ECSC202610 opportunities
Operate and improve the global endpoint detection and response platform. Work with the Cyber Defense Center on security policies, evaluate new endpoint protection features, and advise international IT and security teams.
Run practical AI workshops and help business teams develop working prototypes. Build and test AI use cases, set code and prompt quality standards, and hand successful pilots over to established IT teams.
Help plan and develop SAP IT audits as part of the group’s annual financial audit. Support SAP penetration tests, advise teams on resolving audit findings, and improve and automate internal controls with internal and external auditors.
Lead group-wide identity and authorisation management projects. Define security standards, guide authentication and authorisation designs, and coordinate the implementation and improvement of IAM processes across IT and security teams.
Lead the group-wide backup management topic within the information security management system. Define security standards, coordinate improvements with IT and security teams, and monitor the quality of backup processes.
Coordinate IT, business teams and compliance specialists when IT systems are introduced or changed. Help meet privacy, internal policy and employee co-determination requirements, and improve the supporting risk-management processes and tools.
Lead the group-wide security patch management topic within the information security management system. Define standards, coordinate the implementation of processes and solutions, and monitor and improve patch-management processes with IT and security teams.
Validate findings from automated web application scans and improve scanning policies. Test REST, GraphQL and SOAP APIs, automate analysis workflows, and keep scanning services running across on-premises and cloud networks.
Develop physical security and access-control services for data centres, IT rooms and critical infrastructure. Advise internal teams on risk assessments and audits, and help meet ISO 27001 and DIN EN 50600 requirements.
Operate secure data-erasure tools and support their users. Check media-handling processes, review destruction certificates, oversee service providers, and help update policies for securely disposing of storage media.