About this role
Imagine your career taking you to the depths of innovation and the heights of impact. Our people enable continuous progress. Their commitment, collective expertise, and unique capabilities are the engine room behind SBM Offshore’s True. Blue. Transition. - shaping the future of energy, and beyond.
About Us:
SBM Offshore is a global leader in deepwater ocean infrastructure, delivering floating production solutions across the full asset lifecycle—from design and construction to installation and operation. Supported by a global team of more than 8,000 professionals, the Company operates a long-term, asset-backed business model that delivers high-availability assets and predictable cash flows. SBM Offshore combines engineering expertise, operational reliability, and selective innovation to support safe, efficient, and lower-carbon energy production, while extending its capabilities into new opportunities across the blue economy.
Purpose
As a Cloud Security Compliance Lead you will be responsible for establishing, implementing, and continuously improving SBM’s cloud security governance and compliance processes and you will ensure that cloud deployments comply with relevant regulatory requirements, SBM security policies and standards and is aligned with the industry security practices and benchmarks.
Responsibilities
- Lead and coordinate SBM’s Cloud Security Governance Program, technical assessment, design security controls, and conduct configuration reviews to maintain a strong security posture, in alignment with ISO 27001, NIST, and GDPR.
- Define and maintain security requirements for Infrastructure-as-Code (IaC) and Policy-as-Code, to ensure compliant cloud deployments and continuous alignment with SBM security policies and standards.
- Conduct technical assessments and configuration reviews of existing cloud environments to identify vulnerabilities, misconfigurations, and control gaps, and drive remediation of identified security risks.
- Collaborate with Enterprise architecture and IT Operations teams for the migration of legacy infrastructure to cloud environments, ensuring security and data protection are embedded by design.
- Catalog, and maintain visibility of cloud assets across cloud environments, ensuring comprehensive oversight of the resources and configurations.
- Deploy and manage cloud security tools and integrate security controls into IaC, CI/CD pipelines, and automated cloud deployment processes to identify and prevent misconfigurations.
- Automate cloud security policy enforcement, remediation workflows, and infrastructure compliance checks.
- Review third-party SaaS cloud environments, platforms, and services to identify misconfigurations and ensure compliance with SBM standards.
- Correlate cloud security findings with active threat indicators. Monitor for signs of identity-based threats, impersonation, and data exposure across public and private sources to support proactive threat detection.
- Design and maintain dashboards to visualize cloud security posture, risk trends, and remediation metrics. Ensure reporting supports strategic decision-making and aligns with stakeholder needs.
- Manage Cloud Access Security Broker (CASB) solutions for cloud applications, to monitor cloud application usage and enforce access controls. Integrate with data security tools to enhance visibility into sanctioned and unsanctioned services and mitigate shadow IT risks
Education
- Bachelor's degree or higher in computer science, information technology, cybersecurity, or a related field is required.
- Relevant security certifications such as Microsoft Certified, Azure Security Engineer, Information Security Administrator Associate, CISSP, CCSP or CCSK are preferred.
- Proficiency in English is essential for effective communication with team members, stakeholders, and external vendors.
Experience
- Minimum of 7 years of experience in Cloud security, compliance, or a related field, with at least 3 years in a leadership or supervisory role.
- Deep understanding of cloud security frameworks and compliance standards such as CSA, ISO 27017/18, CIS and NIST 800-53.
- Extensive experience with Microsoft Azure, including CSPM, Azure Policy, Azure AD, IAM, RBAC, Conditional Access, and Privileged Identity Management (PIM) and implementation of cloud security controls and guardrails.
- Strong technical background in risk management, vulnerability assessments, and security audits.
- Experience with Cloud governance and compliance processes, including the development and enforcement of Cloud security policies and procedures.
- Knowledge of security standards and best practices, with experience in managing security controls and conducting compliance assessments.
- Proven ability to lead compliance initiatives, work with cross-functional teams, and communicate effectively with stakeholders at all levels.
- Excellent analytical skills with the ability to interpret complex regulations and translate them into actionable compliance strategies.
Functional Competencies
Governance, Risk and Control Analytics and reporting IT Tools and application Business Partnering Management of change application Risk Management Systems and Technology Technical Data Management
GENERAL INFORMATION
SBM Offshore N.V. is a listed holding company that is headquartered in Amsterdam. It holds direct and indirect interests in other companies that collectively with SBM Offshore N.V. form the SBM Offshore Group (“the Company”). For further information, please visit our website at www.sbmoffshore.com. The companies in which SBM Offshore N.V., directly and indirectly, owns investments are separate entities.
SBM Offshore is proud to be an Equal Employment Opportunity and Affirmative Action employer. SBM Offshore does not discriminate on the basis of race, religion, color, sex, gender identity, sexual orientation, age, non-disqualifying physical or mental disability, national origin, veteran status, or any other basis covered by appropriate law. All employment is decided on the basis of qualifications, merit, and business need.