Job Description

This position as Risk Specialist offers the unique opportunity to contribute to the Security Risk Management Strategy while providing significant value to our business stakeholders. Youll be part of an international, diverse team, working in a role thats pivotal to our continued security and compliance posture. Perform Inherent Risk Assessments with the Line of Business Units for the services to be provided by third parties to identify the relevancy of the risk based on security, privacy and compliance. Perform Security Risk Assessments to the third parties that provide relevant services to SAP, evaluate responses, technical and non-technical evidences and raise potential findings. Track timelines of identified findings on a periodic basis to ensure the remediation of controls gaps. Communicate efficiently the results of the different risk assessments to the relevant stakeholders: third parties, Line of Business Units, BISO/risk coordinators. Negotiate redlines from third parties on the Third Party Security Agreement before the signature from a security perspective. Follow-up the status of the risk assessments, findings and security agreements, and appropriately escalate to the relevant stakeholders when needed. What you bring Professional working experience within Cyber Security, Compliance and/or Security Risk functions and processes. Knowledge in security related laws: regulations, strategies, processes & operations, standards, and services Stakeholder engagement/management communicate clearly and convincingly with different stakeholders. Demonstrate accountability, transparency, integrity, and a team-oriented approach. good communication and presentation skills. 3-4 years experience working in cyber security risk operations or compliance operations functions. Fluent written and spoken English skills.