SCS Global Services

• Design and implement security control architectures and reference implementation patterns aligned with ISO 27001:2022 • Engineer and maintain assigned security controls across domains like Identity, Endpoint, Workloads, and Data • Develop, maintain, and operationalize security standards, baselines, and reference architectures • Perform threat modeling (STRIDE) and risk assessments for new systems • Lead security discovery and integration activities for new and existing environments • Proactively identify security improvement opportunities and execute approved work items • Integrate and optimize security tooling • Partner with Development and Application teams to embed security by design • Support audit and compliance activities related to ISO 27001:2022

• Provide technical support to the program manager and meet program quality control and accreditation requirements. • Conduct both onsite and desk audits according to standards and program requirements following ISO 9001 auditing guidelines. • Complete audits by adhering to agreed timelines, using the most updated program templates. • Support the documentation, communication, and closure of audit findings. • Maintain audit timeline and tracking per assessment project. • Provide high level of customer service throughout the audit process. • Communicate promptly with SCS staff on scheduling of audits and revisions to draft reports. • Deliver certification services in accordance with SCS Corporate and Program Quality requirements. • Support program staff in developing and testing any new program templates, as needed.

• Own the Verifi feature roadmap end to end • Collaborate with lead engineers to refine and clarify user stories and feature requirements ensuring roadmap features are delivered with expected results • Define and maintain a clear product vision and narrative for Verifi that aligns executives, customers, and the engineering team • Shape and sequence major platform initiatives • Publish and socialize a living roadmap • Prioritize features and investments based on measurable customer and business outcomes • Define the success metrics for every major initiative before work begins • Run a continuous discovery practice, including customer interviews, advisory councils, usability testing, in-product analytics, and structured feedback loops with operations, customer success, and partners • Maintain a working view of the audit management, GRC, ESG, and certification tech landscape

• Conduct audits in facilities in accordance with both the audit scheme and SCS protocol • Travel to client sites and perform inspections • Determine compliance, review corrective actions, and submit audit reports for review and certification • Schedule and confirm audit dates with clients • Prepare and send client audit plans according to protocols • Book travel, hotel and transportation according to company policy and submit expense reports • Maintain positive client relationships and respond to client inquiries • Submit complete and accurate audit reports within established timelines • Ensure thorough client records are maintained • Attend trainings to maintain qualification to conduct audits

• Negotiate and review commercial contracts globally • Advise on data protection and privacy laws • Manage trademark and patent matters • Collaborate with cross-functional teams • Update and maintain corporate agreement templates

• Responsible for designing and developing innovative software solutions that meet clients' and business needs • Analyzing user requirements, designing and coding software programs or systems • Testing and debugging software solutions • Documenting work • Assisting in code reviews and technology standards input • Collaborating with software development teams through the software development process • Reporting directly to the Senior Software Development Manager

• Independently, or in a team, conduct a robust and detailed verification of our customers to check for compliance against relevant ISO standards • Perform verification in an industrial setting, at companies such as blast furnaces, iron, steel and aluminium foundries and processors, chemical plants, pulp mills, printers • Generate high-quality verification reports, ensuring accurate, detailed, and consistent descriptions of evidence and findings • Be proficient in program and verification requirements, ensuring a pragmatic approach to a wide range of verification circumstances while maintaining the integrity of the program • Communicate the requirements of ISO standards to clients clearly, effectively, and concisely • Communicate regularly with clients ensuring that Corrective Action Requests are closed within appropriate deadlines • Communicate promptly with SCS staff on the scheduling of verifications and revisions to draft reports, if needed

• Conduct robust and detailed Chain of Custody audits • Perform audits in industrial and urban settings, at companies such as sawmills, door manufacturers, veneer manufacturers, paper distributors, printers, etc. • Generate high-quality audit reports, ensuring accurate, detailed, and consistent descriptions of evidence and findings • Independently, or with teams, assess management practices of organizations related to applicable certification standards • Be proficient in program and certification requirements, ensuring a pragmatic approach to a wide range of auditing circumstances while maintaining the integrity of the certification scheme (e.g. FSC, PEFC, SFI, etc.) • Communicate Chain of Custody requirements to clients clearly, effectively, and concisely • Communicate regularly with clients ensuring that Corrective Action Requests are closed within appropriate deadlines • Communicate promptly with SCS staff on the scheduling of audits and revisions to draft reports, if needed

• Generate revenue for SCS Global Services Europe by selling existing programs and services to current and prospective clients • Generate new business through sales leads, promoting assigned services, preparing proposals, and closing sales • Work directly with the European team for various programs and countries • Implement sales strategy and initiatives to generate qualified leads • Collaborate with the Marketing Manager and the sales team on event/activities coordination

• Coordinate and confirm audit dates with clients • Prepare and send client audit plans according to protocols • Book travel, hotel, and transportation according to company policy, and submit expense reports • Conduct audits using applicable checklists, forms, and tools • Maintain positive client relationships and respond to all client inquiries and concerns • Submit complete and accurate audit reports within established timelines • Ensure thorough client records are maintained • Attend trainings to maintain qualification to conduct audits; maintain training records • Maintain up to date knowledge of applicable regulations and standards