Dein persönlicher KI-Karriere-Agent
Senior Security Engineer(m/w/x)
Evolving Zalando's ZPS Security Controls Framework with a GRC engineering mindset. 5+ years in information security, risk, or GRC required. 27 days holiday plus additional days and employee shares.
Anforderungen
- 5+ years experience in Information Security, Risk, or GRC
- Experience in regulated environments (fintech or payments)
- Understanding of DORA, PCI DSS, ISO 27001, or GDPR
- Experience designing or assessing security controls
- Defining evidence and evaluating effectiveness of controls
- GRC engineering mindset
- Interest in automation
- Interest in scalable evidence collection
- Interest in continuous monitoring
- Constructive challenging as second line of defense
- Effective collaboration with engineering and security teams
- Clear communication with technical stakeholders
- Clear communication with non-technical stakeholders
- Clear communication with senior management
Aufgaben
- Define and maintain security policies and standards
- Evolve the ZPS Security Controls Framework
- Verify control design and effectiveness
- Ensure traceability between risks, controls, and evidence
- Apply GRC engineering mindset
- Enable automated evidence collection
- Implement continuous control monitoring
- Collaborate with Engineering and Operational Security teams
- Support internal and external audits
- Ensure regulatory readiness
- Manage control effectiveness reporting
- Align with DORA, PCI DSS, ISO 27001, and internal policies
Berufserfahrung
- 5 Jahre
Ausbildung
- Bachelor-AbschlussODER
- Master-Abschluss
Sprachen
- Englisch – verhandlungssicher
Tools & Technologien
- DORA
- PCI DSS
- ISO 27001
- GDPR
Benefits
Mehr Urlaubstage
- 27 days of holiday a year
- 1 additional holiday day per year
Sinnstiftende Arbeit
- 2 paid volunteering days a year
Attraktive Vergütung
- Employee shares program
Mitarbeiterrabatte
- 40% off fashion and beauty products
- 30% off Lounge by Zalando
- Discounts from external partners
Sonstige Vorteile
- Relocation assistance
- Bianual peer-to-peer review
Familienfreundlichkeit
- Family services
Gesundheits- & Fitnessangebote
- Health and wellbeing options
Mentale Gesundheitsförderung
- Mental health support and coaching
Weiterbildungsangebote
- Training platform access
Gefällt dir diese Stelle?
BetaDein Career Agent findet täglich ähnliche Jobs für dich.
Noch nicht perfekt?
- Zalando Payments GmbHVollzeitmit HomeofficeSeniorBerlin
- Unzer
Senior IT Security Engineer(m/w/x)
Vollzeitmit HomeofficeSeniorBerlin - Urban Sports Club
Senior Security Engineer(m/w/x)
Vollzeitmit HomeofficeSeniorBerlin, Köln - Moss
Information Security GRC Lead(m/w/x)
Vollzeitmit HomeofficeBerufserfahrenBerlin - getolo GmbH
Information Security Lead - German Speaker(m/w/x)
Vollzeitmit HomeofficeSeniorBerlin
Senior Security Engineer(m/w/x)
Evolving Zalando's ZPS Security Controls Framework with a GRC engineering mindset. 5+ years in information security, risk, or GRC required. 27 days holiday plus additional days and employee shares.
Anforderungen
- 5+ years experience in Information Security, Risk, or GRC
- Experience in regulated environments (fintech or payments)
- Understanding of DORA, PCI DSS, ISO 27001, or GDPR
- Experience designing or assessing security controls
- Defining evidence and evaluating effectiveness of controls
- GRC engineering mindset
- Interest in automation
- Interest in scalable evidence collection
- Interest in continuous monitoring
- Constructive challenging as second line of defense
- Effective collaboration with engineering and security teams
- Clear communication with technical stakeholders
- Clear communication with non-technical stakeholders
- Clear communication with senior management
Aufgaben
- Define and maintain security policies and standards
- Evolve the ZPS Security Controls Framework
- Verify control design and effectiveness
- Ensure traceability between risks, controls, and evidence
- Apply GRC engineering mindset
- Enable automated evidence collection
- Implement continuous control monitoring
- Collaborate with Engineering and Operational Security teams
- Support internal and external audits
- Ensure regulatory readiness
- Manage control effectiveness reporting
- Align with DORA, PCI DSS, ISO 27001, and internal policies
Berufserfahrung
- 5 Jahre
Ausbildung
- Bachelor-AbschlussODER
- Master-Abschluss
Sprachen
- Englisch – verhandlungssicher
Tools & Technologien
- DORA
- PCI DSS
- ISO 27001
- GDPR
Benefits
Mehr Urlaubstage
- 27 days of holiday a year
- 1 additional holiday day per year
Sinnstiftende Arbeit
- 2 paid volunteering days a year
Attraktive Vergütung
- Employee shares program
Mitarbeiterrabatte
- 40% off fashion and beauty products
- 30% off Lounge by Zalando
- Discounts from external partners
Sonstige Vorteile
- Relocation assistance
- Bianual peer-to-peer review
Familienfreundlichkeit
- Family services
Gesundheits- & Fitnessangebote
- Health and wellbeing options
Mentale Gesundheitsförderung
- Mental health support and coaching
Weiterbildungsangebote
- Training platform access
Gefällt dir diese Stelle?
BetaDein Career Agent findet täglich ähnliche Jobs für dich.
Über das Unternehmen
Zalando Payments GmbH
Branche
Retail
Beschreibung
The company is committed to being a leading pan-European ecosystem for fashion and lifestyle e-commerce, thriving on diversity and inclusion.
Noch nicht perfekt?
- Zalando Payments GmbH
Senior Risk Manager(m/w/x)
Vollzeitmit HomeofficeSeniorBerlin - Unzer
Senior IT Security Engineer(m/w/x)
Vollzeitmit HomeofficeSeniorBerlin - Urban Sports Club
Senior Security Engineer(m/w/x)
Vollzeitmit HomeofficeSeniorBerlin, Köln - Moss
Information Security GRC Lead(m/w/x)
Vollzeitmit HomeofficeBerufserfahrenBerlin - getolo GmbH
Information Security Lead - German Speaker(m/w/x)
Vollzeitmit HomeofficeSeniorBerlin