Bertelsmann SE & Co. KGaA

Full-stack Engineer

• Design, develop, test and deploy robust, maintainable and readable software, applications, APIs and workflows — primarily using Java
• Introduce industry standards and best practices and continuously simplify the existing software architecture
• Work in Agile teams following Scrum methodology; participate in sprints, stand-ups and planning sessions

Senior Software Engineer

• Develop, test and deploy robust, maintainable software, applications, APIs, and workflows
• Collaborate to improve the current software architecture
• Monitor production systems and identify optimization opportunities
• Actively promote a positive engineering culture

Software Engineer

• Architectural Leadership: Designing and overseeing the implementation of microservices architectures
• Technical Expertise: Serving as a technical authority and resource for teams
• Innovation and Strategy: Leading the exploration and adoption of emerging technologies
• Cross-functional Collaboration: Working with product management, operations, and other stakeholders
• Code Quality Assurance: Ensuring high standards of code quality
• Process Improvement: Identify and drive initiatives to enhance development processes

Principal Software Engineer

Compliance

• Lead the strategy, operating model, and maturity roadmap for governance, risk, and compliance programs.
• Develop, maintain, and enforce information security policies, standards, procedures, and guidelines aligned with regulatory and business requirements.
• Oversee enterprise risk management for cybersecurity, including risk identification, assessment, prioritization, treatment tracking, and reporting.
• Maintain a centralized risk register and ensure appropriate risk acceptance, mitigation, or transfer decisions are documented and approved.
• Lead internal and external audit readiness activities, including coordination of evidence collection, control validation, and remediation tracking.
• Manage compliance with applicable frameworks and standards such as NIST CSF, ISO 27001, SOC 2, HIPAA, PCI DSS, and other regulatory obligations as applicable.
• Oversee third-party risk management processes, including vendor assessments, due diligence, risk rating, and monitoring of remediation activities.
• Establish governance forums, reporting structures, and escalation pathways to support risk-informed decision-making and accountability.
• Develop and deliver risk reporting, dashboards, and executive communications that articulate control effectiveness, compliance posture, and residual risk.
• Partner with legal, privacy, human resources, and business stakeholders to ensure alignment on regulatory obligations and data protection requirements.
• Drive continuous improvement of controls, processes, and governance practices based on audit findings, risk trends, and evolving threats.
• Support customer-facing security and compliance inquiries, including RFPs, due diligence questionnaires, and assurance reporting.
• Manage technology platforms supporting GRC functions (e.g., risk management systems, policy tools, audit tracking solutions).
• Lead, coach, and develop GRC professionals while fostering a culture of accountability, transparency, and continuous improvement.

Director, Governance, Risk, Compliance

Security Engineer

• Lead the strategic direction, operating model, and maturity roadmap for the security architecture and engineering function
• Define and maintain enterprise security architecture principles, reference architectures, design patterns, and engineering standards aligned to business objectives and risk tolerance
• Oversee the design, implementation, and lifecycle management of security technologies supporting identity, endpoint, network, cloud, data, application, and infrastructure security capabilities
• Partner with enterprise architecture, infrastructure, DevOps, cloud, and software engineering teams to embed security-by-design and secure-by-default practices into technology solutions and delivery processes
• Review and approve security architecture for major systems, platforms, integrations, and transformation initiatives, including cloud services and third-party technologies
• Direct security engineering activities related to control implementation, automation, integration, tuning, and operational resilience
• Establish and socialize secure design requirements for applications, platforms, APIs, data flows, and infrastructure components
• Provide leadership for application security and product security enablement, including guidance on secure development, threat modeling, architectural risk analysis, and remediation priorities
• Collaborate with governance, risk, and compliance stakeholders to align control design and technology implementations with internal policies, customer requirements, and regulatory expectations
• Drive technical risk reduction initiatives by identifying architecture gaps, control weaknesses, technical debt, and modernization opportunities
• Manage vendor and technology evaluations related to security architecture and engineering capabilities, including proof-of-concept activities and implementation planning
• Coach, develop, and performance-manage architects and engineers while building a high-performing, collaborative, and accountable team culture
• Support incident response, significant investigations, and post-incident improvement efforts by providing architecture and engineering expertise for containment, recovery, and long-term remediation.

Director, Security Architecture – Engineering

Project Manager

• Manage the customer migrations and/or implementation of the Relias Platform for multiple solutions
• Commanding and driving internal resources across Relias
• Developing detailed project plans, identifying scope, milestones, dependencies, timelines, and contingency plans
• Utilizing tools and project management practices to ensure on-time delivery and effective communication and collaboration
• Identifying and managing risks and issues
• Lead project reviews, provide status reports, and ensure project remains on schedule, within scope, and within budget
• Developing and fostering positive relationships and building rapport with customers
• Configure contracted products and solutions to customer specifications
• Providing technical support to customers throughout the duration of the migration/implementation
• Conducting platform training sessions for internal and external customers as required
• Ensure process documentation is developed and maintained

Revenue Operations

• Leading a team of 5 Revenue Operations Analysts
• Developing and maintaining dashboards, KPIs, and reporting to deliver actionable insights
• Developing, documenting, and executing the revenue operations roadmap
• Partnering with Revenue Technology team to deliver value from technology investments
• Partnering with Enablement to ensure effective sales strategies
• Standardizing lead management, pipeline management, and account handoffs
• Leading annual planning for revenue targets, quotas, and territories

Director, Revenue Operations

IT Support

• Provide daily remote and in-person support across IT workplace services, including O365, JAMF, Intune/Autopilot, Video Conferencing, Active Directory, Access Management, and Okta
• Manage tickets and workload effectively through ITSM tools such as Jira and Confluence, ensuring timely and user-focused updates
• Contribute to the team’s knowledge management platform by creating and maintaining processes, technical guides, and how-to documentation
• Participate in Incident, Problem, and Change Management for IT Support and Workplace services
• Collaborate on projects led by the IT Support and Workplace function
• Work as part of a global team that designs, protects, and manages workplace services for BMG
• Stay abreast of emerging technologies and security threats, proactively assessing and evaluating them for potential adoption within the organization