As an (Associate) Consultant Cloud Compliance & Governance, you will help our clients make their cloud environments compliant, secure, and regulation-ready.
You will work at the interface of compliance, governance, and cloud technologies – in diverse client projects, from medium-sized companies to corporate environments. You will develop technical expertise and consulting skills: you will analyze regulatory frameworks, participate in the development of governance concepts, and actively support the implementation of regulatory requirements – depending on your experience level, with increasing independence.
Depending on your experience level*, you will work independently or progressively master the following tasks:
- Advising clients on compliance and regulatory strategies (GDPR, NIS2, DORA, ISO 27001, BSI Grundschutz)
- Creation and operation of Information Security Management Systems (ISMS)
- Implementation and configuration of Microsoft Purview (Compliance modules, DLP, Sensitivity labels)
- Implementation of cloud governance frameworks, cloud policy management, and compliance reporting
- Advising on data protection and data sovereignty concepts (GDPR, Data Residency, EU Sovereign Cloud)
- Conducting or participating in compliance assessments and maturity analyses
- Implementation of data governance and information lifecycle management
- Classification of regulatory requirements for AI use – from decision for use to compliance assessment
- Close collaboration with the client's security, legal, and cloud teams
- With regulatory classification of AI use, from use to compliance, you answer key questions on data storage, data protection, and regulatory risks.
What you bring with you
Associate Consultant*
- Completed or near-completed Master's degree in Computer Science, Business Informatics, Law, IT Security, or a comparable specialization/education
- Basic interest in IT compliance, data protection, regulatory requirements, and cloud technologies, as well as the motivation to quickly acquire new knowledge
- Basic understanding of regulatory frameworks, data protection laws (e.g., GDPR), or IT governance, e.g., from studies or personal projects
- Analytical skills, a structured approach to work, and a willingness to learn – you tackle tasks, ask questions, and actively participate
- Good communication skills and the ability to explain complex regulatory interrelationships clearly and to confidently assert yourself both within the team and when interacting with clients
Consultant*
- Completed Master's degree or comparable education and approx. 2 years of professional experience in IT compliance, cloud governance, data protection, or IT security
- Knowledge of relevant regulatory frameworks and compliance requirements (e.g., GDPR, NIS2, ISO 27001, BSI Grundschutz)
- Experience with cloud platforms (especially Microsoft Azure) as well as compliance and governance tools like Microsoft Purview
- Understanding of data protection, data sovereignty, and information governance concepts
- Ability to clearly explain and present regulatory and technical interrelationships to clients
- Willingness to take responsibility independently in client projects
Desirable
- Initial knowledge in cloud platforms (Microsoft Azure or M365) or compliance tools
- Initial practical experience, e.g., through internships, student jobs, or personal IT projects
- Basic knowledge of ISO 27001, BSI-Grundschutz, or GDPR requirements
- Certifications (e.g., SC-900: Microsoft Security, Compliance & Identity Fundamentals; AZ-900: Azure Fundamentals, CSA)
- Interest or first contact with Microsoft Purview or GRC platforms
Typical technologies and topics
- Microsoft Purview (Compliance Portal, DLP, Sensitivity Labels, Record Management)
- Microsoft 365 compliance features
- Cloud platforms: Microsoft Azure / AWS / GCP
- Regulatory frameworks: ISO 27001, BSI Grundschutz, GDPR, NIS2, DORA
- Cloud governance and cloud policy
- Data governance and information lifecycle management
- Digital sovereignty
Your onboarding program
*We are filling this position at both the Associate Consultant (career entry) and Consultant (approx. 2 years of experience) levels.
Our onboarding program provides orientation right from the start – with workshops and training based on Comma-specific content that, while personalized, create a shared understanding of our way of working and collegial interaction in everyday project work. From day one, you will have a personal buddy; experienced mentors will also accompany you.
We specifically tailor the program to your experience level:
- As an Associate Consultant, you will learn your area of responsibility step by step. The focus is on orientation, knowledge acquisition, and confident handling of everyday project work at Comma – with close support from colleagues who actively share their knowledge and introduce you to our mindset and work culture.
- As a Consultant, you already have deep expertise – and we build on that. Your onboarding focuses on familiarizing you with our internal methods, structures, and client environments, as well as your targeted further development within the Comma context: both professionally and personally.
Our benefits
- You work on diverse projects with DAX companies and leading medium-sized enterprises.
- Innovative, interdisciplinary topics combine academic depth with a practical, hands-on approach.
- You have plenty of room for your own ideas, can make decisions independently, and act autonomously.
- Flexible working hours, freedom of residence, overtime compensation, and travel time compensation as working time give you the freedom to design your professional and personal life as you wish.
- Fair fixed salary plus bonus, "Jobrad" program, top equipment, and many other benefits complete your package.
- Individual training and career development programs support you throughout your entire tenure at Comma Soft.
- Experienced professionals and newcomers work directly together – supported by structured mentoring.
- Whether it's "Gipfelis" (monthly employee gatherings), BBQs on the terrace, game nights, or summer parties with your loved ones – we like to celebrate often and together.
