Senior Cybersecurity Incident Response (IR) Communications Expert (Calgary)

Role Summary

In this global role, you will be a key member of SAP’s cybersecurity incident response communications team, responsible for leading and coordinating communications during significant cybersecurity and data privacy incidents and major vulnerability events (“Security Events”). The IR Communications Team acts as the central point of contact for inquiries by customers and customer-facing teams throughout the lifecycle of the Security Event, ensuring that information shared is accurate, timely, and auditable. Responsibilities

Own and manage communications for major Security Events, including crisis-level events. Coordinate incident notifications, status updates and escalations in line with established response processes and approved communication templates. Serve as the primary communications interface for customer, field and internal stakeholder enquiries related to Security Events. Participate in Security Event triage calls and support decision‑making with clear, concise communication. Ensure all communications are aligned across technical, legal and business stakeholders. Maintain a complete, auditable record of incident communications, decisions and approvals. Support and lead post‑incident reviews, including lessons learned and continuous improvement initiatives. Identify opportunities to enhance Security Event communication, notification and escalation processes. Operate independently while managing multiple priorities in a fast‑paced, global environment. Qualifications

Solid experience in cybersecurity incident response, incident communications, crisis management, program/project management or related roles in a global technology enterprise environment. Demonstrated ability to stay positive and perform effectively under pressure and during fast‑paced, high‑impact events; self‑starter, motivated, organized, and detail‑oriented. Excellent written and verbal communication skills, including the ability to translate complex technical information for executive and non‑technical audiences and draft in a legally compliant manner. Strong stakeholder management capabilities and experience handling escalations; experience collaborating with legal, privacy, regulatory and/or compliance teams would be highly valued. Solid project management and issue resolution skills, including planning, prioritization and tracking risks and issues through resolution. High degree of discretion and professionalism when handling legally sensitive and confidential information, in line with Legal’s guidance. Comfortable working in a virtual, globally distributed organization across multiple time zones. Knowledge of cybersecurity, data protection, regulatory compliance concepts and workflows, including familiarity with ISO27001, SOC2, NIST CSF, EU GDPR, EU DORA. Experience working with cloud‑based service delivery models. Experience with enterprise collaboration or ticketing tools such as Jira, SharePoint, Power BI, Power Automate, ServiceNow (plus). Bachelor’s degree (or higher) in Cybersecurity, Information Security, Law, Communications or related discipline preferred; industry certifications such as CISA, CISSP, CCSP, CISM, IAPP CIPPE (plus). Location

Calgary, AB, Canada (T2P 5E9). Equal Employment Opportunity Statement

Qualified applicants will receive consideration for employment without regard to age, race, religion, national origin, ethnicity, gender, sexual orientation, gender identity or expression, protected veteran status, or disability, in compliance with applicable federal, state, and local legal requirements.

#J-18808-Ljbffr