Principal Cloud Compliance Engineer I Brisbane, Adelaide, Perth
BHP
About BHP
At BHP we support our people to grow, learn, develop their skills and reach their potential. With a global portfolio of operations, we offer a diverse and inclusive environment with extraordinary career opportunities. Our strategy is to focus on creating a safe work environment where our employees feel strongly connected to our values and objectives, and where the capability of our people is key to our success.
Come and be a part of this success.
About the Role
The Principal Cloud Compliance Engineer role will be part of the BHP Cloud and Infrastructure, Cloud Services team. The focus of this role is to provide subject matter expertise on cybersecurity standards and service management requirements for the delivery of new or maintaining existing cloud platform capabilities. The candidate will develop and publish cloud platform designs and guidelines for BHPs Cloud Platforms and Cloud Services to deliver compliance to cybersecurity standards, meeting service management requirements, enabling sustainability and resiliency at scale.
- Development of the cloud platform security design framework, ensuring key controls are in place
- Development and execution of the alignment of the Cloud Platforms to the infrastructure, application and data security program, and associated performance metrics
- Review design documents, identify and communicate potential cybersecurity, operations and service management gaps
- Lead the implementation of secure cloud platform design patterns, towards enabling well understood, sustainable and repeatable infrastructure
- Drive the implementation of the secure and sustainable cloud design patterns
- Apply cybersecurity and privacy principles to cloud platform and services design (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
- Lead risk identification efforts and communication of the risks and mitigating controls to stakeholders to manage cybersecurity risks within the organisation
- Provide designs and assistance towards security services including platform, application security scans, code reviews to ensure secure infrastructure as code development, DevSecOps support, and cloud asset vulnerability management
- Develop Cybersecurity Cloud design patterns, reference architectures and standards using BHP architecture templates and modelling tools.
About You
As the successful candidate you will possess the following:
- 10 years of relevant experience in the industry (Mining, Resources, Banking or Telco), domain areas (Secure-by-Design Application or Platform Development, DevSecOps, Application Security, Cloud Security).
- STEM Degree in Computer Science, Technology, Engineering, or Management Information Systems
- Strong knowledge of AWS and Azure security services and features
- Experience with security and compliance monitoring tools and frameworks
- Familiarity with security best practices, such as IAM, encryption, and network security
- Extensive experience delivering cloud platform using infrastructure as code in a DevSecOps framework
- Understanding of industry regulatory and compliance requirements like FedRAMP, PCI-DSS, NIST, HIPAA
- Expert level in configuring and utilizing computer protection components (e.g., hardware firewalls, servers, routers, as appropriate) in general but also in particular for applications, O365 and Azure/AWS cloud environments
- Deep understanding of API-driven deployments and microservice design
About Our Process
At BHP, we are committed to employing individuals who align with the BHP Charter Values and meet the requirements of the role. As part of the recruitment process, there are a number of checks which may be conducted to demonstrate applicants suitability for a role including police / criminal background checks, medical, drug and alcohol testing, due diligence checks, right to work checks, and/or reference checks.
Supporting a Diverse Workforce
The size and magnitude of our business not only provides significant opportunity for professional development, but also attractive salary packages with performance-based bonuses and a unique BHP employee share program.
At BHP, we recognise that we are strengthened by diversity. We are committed to providing a work environment in which everyone is included, treated fairly and with respect. We are an Equal Opportunity employer and we encourage applications from women and Indigenous people. We know there are many aspects of our employees' lives that are important, and work is only one of these, so we offer benefits to enable your work to fit with your life. These benefits include flexible working options, a generous paid parental leave policy, other extended leave entitlements and parent rooms.