Working Student Compliance Engineering - Cloud & Platform Engineering

Join the Application Security team as a Working Student in Compliance Engineering, pioneering the emerging field where law meets code. You'll build bridges between legal compliance and technical automation, designing agentic AI workflows to automate compliance processes for autonomous driving operations and translating complex regulatory requirements into enforceable technical controls.

What you'll do

• Design and deploy agentic AI workflows to automate compliance processes for autonomous driving operations (e.g., via AWS Bedrock AgentCore).
• Implement automation solutions that translate complex regulatory requirements (e.g., EU AI Act, NIS2, CRA, GDPR, etc.) into enforceable technical controls.
• Work hands-on with compliance automation platforms (e.g., Vanta) and cloud security posture management tools (e.g., Wiz) to monitor and maintain our compliance posture.
• Collaborate with cross-functional teams — including security engineers, data scientists, autonomous driving safety experts, legal counsel, risk management, and audit functions — to identify and address compliance gaps.
• Research and map applicable legal frameworks and international standards (e.g., ISO 27001, ISO 21434, SOTIF, type-approval regulations, etc.) to our technical infrastructure.
• Contribute to the development of internal tooling and CI/CD pipelines that embed compliance checks directly into software delivery processes.

What you'll need

• Currently enrolled in a full-time Bachelor's or Master's program, enrolled for at least one year.
• English language proficiency at C1 CEFR level.
• Genuine interdisciplinary mindset: from legal background with hands-on interest in AI and technology, or technical background with curiosity about law and regulation.
• Proficiency in at least one programming or data manipulation language or demonstrated willingness to learn quickly.
• Foundational knowledge of — or eagerness to develop skills in — cloud computing (primarily AWS) and/or cybersecurity principles.
• Understanding of or willingness to learn CI/CD concepts and modern software development practices.

Nice to have

• Experience in autonomous driving, automotive, software development, cloud computing, or compliance.
• Familiarity with EU AI Act, NIS2 Directive, Cyber Resilience Act, GDPR, or similar regulations.
• Exposure to ISO 27001, ISO 21434, NIST, ENISA frameworks, or regulatory environments outside Germany.

What they offer

• Competitive salary (including bonus).
• Hybrid work setup with flexibility to work from home or offices.
• Fully subsidized Deutschlandticket for commuting throughout Germany and MOIA ride discounts.
• Learning environment with continuous development, trainings, coaching, and conferences.
• 30 vacation days, sabbatical, and unpaid leave options.
• Mental health support and dog-friendly offices.