Careers

Lead Security Analyst – Risk & Compliance (all genders)

Company profile

Our client is an established product company specialising in mobility and ticketing services. The position is based in Erfurt, with a remote-first setup with clearly defined routines. This is a permanent, full-time position.

You will work on Risk & Compliance, focusing on cloud-native services, containerised workloads and CI/CD automation. The team values high quality standards, constructive feedback and active collaboration, as well as high availability and performance.

Your responsibilities

  • You assume responsibility in the risk & compliance environment and deliver measurable results – from planning to stable operation.
  • They analyze professional and technical requirements, translate them into implementable user stories/epics and coordinate dependencies transparently with all stakeholders.
  • They consistently implement observability (logging, metrics, tracing), derive concrete improvements from incidents and sustainably reduce error classes (RCA/problem management).
  • They automate build, test and deployment (CI/CD) processes and continuously improve team delivery capability, release stability and time-to-market.
  • They create comprehensible documentation, promote knowledge exchange (pairing, reviews, brown bags) and support teammates in onboarding.
  • They take over end-to-end ownership for features or services – from requirements reception to design/implementation to stable transfer to productive operation.
  • They work closely with product, security, data and operations to ensure that data protection, compliance and security requirements are taken into account at an early stage.
  • They contribute to architectural and technology decisions and bring in best practices to increase stability, security and scalability in the long term.

Your profile

  • They bring relevant experience for risk & compliance and can lead complex projects into the implementation in a structured manner.
  • Structured, self-responsible working method with an ownership mentality – you prioritize meaningfully, communicate risks early and deliver reliably.
  • Bonus: Knowledge of security/compliance (e.g. B. GDPR, ISO 27001, PCI DSS) and experience with auditable documentation.
  • Very good understanding of software architecture, interfaces (API design) and data models as well as the ability to justify technical decisions in a comprehensible way.
  • Practice with modern toolchains (Git, CI/CD, Testing) as well as the willingness to set standards and improve the quality in the team measurably.
  • Experience in cloud/container environments and a solid understanding of operations, monitoring and security fundamentals in distributed systems.
  • Very good knowledge of German or English in words and writing as well as the ability to work effectively even in distributed teams.
  • Team-oriented work in cross-functional setups; you provide constructive feedback, share knowledge and actively contribute to the development of the team.
  • Strong communication and moderation capability to clarify requirements, involve stakeholders and communicate technical topics in an understandable way.

Your Benefits

  • Modern work processes (agile/lean), clean documentation and a team that consistently lives quality, stability and security-by-design.
  • Further education budget for trainings, certifications and conferences so that you can continuously expand your role in terms of expertise and methodology.
  • High home office flexibility (remote/hybrid) including modern hardware equipment as well as professional toolchain for communication, planning and delivery.
  • Structured induction (onboarding plan, mentoring) and a clear development path with regular feedback cycles and training opportunities.
  • Flexible working hours and an environment that combines results orientation with sustainable work-life balance – including transparent goals and realistic planning.
  • Attractive compensation package with additional benefits and – depending on the role – bonus/premium components; transparent salary bands are lived practice.
  • Team events and exchange formats (remote or on site) to sustainably promote cooperation, culture and knowledge transfer.
  • Full-time permanent employment with a long-term perspective, clear responsibilities and a reliable setup for remote collaboration.
  • Short decision-making processes, a high level of personal responsibility and the opportunity to design topics with real impact – instead of just working through tickets.

Apply now

Is this the role you are looking for? We look forward to receiving your complete application, including a cover letter, CV and relevant references and certificates. Please include your salary expectations and earliest available start date.

For data protection reasons, we only accept applications through the form below. We treat all applications confidentially.

For information about how we handle your data, please see our Privacy Policy.

We welcome applications from everyone, regardless of gender, nationality, ethnic or social background, religion or belief, disability, age, sexual orientation or gender identity.





    Upload up to 10 files, with a combined size of no more than 20 MB. Accepted formats: PDF, DOCX, JPG and PNG.