Security Engineer

• Lead and support SOC 2 Type I & II, SEC S-P, ISO 27001, and CCPA initiatives, including leading engagements with external firms and consultants as necessary.
• Maintain and enhance core security and compliance policies (WISP, CDISP, Access, Privacy, Intercompany Agreements).
• Inform and lead the implementation of data and other access permissions consistent with security and compliance policies in close partnership with engineering.
• Develop scalable, repeatable processes to unify acquired firms into Earned’s security and compliance program.
• Conduct risk assessments and maintain a shared risk register with remediation tracking.
• Support identity and access governance (MFA/SSO reviews, onboarding/offboarding, quarterly access reviews).
• Run vendor risk assessments for new and renewing vendors.
• Manage evidence collection, asset inventory, and security compliance platforms such as Vanta or Drata.
• Assist with incident documentation, timelines, and corrective actions.

Information Security Lead

Security Consultant, Finance

Leitung Geschäftsfeld Sicherheit und Verteidigung

Leitung Geschäftsfeld Sicherheit- und Verteidigung

Senior Consultant SAP Security, Berechtigungsmanagement, GRC

IT Security Consultant / Engineer, Network Security