Position: Cyber Security Architect (audit and assurance company BIG FOUR)
Company: Deloitte
Category: Security
Experience required: 5y
English level: upper

**The Role**

- Builds up knowledge and keeps it up to date in regards of security, the SAP CX Products in the area of responsibility and the components, technologies and services used by it/them.
- Provides consulting to developers, knowledge management, quality assurance, operations members in the area of responsibility with their security related questions.
- Translates generic security requirements to guidelines specific to the SAP CX Products and is tasked with ensuring that vulnerabilities reported from external sources are fixed on a priority.
- Contributes to extension and improvement of the security knowledge base at SAP CX and assures that the security improvements of the SAP CX Products
- Carries out security assessments, e.g. Threat Modeling, to reveal architectural security issues and assists the team to reach a secure design.
- Responsible for the execution of the secure software development lifecycle and executes security-related operations processes and procedures.
- Contributes to centrally initiated security assessment/testing activities, supports developers in implementing fixes and tracks handling of incidents, and if actions are taken in time, and resulting in a sufficient level of quality.
- Reviews code scan findings to find patterns and work out guidelines for resolution and takes immediate countermeasures to address security issues.


**Role Requirements**

- 5+ years in Information Security experience in a broad technical role and thereof 2+ years of project management experience in large scale, international, strategic projects Product Management and Agile experience
- Bachelor’s or master’s degree in computer science, business informatics, natural sciences, engineering or comparable education
- Good understanding of cloud infrastructure, load balancing, networking and security operations and ability to work in a global operation environment.
- Experience with cloud security concepts, solutions, and automation
- Experience in working with Hyperscaler - Cloud Security Infrastructure and knowledge of DevOps and incident management tools, e.g. Git, JIRA or equivalents