Working Student IT Security Governance & Application Security

To start as soon as possible, part time, fixed term

As part of the IT/OT Security team, you will support the improvement and operationalization of security governance processes for IT applications and platform services. In this role, you will gain hands-on experience in application security governance, compliance monitoring, risk management, security documentation, vulnerability coordination and security reporting within a professional and international environment. You will support the team in improving transparency, documentation quality and operational security processes across IT applications and services.

About the role

As a Working Student, you will support IT Security Governance and Application Security activities in day-to-day operations.

• Support the coordination, documentation, and follow-up of internal security assessments for IT applications and platform services
• Assist in tracking security measures, open findings, remediation actions, evidence requests and compliance status
• Contribute to the preparation and maintenance of security documentation, process descriptions, checklists and guidance materials
• Support security reporting and KPI tracking, including application security status, remediation progress and operational security visibility
• Assist vulnerability and risk management activities by helping structure findings, ownership, due dates and mitigation actions
• Support preparation activities for internal audits, compliance reviews and regulatory-related security topics
• Collaborate with product teams, platform teams and internal security stakeholders while gaining practical experience in cybersecurity governance, application security, risk management and compliance processes

• Currently enrolled in a Bachelor’s degree program in Information Security, Cybersecurity, Computer Science, Business Informatics, Information Management, Business Administration with an IT focus, or a comparable field of study
• Strong interest in cybersecurity governance, application security, risk management, compliance, and IT security processes
• Basic understanding of information security standards and frameworks (e.g., ISO 27001) is a plus
• Strong analytical and problem-solving skills, with the ability to structure and communicate complex topics clearly
• Excellent communication skills and the ability to collaborate with both technical and non-technical stakeholders
• Ability to work independently, manage assigned tasks reliably, and proactively follow up on open topics
• Strong documentation skills with a high level of attention to detail
• Proficient in Microsoft Office, especially Excel, PowerPoint and Word
• Experience with tools such as Confluence, Jira, SharePoint, ServiceNow, or reporting tools is a plus
• Interest in vulnerability management, security monitoring, or cloud/platform security is a plus
• Good written and spoken English skills; German and additional languages are a plus
• Availability for at least 12 months, with a preference for a longer-term commitment

We aim to make your time with us as rewarding as possible by fostering a supportive and inclusive environment. Alongside competitive pay and opportunities for growth, we care about your well-being and the balance between work and life. Our benefits include, * Flexible and hybrid working, enabling a balance between remote work and in-office collaboration

• Opportunity to apply your academic knowledge in real-world projects
• Access to fitness centres or membership discounts to keep you active and energised
• Employee Assistance Programme offering confidential guidance and support
• Employer-subsidised canteen with fresh, high-quality meals

We look forward to meeting you. Of course, you can find us on LinkedIn, Instagram, Facebook, YouTube and Xing, too.

We value diversity and therefore welcome all applications - regardless of gender, disability, nationality, ethnic and social origin, religion/belief, age, sexual orientation, and identity. #inclusionmatters

RWE Renewables Europe & Australia is a leading player in the renewable energy sector with over 30 years of experience. We currently operate onshore wind farms, solar plants and battery storage systems with around 5 gigawatts of installed capacity in our core markets in Europe and Australia.

Supported by a workforce of around 2,000 employees, we continue to expand our renewable generation capacity in a value-accretive way. Our expertise spans the entire project lifecycle: we develop, plan, finance, build and operate our projects. With a strong project pipeline, we are working with communities to create a long-term value for everyone, today and for the future.