Job
- Level
- Senior
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Location
- Berlin
- Working Model
- Hybrid, Onsite
Job Summary
In this role, you will define and maintain security policies and standards, verify the effectiveness of security controls, and support audits while strengthening security awareness within the engineering team.
Your role in the team
- The Information Security team at Zalando Payments acts as the second line of defense, owning the Information Security Management System and providing independent oversight of security risks and controls.
- As a regulated e-money and payments institution, we operate under frameworks such as DORA, PCI DSS, GDPR, and BaFin expectations, ensuring security is embedded, measurable, and auditable.
- In this role, you will help define and maintain security policies, standards, and the ZPS Security Controls Framework, while independently verifying control design and effectiveness across cloud, infrastructure, and application domains.
- You will work closely with first-line Engineering teams, while maintaining the independence required to challenge and strengthen the overall security posture.
- We are evolving towards a modern, scalable GRC model focused on automated evidence collection and continuous control monitoring.
- You will play a key role in driving this transformation, combining governance expertise with a technical mindset.
- You will also support internal and external audits, regulatory readiness, and management reporting, ensuring control effectiveness is demonstrated in a structured and data driven way.
This text has been machine translated. Show original
Our expectations of you
Qualifications
- You understand frameworks and regulations such as DORA, PCI DSS, ISO 27001, or GDPR.
- You bring a GRC engineering mindset, with an interest in automation, scalable evidence collection, and continuous monitoring.
- You are able to challenge constructively as a second line of defense, while collaborating effectively with engineering and security teams.
- You communicate clearly with both technical and non-technical stakeholders, including senior management.
Experience
- You have 5+ years of working experience in Information Security, Risk, or GRC, ideally in regulated environments such as fintech or payments.
- You have experience designing or assessing security controls, including defining evidence and evaluating effectiveness.
This text has been machine translated. Show original
What we offer
- Zalando offers a range of benefits; here is an overview of what you can expect.
- 27 days of holiday a year to start for full-time employees (+1 day for every calendar year up to 30 days).
- 2 paid volunteering days a year.
- Hybrid working model with up to 60% remote per week, actual practice is up to each team to best support their collaboration.
- Work from abroad for up to 30 working days a year.
- Employee shares program.
- 40% Rabatt auf Mode- und Schönheitsprodukte, die von Zalando verkauft und versendet werden, 30% Rabatt auf Lounge by Zalando, Rabatte von externen Partnern.
- Relocation assistance available (subject to prior agreement).
- Family services, including counseling and support.
- Health and wellbeing options (including Wellhub, formerly Gympass).
- Mental health support and coaching available.
- Drive your development through our training platform and biannual peer-to-peer review.
This text has been machine translated. Show original
Benefits
Work-Life-Integration
Food & Drink
Health, Fitness & Fun
Topics that you deal with on the job
Job Locations
This is your employer
Zalando SE
Zalando is the leading online fashion platform in Europe, connecting customers, brands, and partners in 17 markets. We offer the latest styles and trends from the best fashion brands around the world, all in one place. With Zalando, you can find the perfect outfit for any occasion, whether you're looking for casual wear, formal wear, or something in between. We also offer a wide range of sizes and styles to suit every customer's needs. Shop with us today and see why we're the leading fashion destination in Europe.
Description
- Company Type
- Established Company
- Working Model
- Full Remote, Hybrid, Onsite
- Industry
- Trade
Dev Reviews
by devworkplaces.com
Total
(1 Review)Culture
3.5Workingconditions
4.4Engineering
3.1Career Growth
2.6
Senior Security Engineer
- Location
- Berlin
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
- English Only
- English only required
