For REWE digital Spain, a subsidiary of the REWE Group located in Málaga, we are looking for an IT Security & Compliance Engineer (m/f/d) to strengthen our Building Management product team. As the central solution provider for information and telecommunications systems, REWE digital plans, develops, and operates digital solutions for one of the leading retail and tourism groups in Europe.
Your Home of IT is our Building Management (BUM) product within the Corporate Functions (CF) domain and the Digital Office IT (DOIT) organization. The Building Management product supports a diverse portfolio of digital solutions that are essential for planning, constructing, operating, maintaining, and securing REWE Group facilities. These include building and maintenance management platforms, construction planning tools, room and workplace booking solutions, package tracking systems, and physical security solutions such as access control, video surveillance, and intrusion detection systems.
As our IT Security & Compliance Engineer, you will act as the central point of contact for security, compliance, and governance topics across this application landscape. You will coordinate security measures with software vendors, infrastructure teams, security managers, and business stakeholders while ensuring that all relevant security controls and compliance requirements are implemented and maintained.
Act as the primary contact for IT Security, Compliance, and Internal Control System (IKS) topics within the Building Management product.
Ensure compliance with internal security policies, governance requirements, and audit obligations.
Patch and Vulnerability Management
Firewall Rule Management
Identity and Access Management (IAM)
Perform risk assessments, protection requirement analyses, and security evaluations.




Maintain security documentation, audit evidence, and compliance records.
Coordinate and track security measures through Jira, service management tools, and governance processes.
Act as the interface between business stakeholders, software manufacturers, infrastructure specialists, security teams, and external partners.
Support vendor management activities from a security and compliance perspective.
Contribute to the continuous improvement of governance, compliance, and security processes within the Building Management landscape.
You are interested in cybersecurity and governance topics, communicate confidently with technical and non-technical audiences, and take ownership of security-related challenges.
At least 3 years of professional experience in IT Security, Security Governance, Compliance, Risk Management, Application Security, Infrastructure Security, or a comparable field.
Good understanding of common IT security controls and security best practices.
Experience with Identity & Access Management, authorization concepts, and user lifecycle processes.

Experience with vulnerability management, security assessments, and risk evaluations.
Experience supporting audits, compliance initiatives, or internal control systems.
Ability to coordinate implementation activities with software vendors and technical infrastructure teams.
Understanding of server, database,



network, and cloud-based environments.
Professional English language skills (required).
German language skills are a strong plus.
Experience with Jira and Confluence is desirable.
Experience working with Internal Control Systems (IKS).
Knowledge of SaaS governance and third-party risk management.
Understanding of security requirements in retail, logistics, facility management, or corporate environments.
The opportunity to take ownership of security and compliance activities for a diverse and business-critical application landscape.
~ Close collaboration with experienced security experts, infrastructure specialists, architects, and software vendors.
~ Adaptable working hours and a hybrid working model.
~ Modern office facilities in Málaga.
~ Private medical insurance benefits.
~ Professional development opportunities including technical training and language courses.
~ Security and compliance are essential foundations for reliable digital business processes. In this role, you will become the central security coordinator for a broad portfolio of applications supporting construction, facility management, workplace services, logistics, and physical security within the REWE Group.
You will work at the intersection of application security, infrastructure security, governance, compliance, and stakeholder management. By coordinating security initiatives, reducing vulnerabilities, driving compliance activities, and supporting audits, you will make a tangible contribution to the resilience and security of REWE Group's Building Management landscape.
Apply now in English and become part of REWE digital Spain's growing technology organization.
#

📌 CF- IT Security and Compliance Engineer- Building Management (m/f/d) (BUM)
🏢 REWE digital Spain
📍 Málaga