South Pole is an energetic, global company offering comprehensive sustainability solutions and services. With offices spanning all continents across the globe, we strive to create a sustainable society and economy that positively impacts our climate, ecosystems and developing communities. With our solutions, we inspire and enable our customers to create value from sustainability-related activities.

Our Corporate Functions team is the “enablement engine” of South Pole. Behind the scenes, we provide the business with world-class solutions and best practices that sustain business growth and success. We cover key areas such as Finance, HR, Office Management, Legal, IT, Operations, etc. If you are a smart, ambitious and dynamic professional with a strong passion to make a real difference in the fight against climate change, the below position may be right for you!

Job summary:

We are looking for a highly skilled IT - Senior Security Officer to join our IT department and help ensure the security of our digital assets, infrastructure and intellectual property. Implementing and maintaining ISO/IEC 27001 certification will be the main goal. 

Main tasks & responsibilities:

• Develop and implement a comprehensive information security management system (ISMS) based on the ISO/IEC 27001 standard

• Review and analyze the organisations current security practices to identify any gaps or non-compliance with the ISO/IEC 27001

• Act as Supplier information security representative

• Manage the organisations security incident response plan

• Respond to security breaches and other cyber-attacks

• Investigate and resolve security violations

• Keep abreast of the latest security threats and vulnerabilities

• Educate employees on information security best practices and ensure compliance with organisational security policies

• Manage access to the South Pole systems and data

• Collaborate with other IT and business units to ensure the overall security of the organization in a Cloud environment

• Provide guidance on security-related matters and assist with any security-related regulatory compliance

• Conduct regular internal audits to ensure compliance with the ISMS and identify areas for improvement

• Work with other teams within the organization to ensure that all policies, procedures, and processes align with the ISMS and the ISO/IEC 27001 standard in a Cloud environment

• Manage and maintain the necessary documentation to demonstrate compliance with the standard, including risk assessments, security controls, incident management procedures, and more

• Communicate the ISMS and the ISO/IEC 27001 standard to the employees, customers and third party and ensure compliance

• Participate in external audits to validate the organization's compliance with the standard and certification process

• Continuously review and update the ISMS and security controls based on internal and external threats and vulnerabilities

• Coordinate any corrective actions and follow-up with the relevant parties to ensure they are completed in a timely manner

• Implement and maintain security protocols, such as Google Cloud Identity and Access Management (IAM), Cloud Key Management Service (KMS), Cloud Security Command Center (CSCC), Cloud Data Loss Prevention (DLP)
  

Requirements:

Essential -

• Extensive experience in information security

• Experience implementing and managing security controls in a Google Cloud environment

• Knowledge of Google Cloud services, such as Google Compute Engine, Google Kubernetes Engine, and Google Cloud Storage

• Strong understanding of network security in a cloud environment

• Familiarity with cloud-native security tools, such as Stackdriver and Cloud Security Scanner

• Experience with incident management and response

• Knowledge of ISO/IEC 27001 and experience with implementation of an ISMS

• Certifications in information security, such as CEH, CISSP, and CISM, as well as Google Cloud certifications like GCP Professional Cloud Security Engineer, GCP Professional Cloud Architect

• Strong analytical and problem-solving skills

Desirable -

• Programming skills 

• Experience implementing and maintaining security controls in a Google Cloud environment is beneficial
  

What we offer:

At South Pole, we care about our employees as much as we care about the planet. South Pole is not just an employer, we are a Team. South Pole does not just offer people a job, we offer you a career. By joining our team, you will find strong purpose and deep meaning in everything you do. You will have the chance to make a real difference for our clients and for the planet, working alongside a passionate team of like-minded colleagues, while building your knowledge/skills and developing your career in a fun, dynamic, international and fast-growing organisation. 

We’re a planet of 7.5 billion unique and different people. We all have a contribution to make and South Pole is proud to be an Equal Opportunity Employer. We do not discriminate on the basis of race, religion, colour, sex, gender identity, sexual orientation, age, national origin, marital status or disability. Our recruitment is decided on the basis of qualifications, merit and business need.