Security Analyst (compliance and controls)

Job description

**This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Analyst (compliance and controls) based in Germany.** This is a security-focused role responsible for strengthening compliance, controls, and incident response across a modern cloud infrastructure environment. You will monitor and investigate security incidents while assessing their impact on the organization’s compliance posture. A key part of the role will be identifying and remediating technical compliance violations and developing detections to prevent them from recurring. You will work closely with Security Operations, Technology, Compliance, and Audit teams to maintain adherence to important regulatory and security standards. The position combines hands-on security analysis with automation, documentation, reporting, and audit support. You will have the opportunity to improve security processes and controls within a rapidly evolving, highly technical infrastructure environment. This role is well suited to an analytical security professional who enjoys solving complex problems, improving controls, and taking ownership of security and compliance outcomes. ### Accountabilities: - Monitor, investigate, and respond to security incidents across SIEM, CSPM, and other enterprise security technologies. - Assess the impact of security incidents on the organization’s compliance posture and remediate technical compliance violations. - Identify gaps in security and compliance controls and implement appropriate remediation measures. - Propose and develop detection mechanisms designed to identify compliance violations and emerging security risks. - Create and maintain automation for security compliance activities and incident investigations using tools such as Logic Apps, PowerShell scripts, and Sentinel playbooks. - Collaborate with internal and external auditors to collect, prepare, and validate evidence demonstrating continued adherence to compliance requirements. - Provide clear reporting and documentation covering security incidents, investigations, remediation activities, and compliance requirements. - Work closely with Technology, Security Operations, Compliance, and Audit teams to strengthen adherence to security and regulatory standards across the infrastructure. - Support continuous improvement of security controls, monitoring capabilities, and compliance processes. - Contribute to security investigations and ensure identified issues are tracked through to effective resolution. - Help maintain appropriate documentation and evidence for frameworks and controls including SOX, DORA, GDPR, and SOC 2. - Apply security and compliance best practices across cloud infrastructure and enterprise technology environments. ## Requirements: - 2+ years of hands-on experience working as a Security Analyst with enterprise security technologies such as SIEM, EDR, and CSPM. - Practical experience with Microsoft Sentinel, including KQL queries, analytic rules, automation playbooks, and dashboards. - Experience with Microsoft Entra ID, including identity protection, conditional access, and Privileged Identity Management (PIM). - Experience with Microsoft Purview, including Data Loss Prevention (DLP), sensitivity labels, insider risk, and eDiscovery. - Demonstrated experience working with internal and external auditors to provide and validate evidence for compliance controls in cloud environments. - Experience supporting compliance requirements and controls related to frameworks or regulations such as SOX, DORA, GDPR, and SOC 2. - Proven experience investigating and remediating security incidents. - Solid understanding of identity and access management (IAM) lifecycle processes. - Strong knowledge of SIEM and SOAR concepts and their application in security operations. - Understanding of security compliance controls and frameworks, including NIST and other recognized industry standards. - Intermediate written and spoken English proficiency. - Strong analytical and problem-solving skills, with the ability to investigate complex security issues and determine appropriate remediation. - Ability to collaborate effectively with security, technology, compliance, and audit stakeholders. - Microsoft security certifications such as SC-200, SC-300, or SC-400 are advantageous. - Experience with cloud security posture management and vulnerability management tools is a plus. - Familiarity with DevOps practices for security automation, including Git and Azure DevOps, is beneficial. - Familiarity with Endpoint Detection and Response (EDR) technologies is advantageous. - Experience remediating compliance violations is a plus. - Scripting or development experience with PowerShell, RESTful APIs, Microsoft Graph API, Python, or Bash is highly valued. ## Benefits: - Competitive compensation. - Fully remote work opportunity within Europe, with the option to work from an office environment where available. - Flexibility and significant ownership over your work. - Career development and continuous learning opportunities. - Opportunity to work on impactful projects within advanced AI and cloud infrastructure. - International environment with highly skilled colleagues across multiple countries. - Collaborative and innovative culture. - Opportunity to work on complex security, compliance, and cloud infrastructure challenges. - Fast-paced environment that encourages bold thinking, continuous improvement, and meaningful impact. - Opportunity to contribute to the security foundations of a rapidly evolving technology platform.