Endpoint Detection & Response

Skills this role screens for

About the role

Allianz is hiring for the role of Endpoint Detection & Response!

The work

Responsibilities of the Candidate

• Independently create, compile, and maintain audit evidence to support internal and external audit requirements
• Request and collect evidence from relevant teams and stakeholders across the ACDC
• Ensure all evidence is accurate, complete, and delivered within required timelines
• Serve as the central point of contact for all incoming audit inquiries and requests directed at the Allianz Cyber Defense Centre
• Coordinate, track, and respond to audit requests in a timely and structured manner
• Liaise with auditors to clarify requirements and ensure smooth audit processes
• Continuously assess and improve audit-related processes and workflows within the ACDC
• Identify gaps, inefficiencies, and risks in current evidence gathering and documentation practices
• Develop and implement standardized procedures to enhance audit readiness
• Create and maintain audit-relevant documentation in collaboration with all ACDC teams
• Ensure documentation meets regulatory, compliance, and internal standards
• Maintain a structured and accessible repository of audit artifacts
• Work closely with all areas of the ACDC, with a particular focus on the Compliance function
• Build and maintain strong working relationships with internal stakeholders to facilitate efficient evidence collection.

Who they want

Requirements

• Bachelor’s degree in information security, Business Administration, IT, or a related field
• Experience in audit management, evidence gathering, or compliance within a cybersecurity or IT environment
• Working command of the frameworks the function is measured against: ISO 27001, NIST CSF/800-53, SOC 2, and (in an EU-regulated setting) DORA, GDPR, and the EU AI Act
• Excellent organizational and project management skills
• Strong written and verbal communication skills in English
• Ability to work independently and manage multiple priorities under tight deadline.
• Exposure in AI, Agentic AI, Gen AI.
• Regulatory and framework fluency
• Control design and effectiveness testing
• Security operations literacy (understanding of SIEM, EDR, detection engineering, incident response)
• Risk assessment and prioritization
• Evidence and audit-trail discipline
• Incident and breach response oversight
• Communication and stakeholder management