Required skills
- SOX Compliance
- Cyber Resilience Act Compliance
- CI/CD Pipeline Governance
- GitLab
- GitHub
- Azure DevOps
- Jenkins
- SonarQube
- Snyk
- Checkmarx
- Black Duck
- Fortify
Languages: German
Job description
The role involves the independent implementation of assigned work packages for SOX and CRA compliance, including configuration of controls in development platforms and governance of CI/CD pipelines.
Project overview
+ Independent implementation of assigned work packages from conception through implementation and documentation to handover
+ Direct implementation of changes within the agreed technical access and change management authorizations
+ Involving engineering specialists when changes require special application know-how
+ Responsibility for risk acceptances, regulatory approvals, and independent audits remains with the respective responsible parties
+ No independent testing or approval of controls that have been implemented by oneself (four-eyes principle)
Requirements
+ Not only understand requirements from SOX (Sarbanes-Oxley Act) and CRA (Cyber Resilience Act), but also implement them yourself in the development tools and processes --> not an auditor or head of compliance projects
+ Experience in configuring controls in development platforms
+ Experience in the governance of CI/CD pipelines (GitLab, GitHub, Azure DevOps, Jenkins)
+ Experience in integrating security tools (SonarQube, Snyk, Checkmarx, Black Duck, Fortify)
Additional Information:
Project No.: 1085341
Job Type: Location: Start: 23.11.2026 Duration: 6 months +
Project details
- Start: 23.11.2026
- Duration: 6 Monate +
- Location: DE
- Languages: German
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on SOLCOM GmbH