About the Position

Associate (Consultant) Cloud Compliance & Governance (m/w/d)

Bonn oder freie Arbeitsplatzwahl

Voll- oder Teilzeit

Festanstellung

About the Role

As an (Associate) Consultant for Cloud Compliance & Governance, you will support our clients in making their cloud environments compliant, secure, and regulatory-compliant.

You will work at the intersection of compliance, governance, and cloud technologies – in various client projects, from medium-sized companies to corporate environments. You will develop technical expertise and consulting skills: you will analyze compliance frameworks, design governance concepts, and actively contribute to the implementation of regulatory requirements – with increasing responsibility depending on your experience level.

Responsibilities

Depending on your experience level, you will work independently or gradually grow into the following tasks:

Advising clients on compliance strategies and regulatory requirements (GDPR, NIS2, DORA, ISO 27001, BSI Basic Protection)
Establishing and operating Information Security Management Systems (ISMS)
Implementing and configuring Microsoft Purview (Compliance modules, DLP, Sensitivity Labels)
Implementing Cloud Governance Frameworks, Cloud Policy Management, and Compliance Reporting
Advising on data protection and data sovereignty concepts (GDPR, Data Residency, EU Sovereign Cloud)
Conducting or participating in compliance assessments and maturity analyses
Implementing Data Governance and Information Lifecycle Management
Classifying regulatory requirements for AI use – from usage decisions to compliance evaluation
Close collaboration with security, legal, and cloud teams at the client
Answering core questions about data storage, data protection, and regulatory risks in the regulatory classification of AI use.

Requirements

Associate Consultant

Completed or about to complete a Master's degree in Computer Science, Business Informatics, Law, IT Security, or a comparable field
Basic interest in IT compliance, data protection, regulatory requirements, and cloud technologies, and motivation to quickly familiarize yourself with new topics
Basic understanding of compliance frameworks, data protection law (e.g., GDPR) or IT governance, e.g., from studies or own projects
Analytical mindset, structured working method, and willingness to learn – you get involved, ask questions, and actively participate
Good communication skills and willingness to explain complex regulatory contexts understandably and to confidently interact with the team and clients

Consultant

Completed Master's degree or comparable education and around 2 years of professional experience in IT compliance, cloud governance, data protection, or IT security
Knowledge of relevant compliance frameworks and regulatory requirements (e.g., GDPR, NIS2, ISO 27001, BSI Basic Protection)
Experience with cloud platforms (especially Microsoft Azure) and compliance and governance tools such as Microsoft Purview
Understanding of data protection, data sovereignty, and information governance concepts
Ability to prepare and present regulatory and technical contexts understandably to clients
Willingness to take independent responsibility in client projects

Nice to Have

Initial knowledge of cloud platforms (Microsoft Azure or M365) or compliance tools
Initial practical experience, e.g., through internships, work-study activities, or own IT projects
Basic knowledge of ISO 27001, BSI Basic Protection, or GDPR requirements
Certifications (e.g., SC-900: Microsoft Security, Compliance & Identity Fundamentals; AZ-900: Azure Fundamentals, CSA)
Interest or initial contact with Microsoft Purview or GRC platforms

Typical Technologies & Topics

Microsoft Purview (Compliance Portal, DLP, Sensitivity Labels, Records Management)
Microsoft 365 Compliance Features
Cloud Platforms: Microsoft Azure / AWS / GCP
Compliance Frameworks: ISO 27001, BSI-Grundschutz, GDPR, NIS2, DORA
Cloud Governance & Policy Management
Data Governance & Information Lifecycle Management
Digital Sovereignty

Why Us?

Your Onboarding Program

*We fill this position at both Associate Consultant level (career entry) and Consultant level (approx. 2 years of professional experience).

Our onboarding program provides you with orientation from the start – with workshops and training based on Comma-specific content, creating a common understanding of our working methods and a collegial atmosphere in daily project work. From day one, a personal buddy will be at your side; experienced mentors will accompany you on your journey.

We tailor the program specifically to your experience level:

As an Associate Consultant, you will gradually grow into your field of tasks. The focus is on orientation, knowledge building, and a secure arrival in the Comma project environment – closely supported by colleagues who actively share their know-how and introduce you to our way of thinking and work culture.
As a Consultant, you already bring solid experience – and we build on that. Your onboarding focuses on getting to know our internal methods, structures, and client environments, as well as your targeted development in the Comma context: both professionally and personally.

Our Benefits

You work on diverse projects for DAX corporations and leading medium-sized companies.
Innovative, interdisciplinary topics combine scientific depth with a real hands-on mentality.
You have plenty of space for your own ideas and can shape and act independently.
Flexible working hours, free choice of location, overtime compensation, and travel time that counts as working time give you the freedom to shape your professional and private life according to your ideas.
A fair fixed salary plus bonus, Jobrad, top equipment, and many other benefits round off your package.
Individual further education and career programs accompany you throughout your time at Comma Soft.
Experienced professionals and newcomers work directly together – supported by a structured mentoring program.
Whether it's monthly staff meetings, grilling on the rooftop terrace, game nights, or summer parties with your loved ones – we love to celebrate together, often.

About Us

Our Family Business

Associate (Consultant) Cloud Compliance & Governance (m/w/d)

Job description