Senior Consultant Cloud Compliance & Governance (m/w/d)
Primary stack
Nice to have's
Job description
About the Position
Senior Consultant Cloud Compliance & Governance (m/w/d)
Location: Bonn or remote
Type: Full-time
About the Role
As a Senior Consultant Cloud Compliance & Governance, you will advise our clients on making their cloud environments compliant, secure, and sustainable. You will work at the intersection of law, regulations, and cloud technology in various client projects, ranging from medium-sized companies to corporate environments and critical infrastructures.
You will combine deep expertise in compliance frameworks with consulting skills. You will lead the analysis, design, and implementation of compliance strategies, governance frameworks, and regulatory requirements-from DSGVO to NIS2, EU AI Act, and BSI-Grundschutz.
Responsibilities
- Advising clients on cloud compliance strategies and regulatory requirements (DSGVO, NIS2, DORA, KRITIS, EU AI Act)
- Establishing, developing, and operating information security management systems (ISMS)
- Conducting compliance assessments, maturity analyses, and internal/external audits (1st & 2nd Party)
- Designing and implementing cloud governance frameworks, cloud policy management, and cloud operating models
- Implementing and optimizing Microsoft Purview (all modules: DLP, eDiscovery, Records Management, MIP, Insider Risk)
- Designing data governance platforms, information lifecycle management, and retention policies
- Advising on data protection (DSGVO), privacy by design, and digital sovereignty (EU Sovereign Cloud, Gaia-X)
- Supporting third-party risk management and vendor assessment processes
- Building compliance reporting & dashboards and compliance management platforms (GRC)
Requirements
- Several years of experience in IT compliance, data protection, cloud governance, or GRC consulting
- Solid knowledge in at least one compliance framework: ISO 27001, BSI-Grundschutz, DSGVO, NIS2, DORA, etc.
- Knowledge of Microsoft 365 / Azure compliance solutions, ideally Microsoft Purview
- Understanding of cloud architectures and cloud governance concepts
- Ability to explain complex regulatory requirements to clients and translate them into technical concepts
Nice to Have
- Microsoft certifications (e.g., SC-401: Information Protection & Compliance Administrator; MS-102: Microsoft 365 Administrator Expert; SC-900: Security, Compliance & Identity Fundamentals)
- ISACA certifications (e.g., CISA: Certified Information Systems Auditor; CISM: Certified Information Security Manager; CRISC: Certified in Risk and Information Systems Control)
- IAPP certification CIPP/E: Certified Information Privacy Professional/Europe (DSGVO focus)
- ISO 27001 Lead Auditor or Lead Implementer (e.g., PECB, BSI Group)
- Experience in consulting projects or external client environments
- Knowledge of other regulations (EU AI Act, KRITIS, eIDAS, FiDA)
- Experience with GRC platforms or compliance management tools
Typical Technologies & Topics
- Microsoft Purview (all modules: DLP, eDiscovery, Records Management, MIP, Insider Risk Management)
- Microsoft 365 Compliance & Governance
- Cloud Platforms: Microsoft Azure / AWS / GCP
- Compliance Frameworks: ISO 27001, BSI-Grundschutz, DSGVO, NIS2, DORA, EU AI Act
- Cloud Governance Framework & Cloud Policy Management
- Data Governance, Information Lifecycle & eDiscovery
- GRC Platforms & Compliance Reporting
Why Join Us?
Your Onboarding at Comma
As a Senior Consultant, you bring solid expertise and technical skills-we build on that. Therefore, your onboarding focuses on the essentials: the right contacts, a deep understanding of our culture and working methods, and orientation in our structures and decision-making processes. Structured exchange with experienced colleagues will support you in quickly building the relevant networks and finding your place in the company. At the same time, you will get to know our methods, processes, and Comma-specific ways of working.
So you can quickly find the levers with which you can make an impact at Comma and in client projects.
Our Benefits
- You will work on diverse projects for DAX corporations and leading medium-sized companies.
- Innovative, interdisciplinary topics combine scientific depth with a real hands-on mentality.
- You have plenty of room for your own ideas and can shape and act independently.
- Flexible working hours, free choice of location, overtime compensation, and travel time that counts as working time give you the freedom to shape your professional and private life according to your ideas.
- A fair fixed salary plus bonus, Jobrad, top equipment, and many other benefits round off your package.
- Individual further education and career programs accompany you throughout your time at Comma Soft.
- Experienced professionals and newcomers work directly together-supported by structured mentoring.
- Whether Gipfelis (monthly employee meetings), grilling on the rooftop terrace, Games Nights, or summer parties with your loved ones-we love to celebrate together, often.
About Us
Our Family Business
© Comma Soft. This job description was sourced from the employer's public career page. TheJob is not the employer — we index the posting and route candidates to the source. All content rights and hiring decisions belong to the employer.