Senior Software Engineer, Security Assurance | Germany | Remote

This role offers an excellent opportunity to manage and mature two critical programmes within the OutSystems Security function. As a Lead Analyst, you will guide our Third-Party Risk Management (TPRM) strategy and facilitate enterprise risk activities that shape how we manage risk across our vendor ecosystem. Operating with significant autonomy, you will define the scope for cross-functional initiatives, bridge gaps between current practices and desired outcomes, and mentor colleagues. If you have deep expertise in vendor risk, excel at translating complex goals into structured programmes, and want to make a lasting impact on our security posture, we would like to meet you.

Key Responsibilities

Lead the TPRM Programme: Define our TPRM strategy, including risk tiering, assessment frameworks, and monitoring cadences for critical vendors.
Embed Security by Design: Partner with Digital, Procurement, Legal, and Engineering teams to integrate risk requirements into vendor selection and contracting.
Manage Enterprise Risk: Evolve the division's risk register, facilitating workshops with business leaders to identify emerging risks and validate controls.
Ensure Audit Readiness: Act as the primary point of contact for internal and external audits, supporting certifications such as ISO 27001, SOC 2, and regional frameworks.
Optimise Operations: Architect improvements in evidence collection, risk tracking, and GRC tooling to reduce manual effort and build scalable operating procedures.
Monitor the Landscape: Assess the applicability of emerging regulatory requirements (e.g., DORA, NIS2, GDPR) and translate them into actionable programme changes.

Qualifications & Requirements

Education & Experience: Bachelor’s degree in Information Security or a related field, alongside 7–10 years of experience in risk management or compliance (with 3–4 years focused on TPRM).
Framework Expertise: Strong working knowledge of enterprise risk and security frameworks (e.g., ISO 27001, ISO 31000, SOC 2, NIST).
Regulatory Knowledge: Familiarity with emerging European regulations, particularly DORA, NIS2, and GDPR (knowledge of HIPAA or PCI DSS is advantageous).
Project Leadership: Proven ability to operate autonomously, manage complex cross-functional alignment, and mentor junior team members.
Certifications: Professional certifications such as CRISC, CISM, CISSP, CISA, or ISO 27001 Lead Auditor/Implementer are highly preferred.

More about OutSystems

OutSystems is a leading AI Development Platform built for the enterprise. Global organizations trust OutSystems to rapidly build mission-critical apps and agents, modernize legacy processes with agentic systems, and govern their entire AI portfolio across complex regulatory environments, all on one unified platform.

As the future becomes agentic, our customers need us now more than ever. While AI has opened the door to extraordinary possibilities, most large organizations find themselves stuck on one side of the "enterprise gap" because AI by itself doesn't solve their complex use cases and business challenges. OutSystems bridges the "enterprise gap" by combining the speed of generative AI with a deterministic, enterprise-grade framework. We provide the tools for teams of any size to deliver high-quality, reliable AI solutions that drive real business impact.

We are looking for passionate, talented, and motivated people to join us as we empower organizations to build, deploy, and scale the next generation of enterprise software. While we are leading the charge into the agentic era, our mission is broader: we are the platform enterprise leaders trust to evolve their entire business, accelerating innovation through secure, governed human-AI collaboration.

OutSystems is a global company, with more than 900k developer community members, 1,700 employees, more than 600 partners, and thousands of active customers in over 75 countries and across 21 industries. Founded in 2001, OutSystems now has offices in the United States, United Kingdom, the Netherlands, Portugal, Germany, the UAE, Japan, Hong Kong, Malaysia, Australia, India, and Singapore, and includes a thriving, worldwide community of remote employees.

Our customers are some of the world's most recognizable brands across diverse industries— such as Toyota, Heineken, Bosch, KeyBank, and UCLA—who trust OutSystems to deliver ROI and transformational impact.

Consistently recognized as a leader by top analyst firms Gartner, IDC and Forrester, OutSystems continues to shape the future of enterprise software development in the agentic era. We are proud to be named a leader in more than 100 categories on G2, including #1 in Customer Satisfaction in Enterprise Low Code Development, and most recently as a leader in AI Agent Building in the G2 Spring 2026 Reports.

Working at OutSystems

Our culture is built on our core values of Trust, Customer Success, Innovation, and Alignment. We operate as one global OutSystems team, taking ownership to pursue our vision of being the AI platform enterprise leaders trust to build, secure, and evolve their most critical applications and systems.

What do we have to offer you?

A company at the vanguard of the agentic revolution, where we don’t just react to AI innovation—we architect it. Joining OutSystems means stepping onto a high-growth rocket ship that combines the fearless agility of a startup with the sophisticated, global foundation of an enterprise powerhouse.
Real growth opportunities. We don't just talk about development; we invest in it through structured programs designed to scale your expertise. Whether you are aiming for vertical progression, exploring lateral moves into new domains, or mastering specialized AI skills through our Professional Development Fund and Internal Mobility Program, we provide the resources to get you there.
A global collective of world-class talent, where you’ll collaborate with enterprise software legends and sought-after thought leaders. At OutSystems, our industry experts aren't just visionaries—they are accessible, approachable mentors who are deeply invested in your growth as we architect the agentic future together.

OutSystems nurtures an inclusive culture where talented individuals from all backgrounds are empowered to learn, experiment and make an impact. . We believe that driving our next phase of growth requires the radical creativity that only comes from diverse perspectives. We are committed to building a team as global and diverse as the organizations we serve, ensuring every individual can perform to their full potential. As an equal opportunity employer, all qualified applicants receive equal consideration regardless of race, origin, religion, sex, sexual orientation, gender identity, disability, veteran status, or any other protected status.

Originally posted on Himalayas

Job Description

There are NO limits to your career: come shape the future and be part of a truly unique global culture at OutSystems!

About This Role

Key Responsibilities

Lead the TPRM Programme: Define our TPRM strategy, including risk tiering, assessment frameworks, and monitoring cadences for critical vendors.
Embed Security by Design: Partner with Digital, Procurement, Legal, and Engineering teams to integrate risk requirements into vendor selection and contracting.
Manage Enterprise Risk: Evolve the division's risk register, facilitating workshops with business leaders to identify emerging risks and validate controls.
Ensure Audit Readiness: Act as the primary point of contact for internal and external audits, supporting certifications such as ISO 27001, SOC 2, and regional frameworks.
Optimise Operations: Architect improvements in evidence collection, risk tracking, and GRC tooling to reduce manual effort and build scalable operating procedures.
Monitor the Landscape: Assess the applicability of emerging regulatory requirements (e.g., DORA, NIS2, GDPR) and translate them into actionable programme changes.

Qualifications & Requirements

Education & Experience: Bachelor’s degree in Information Security or a related field, alongside 7–10 years of experience in risk management or compliance (with 3–4 years focused on TPRM).
Framework Expertise: Strong working knowledge of enterprise risk and security frameworks (e.g., ISO 27001, ISO 31000, SOC 2, NIST).
Regulatory Knowledge: Familiarity with emerging European regulations, particularly DORA, NIS2, and GDPR (knowledge of HIPAA or PCI DSS is advantageous).
Project Leadership: Proven ability to operate autonomously, manage complex cross-functional alignment, and mentor junior team members.
Certifications: Professional certifications such as CRISC, CISM, CISSP, CISA, or ISO 27001 Lead Auditor/Implementer are highly preferred.

More about OutSystems

Working at OutSystems

What do we have to offer you?

A company at the vanguard of the agentic revolution, where we don’t just react to AI innovation—we architect it. Joining OutSystems means stepping onto a high-growth rocket ship that combines the fearless agility of a startup with the sophisticated, global foundation of an enterprise powerhouse.
Real growth opportunities. We don't just talk about development; we invest in it through structured programs designed to scale your expertise. Whether you are aiming for vertical progression, exploring lateral moves into new domains, or mastering specialized AI skills through our Professional Development Fund and Internal Mobility Program, we provide the resources to get you there.
A global collective of world-class talent, where you’ll collaborate with enterprise software legends and sought-after thought leaders. At OutSystems, our industry experts aren't just visionaries—they are accessible, approachable mentors who are deeply invested in your growth as we architect the agentic future together.

Originally posted on Himalayas

Job Description

There are NO limits to your career: come shape the future and be part of a truly unique global culture at OutSystems!

About This Role

Key Responsibilities

Lead the TPRM Programme: Define our TPRM strategy, including risk tiering, assessment frameworks, and monitoring cadences for critical vendors.
Embed Security by Design: Partner with Digital, Procurement, Legal, and Engineering teams to integrate risk requirements into vendor selection and contracting.
Manage Enterprise Risk: Evolve the division's risk register, facilitating workshops with business leaders to identify emerging risks and validate controls.
Ensure Audit Readiness: Act as the primary point of contact for internal and external audits, supporting certifications such as ISO 27001, SOC 2, and regional frameworks.
Optimise Operations: Architect improvements in evidence collection, risk tracking, and GRC tooling to reduce manual effort and build scalable operating procedures.
Monitor the Landscape: Assess the applicability of emerging regulatory requirements (e.g., DORA, NIS2, GDPR) and translate them into actionable programme changes.

Qualifications & Requirements

Education & Experience: Bachelor’s degree in Information Security or a related field, alongside 7–10 years of experience in risk management or compliance (with 3–4 years focused on TPRM).
Framework Expertise: Strong working knowledge of enterprise risk and security frameworks (e.g., ISO 27001, ISO 31000, SOC 2, NIST).
Regulatory Knowledge: Familiarity with emerging European regulations, particularly DORA, NIS2, and GDPR (knowledge of HIPAA or PCI DSS is advantageous).
Project Leadership: Proven ability to operate autonomously, manage complex cross-functional alignment, and mentor junior team members.
Certifications: Professional certifications such as CRISC, CISM, CISSP, CISA, or ISO 27001 Lead Auditor/Implementer are highly preferred.

More about OutSystems

Working at OutSystems

What do we have to offer you?

A company at the vanguard of the agentic revolution, where we don’t just react to AI innovation—we architect it. Joining OutSystems means stepping onto a high-growth rocket ship that combines the fearless agility of a startup with the sophisticated, global foundation of an enterprise powerhouse.
Real growth opportunities. We don't just talk about development; we invest in it through structured programs designed to scale your expertise. Whether you are aiming for vertical progression, exploring lateral moves into new domains, or mastering specialized AI skills through our Professional Development Fund and Internal Mobility Program, we provide the resources to get you there.
A global collective of world-class talent, where you’ll collaborate with enterprise software legends and sought-after thought leaders. At OutSystems, our industry experts aren't just visionaries—they are accessible, approachable mentors who are deeply invested in your growth as we architect the agentic future together.

Originally posted on Himalayas

Job Description

There are NO limits to your career: come shape the future and be part of a truly unique global culture at OutSystems!

About This Role

Key Responsibilities

Lead the TPRM Programme: Define our TPRM strategy, including risk tiering, assessment frameworks, and monitoring cadences for critical vendors.
Embed Security by Design: Partner with Digital, Procurement, Legal, and Engineering teams to integrate risk requirements into vendor selection and contracting.
Manage Enterprise Risk: Evolve the division's risk register, facilitating workshops with business leaders to identify emerging risks and validate controls.
Ensure Audit Readiness: Act as the primary point of contact for internal and external audits, supporting certifications such as ISO 27001, SOC 2, and regional frameworks.
Optimise Operations: Architect improvements in evidence collection, risk tracking, and GRC tooling to reduce manual effort and build scalable operating procedures.
Monitor the Landscape: Assess the applicability of emerging regulatory requirements (e.g., DORA, NIS2, GDPR) and translate them into actionable programme changes.

Qualifications & Requirements

Education & Experience: Bachelor’s degree in Information Security or a related field, alongside 7–10 years of experience in risk management or compliance (with 3–4 years focused on TPRM).
Framework Expertise: Strong working knowledge of enterprise risk and security frameworks (e.g., ISO 27001, ISO 31000, SOC 2, NIST).
Regulatory Knowledge: Familiarity with emerging European regulations, particularly DORA, NIS2, and GDPR (knowledge of HIPAA or PCI DSS is advantageous).
Project Leadership: Proven ability to operate autonomously, manage complex cross-functional alignment, and mentor junior team members.
Certifications: Professional certifications such as CRISC, CISM, CISSP, CISA, or ISO 27001 Lead Auditor/Implementer are highly preferred.

More about OutSystems

Working at OutSystems

What do we have to offer you?

A company at the vanguard of the agentic revolution, where we don’t just react to AI innovation—we architect it. Joining OutSystems means stepping onto a high-growth rocket ship that combines the fearless agility of a startup with the sophisticated, global foundation of an enterprise powerhouse.
Real growth opportunities. We don't just talk about development; we invest in it through structured programs designed to scale your expertise. Whether you are aiming for vertical progression, exploring lateral moves into new domains, or mastering specialized AI skills through our Professional Development Fund and Internal Mobility Program, we provide the resources to get you there.
A global collective of world-class talent, where you’ll collaborate with enterprise software legends and sought-after thought leaders. At OutSystems, our industry experts aren't just visionaries—they are accessible, approachable mentors who are deeply invested in your growth as we architect the agentic future together.

Originally posted on Himalayas