(Senior) Software Compliance Engineer/Developer: Service Integration (f/m/d)
at
subsidary
IONOS SE
in
Berlin
Full-time | Permanent | Professionals
Reference ID: I-364
About us
IONOS is the leading European digitalization partner for small and medium-sized businesses (SMB). The company serves around six million customers and operates across 18 markets in Europe and North America, with its services being accessible worldwide. With its Web Presence & Productivity portfolio, IONOS acts as a 'one-stop shop' for all digitalization needs: from domains and web hosting to classic website builders and do-it-yourself solutions, from e-commerce to online marketing tools. In addition, the company offers Cloud Solutions to enterprises who are looking to move to the cloud as their businesses evolve.
Do you have a knack for navigating the maze of software regulations? Can you spot a compliance glitch faster than a coder can write "Hello World"? If so, we want you! We're hunting for a (Senior) Software Compliance Engineer to join our squad. You'll be the Yennefer of our software realm, ensuring that everything we produce is lawful, ethical, and downright awesome.
Tasks
- Regulatory Wizardry: Use your magic wand to build a platform, compliance-as-code-framework and standards to ensure our software development conjures up compliance with GDPR, IT-Grundschutz, C5, ISO 27001, SSDLC, KRITIS, DORA and any other acronym that comes our way.
- Audit Adventures: Embark on automating compliance conformance to identify findings before the auditor does.
- Documentation Dungeon Master: Maintain a treasure trove of tools for tools generating compliance documentation, ensuring everything is neatly filed away and ready for the next epic quest.
- Incident Inquisitor: Investigate any compliance mishaps or breaches. Devise cunning plans to fix issues and prevent future blunders.
- Collaborative Conjuror: Work hand-in-hand with legal, security, and QA. Be the go-to guru for all compliance as code related quests; Share your knowledge and train our software sorcerers on the art of compliance. Create a culture where compliance is nature.
- Continuous Improvement Crusader: Stay on top of changing regulations and industry standards. Always be on the lookout for ways to enhance our compliance standing.
Qualifications
- Engineering Extraordinaire: You've got a track record of developing, testing, and deploying top-notch code, preferably in Go.
- Security Scholar: Extensive knowledge of software security principles and best practices – You've got experience with threat modeling, security code reviews, and vulnerability management. You're not just a compliance guru/gurvi but a security sage.
- Regulatory Rockstar: Deep understanding of GDPR, IT-Grundschutz, C5, ISO 27001, SSDLC, and other relevant standards. You've navigated the murky waters of regulatory requirements and emerged victorious.
Bonus Points for:
- Certifications in relevant compliance or security domains.
- Experience with DevSecOps practices and integrating compliance into CI/CD pipelines.
Location: Berlin, Karlsruhe.
Note: At the end of the application process, candidates must undergo a security check. Your consent will be requested in good time during the process.
Benefits
- Hybrid working model with home office option.
- Flexible working hours through trust-based working hours.
- At some locations a subsidized canteen and various free drinks.
- Modern office space with very good transport connections.
- Various employee discounts for activities and products.
- Employee events such as summer and winter parties, as well as workshops.
- Numerous training and development opportunities.
- Various health offers, such as sports and health courses.
We value diversity and welcome all applications - regardless of, for example, gender, nationality, ethnic or social origin, religion, disability, age as well as sexual orientation and identity, physical characteristics, marital status or any other irrelevant factor subject to applicable law.