Cybersecurity Compliance Lead

Imagine your career taking you to the depths of innovation and the heights of impact. Our people enable continuous progress. Their commitment, collective expertise, and unique capabilities are the engine room behind SBM Offshore’s True. Blue. Transition. - shaping the future of energy, and beyond.

About Us:
SBM Offshore is a global leader in deepwater ocean infrastructure, delivering floating production solutions across the full asset lifecycle—from design and construction to installation and operation. Supported by a global team of more than 8,000 professionals, the Company operates a long-term, asset-backed business model that delivers high-availability assets and predictable cash flows. SBM Offshore combines engineering expertise, operational reliability, and selective innovation to support safe, efficient, and lower-carbon energy production, while extending its capabilities into new opportunities across the blue economy.

• Location: Amsterdam (Schiphol), NL, 118CL

Cybersecurity Compliance Lead

Purpose

• As a Cybersecurity Compliance Lead, you lead and manage the organization’s cybersecurity compliance efforts, ensuring adherence to regulatory requirements and industry standards. Develop and enforce policies, conduct audits, and collaborate with teams to mitigate risks. Continuously monitor and improve cybersecurity practices to protect the organization from threats and ensure compliance.

Responsibilities

• Lead cybersecurity compliance initiatives: Oversee the development and implementation of cybersecurity compliance programs, ensuring adherence to regulatory requirements and industry standards.
• Conduct risk assessments: Perform regular risk assessments to identify potential compliance gaps and vulnerabilities, developing strategies to mitigate risks.
• Develop and maintain policies: Create and update cybersecurity policies and procedures to ensure compliance with legal and regulatory requirements.
• Coordinate with stakeholders: Work closely with internal and external stakeholders to ensure that all cybersecurity measures align with compliance objectives.
• Audit and monitor systems: Conduct regular audits and monitoring of IT systems to ensure compliance with cybersecurity standards and identify areas for improvement.
• Provide training and awareness: Develop and deliver training programs to educate employees on cybersecurity compliance and best practices.
• Manage compliance reporting: Prepare and present reports on cybersecurity compliance status to senior management, highlighting key risks and mitigation efforts.
• Respond to incidents: Lead the response to cybersecurity incidents, ensuring that all actions comply with regulatory requirements and are properly documented.

Education

• Bachelor's degree in computer science, information technology, cybersecurity, or a related field is required.
• Certifications such as CISSP (Certified Information Systems Security Professional), CISA (Certified Information Systems Auditor), or CISM (Certified Information Security Manager) are preferred.
• Proficiency in English is essential for effective communication with team members, stakeholders, and external auditors.

Experience

• Minimum of 7 years of experience in IT security, compliance, or a related field, with at least 3 years in a leadership or supervisory role.
• Proven experience in developing and implementing cybersecurity compliance frameworks, ensuring adherence to industry regulations (e.g., GDPR, ISO/IEC 27001, NIST).
• Strong technical background in risk management, vulnerability assessments, and security audits.
• Experience with IT governance and compliance processes, including the development and enforcement of security policies and procedures.
• Knowledge of security standards and best practices, with experience in managing security controls and conducting compliance assessments.
• Proven ability to lead compliance initiatives, work with cross-functional teams, and communicate effectively with stakeholders at all levels.
• Excellent analytical skills with the ability to interpret complex regulations and translate them into actionable compliance strategies.

Functional Competencies

• Governance, Risk and Control
• Analytics and reporting
• IT Tools and application
• Business Partnering
• Management of change application
• Risk Management
• Systems and Technology
• Technical Data Management