Microsoft Azure Security Governance & Compliance Specialist (f/m) v Česko

Help us strengthen security assurance for our Azure environment.

For our international team, we are looking for an Azure Governance/Compliance Specialist with a strong security background. In this role, you will support security assessment activities and provide security assurance and governance for Deutsche Telekom projects related to Azure landing zones. The position is based in Prague. You will work closely with international project teams, architects, and stakeholders to ensure solutions meet Deutsche Telekom security requirements. This is not a delivery or operational role. It is a security assurance and governance position.

We are looking for someone with strong knowledge of the Azure landing zone principles and core security controls (e.g. Management Groups & Subscriptions, Azure policy, IAM, VPC design, KMS), along with a general understanding of security governance and policies aligned with best practices. To support product development by ensuring compliance with security requirements, experience with project assessment and governance is needed. Definition and review of security best practices on Azure will be performed regularly. We are looking for someone who will not hesitate to engage in researching how to connect new technology for our benefit. Getting things done and solving problems with the team are essential to the team culture.

Responsibilities

• Perform security reviews of projects as part of the internal security assessment process.
• Provide advisory support to project teams from a security and compliance perspective.
• Assess Azure architectures and designs against internal security requirements.
• Define, review, and help enforce internal security requirements for Azure-based solutions.
• Identify, assess, and document security risks, support risk acceptance and exception processes.
• Govern security testing activities, evaluate results, track findings, and follow up on remediation.
• Contribute to the development of security standards and best practices within the Deutsche Telekom environment.

Job Requirements

You do not need to meet all requirements. We value willingness to learn and a strong security mindset.

Hard Skills

• Fluent in English, spoken and written
• Ability to work independently and take ownership of security topics
• Strong knowledge of Azure and related platform/security services, such as:
  • Azure architecture and deployment patterns (subscriptions, resource groups, shared services)
  • Operational concepts (how Azure environments are typically operated and secured)
  • Azure Landing Zone governance concepts (Management Group hierarchy, subscription governance)
  • Azure Policy (assignments, initiatives) and guardrails
  • Identity and Access Management: Microsoft Entra ID (Azure AD) and Azure RBAC
  • Virtual networking concepts: VNets, subnetting, NSGs, routing
  • Azure Key Vault (secrets/keys/certificates)
  • Infrastructure-as-Code templates
• Experience with security governance, policies, or compliance frameworks
• Experience with risk assessment, vulnerability management, or security analysis

Soft Skills

• Great communication skills and ability to work in multicultural environments
• Drive and commitment to assignments
• Problem-solving attitude and willingness to ask for help

We offer our people the best

• Smartphone: Choose your phone and get a compensation of up to 25,800 CZK every 3 years.
• Employee tariff: Use unlimited data, call and text for lower prices for private and business purposes.
• Yearly bonus: You can get a bonus of up to 15% of your annual fixed salary each year depending on the company’s success.
• T-Mobile discounts: Enjoy the 75% discount on 8 T-Mobile services for your family and friends.
• Partner discounts: Enjoy lower prices of products and services with our partners.
• Flexible hours: Adapt your work to your needs thanks to the home-office option (according to the agreement with the manager).
• Shares program Shares2You: Become a shareholder of the Deutsche Telekom Group and take advantage of the associated benefits.
• Rest and recreation: Relax with 6 weeks of holidays and 1 free day for charity activities.
• MultiSport: Sport and relax with your loved ones thanks to the discounted MultiSport card.
• uLékaře.cz: Take care of your health with free online prevention and appointments with medical specialists for you and your whole family.
• Healthcare: Take care of your wellbeing with high-quality care for a discounted price with our contractual facility.
• Education and development: Broaden your horizons with our internal T-Univerzity offering a wide range of courses.
• Cafeteria: Choose from a wide range of benefits worth up to 15,000 CZK per year - sports and cultural services, health and beauty, transport allowances, holidays or language courses.
• Day for a good deed: You can devote one working day a year to volunteering in non-profit organizations and thus contribute to social responsibility together with us.
• Psychological consultations: Are you having troubles in your private or professional life? Share your burden anonymously via phone or online.
• Meal contribution: Enjoy a delicious meal with a work-day allowance of 123.90 CZK.
• Sabbatical: Sometimes we all need to switch off. That’s why, after working for 2 years and upon agreement with your manager, you can take 1 month off to do whatever you need.
• Pension allowance: Get ready for your retirement with a pension allowance after 12 months with us.

Everyone is welcome to join us

Our employees feel that they have equal employment and career development opportunities with us, regardless of age, gender and gender identity, sexual orientation, physical and mental ability, nationality, social and ethnic origin, political views, religion and world view. This makes us very happy. We are committed to continuous improvement and to creating a safe working environment for all.

What awaits you

1. Has the job offer captured your interest? Fill in the application form and let us know about yourself.
2. We will assess the information you send us and will get back to you under any circumstances.
3. We will contact the chosen applicants and specify the details.
4. A job interview is a two-way opportunity to get to know each other better.
5. We will inform you about the result of the interview as soon as possible. Successful candidates will receive a job offer.
6. In our company, according to our job architecture, you will perform the position of „Cybersecurity Consultant“.