Engineering teams to respond to security-related queries and Request for Proposal (RFP) documentation.
• Execute internal security controls, such as log reviews, incident management, and phishing simulations, while following up with stakeholders to ensure audit findings are remediated.

Requirements

To succeed in this position, we are looking for the following qualifications:

• At least 4 years of hands-on experience in auditing or implementing security standards such as ISO 27001, SOC 2, NIST 800 series, or TISAX.
• A solid understanding of information security programs, control processes, and standard audit procedures.
• Strong communication skills with the ability to manage stakeholder expectations and multitask effectively.
• A proactive drive to learn and advance within the corporate security and risk management field.
• Preferred: Relevant security certifications such as CISA, CISSP, CISM, or ISO 27001 lead auditor credentials.
• Preferred: Experience with additional frameworks like FedRAMP, HIPAA, or network penetration testing.

Location

This position is available in Germany, Slovenia, or the Netherlands, with the flexibility to work from anywhere in a hybrid capacity.

Compensation and Benefits

We believe in providing a flexible working environment to support our team members. This role includes the following benefit:

• Hybrid work model, allowing you to balance time between your home office and our physical office locations.