Senior IT Security Specialist (S)

Imagine your career taking you to the depths of innovation and the heights of impact.  Our people enable continuous progress. Their commitment, collective expertise, and unique capabilities are the engine room behind SBM Offshore’s True. Blue. Transition. - shaping the future of energy, and beyond.

About Us:
SBM Offshore is the world’s deepwater ocean-infrastructure expert. Our work is already resulting in cleaner, more efficient energy production. True. Blue. Transition. is our promise to enable that into the future while at the same time using our expertise to support new and existing markets in the blue economy. It starts with Advancing our Core: continuing to advance the decarbonization of traditional energy production. While Pioneering More: helping to enable the energy transition and using our unique capabilities in ocean infrastructure to support more industries to grow sustainably.  Sharing our experience for a better blue tomorrow.

Purpose

• As a Senior IT Security Specialist, you develop and implement advanced security strategies to protect the organization's information systems. Conduct risk assessments, manage security incidents, and ensure compliance with security standards. Collaborate with stakeholders to enhance overall IT security posture.

Responsibilities

• Develop and Implement Security Strategies: Lead the development and implementation of IT security strategies and policies to protect the organization's information systems and data assets.
• Conduct Security Assessments: Perform regular security assessments, vulnerability testing, and risk analysis to identify potential threats and weaknesses in the IT infrastructure.
• Incident Response Management: Develop and manage incident response plans and procedures, ensuring timely and effective resolution of security incidents and breaches.
• Compliance and Regulatory Adherence: Ensure compliance with relevant security standards, laws, and regulations such as GDPR, HIPAA, and ISO 27001. Regularly review and update security policies to reflect changes in regulatory requirements.
• Security Awareness Training: Design and conduct security awareness training programs for employees to promote best practices and enhance the organization's overall security posture.
• Collaboration with IT and Business Units: Work closely with IT teams, business units, and senior management to integrate security measures into all aspects of IT operations and business processes.
• Security Architecture Design: Oversee the design and implementation of secure network architectures, including firewalls, intrusion detection systems, and other security technologies.
• Third-Party Risk Management: Evaluate and manage the security risks associated with third-party vendors and partners, ensuring they comply with the organization's security policies and standards.
• Monitor and Analyze Security Alerts: Continuously monitor security alerts and logs, analyze potential security events, and take appropriate actions to mitigate threats.
• Security Reporting: Prepare detailed security reports and dashboards for senior management, highlighting key security metrics, incidents, and risk mitigation activities.
• Project Leadership: Lead and participate in security-related projects, ensuring they are delivered on time, within scope, and in alignment with business objectives.
• Mentorship and Development: Mentor and guide junior security team members, providing technical expertise and fostering a culture of continuous improvement and learning.

Education

• Bachelor's Degree: A bachelor's degree in computer science, information technology, cybersecurity, or a related field is required.
• Certifications: Relevant certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or CEH (Certified Ethical Hacker) are preferred.
• Master's Degree: A master’s degree in cybersecurity, information technology, or a related field is preferred but not mandatory.
• Language Proficiency: Proficiency in English is essential for effective communication with team members, stakeholders, and external vendors.

Experience

• Minimum Experience: At least 7 years of experience in IT security, information security management, or a related field, with at least 3 years in a leadership or managerial role.
• Technical Skills: Proven experience in managing and overseeing IT security operations, including network security, incident response, vulnerability management, and security operations center (SOC) activities.
• Knowledge Areas:
• Strong understanding of security frameworks and standards such as ISO 27001, NIST, an