ISCC – the International Sustainability and Carbon Certification

DevOps Engineer

• Share ownership of our cloud infrastructure (AWS and GCP) and ensure the reliable operation of our platforms and services
• Design, implement, and continuously improve CI/CD pipelines and deployment workflows
• Manage, maintain, and optimise containerised applications and environments using Docker
• Develop, maintain, refactor, and review production code for backend APIs, automation workflows, and data processing pipelines, primarily in Python
• Ensure the stability, performance, scalability, and security of our platforms and backend services
• Contribute to strengthening our security architecture and support compliance with ISO-related requirements
• Identify operational risks, troubleshoot incidents, and proactively improve system reliability and resilience
• Collaborate closely with our GIS and software development teams to integrate geospatial systems and applications
• Create and maintain technical documentation and contribute to the standardisation of infrastructure and deployment processes
• Actively contribute to cross-functional projects and continuous improvement initiatives

Senior DevOps Engineer – Backend Development

Data Engineer

• Analyse and document the current FileMaker database, including data structures, scripts, layouts, integrations, and operational dependencies.
• Develop a thorough understanding of business processes currently implemented within the FileMaker environment.
• Identify opportunities to modularise the existing monolithic solution and define target architectures for moving functionality to external or best-of-breed systems.
• Design and execute a phased approach for migrating or decoupling features from FileMaker while minimising disruption to business operations.
• Review, refactor, and where necessary redesign the existing data model to improve consistency, performance, and long-term maintainability.
• Prepare the data structure for seamless integration with other systems, including the definition of clear data ownership, interfaces, and integration patterns (e.g. APIs, data synchronisation, or event-based integration).
• Implement and maintain integrations between FileMaker and external systems, ensuring robustness, security, and data accuracy.
• Collaborate with business stakeholders, IT, and external vendors to align technical changes with business priorities and future system strategies.
• Establish documentation, standards, and best practices for data modelling, integrations, and ongoing system evolution.
• Support knowledge transfer and ensure that architectural decisions and system behaviour are transparent and maintainable for future teams.

Data Engineer – FileMaker

General

• Plan and prepare on-site, remote and desktop Integrity Assessments, including associated travel activities, in coordination with the ISCC office in Cologne
• Prepare and coordinate assessment schedules and audit plans for Integrity Assessments
• Conduct ISCC Integrity Assessments of certification bodies with a regional focus on North and Latin America, in accordance with ISCC standards and procedures
• Conduct desktop reviews, on-site and remote Certification Body (CB) office assessments, with a focus on Quality Management Systems (QMS), ISO/IEC 17065-related requirements and compliance with ISCC requirements for certification bodies
• Conduct witness assessments of auditors to evaluate audit performance, auditor competence and compliance with ISCC requirements
• Evaluate audit evidence, identify findings and follow up on non-conformities and corrective actions as applicable
• Compile clear, objective and evidence-based Integrity Assessment Reports and CB Applicant Assessment Reports
• Contribute to the continuous development of the ISCC System and the ISCC Integrity Program

Integrity Assessor – Certification Body

Integrity Assessor – North and Latin America

Procurement

• Owning and continuously improving end-to-end procurement and vendor management processes across the group
• Managing and coordinating procurement activities including supplier sourcing, onboarding, purchasing, and vendor management
• Requesting, evaluating, and comparing quotations, proposals, and supplier offers
• Negotiating commercial terms, pricing, and procurement conditions with suppliers and service providers
• Coordinating procurement processes for software, IT services, licenses, equipment, and operational services
• Acting as the main point of contact for procurement-related supplier matters
• Supporting contract coordination and collaborating with Legal on supplier agreements and procurement documentation
• Identifying, assessing, and supporting mitigation of procurement, supplier, and operational risks
• Ensuring compliance with internal procurement policies, approval workflows, and documentation standards
• Maintaining procurement records, supplier documentation, and procurement-related reporting
• Monitoring supplier performance, contractual obligations, renewals, and procurement activities
• Developing, standardizing, and maintaining procurement templates, guidelines, and operational procedures
• Representing Procurement in cross-functional collaboration with Finance, Legal, IT, Office Management, and operational teams
• Supporting audits, compliance activities, and procurement-related due diligence processes

Procurement Expert

General Counsel

• Acting as the first internal point of contact for legal matters, providing practical and business-oriented legal advice
• Identifying, assessing, and mitigating legal, contractual, and operational risks across the organization
• Reviewing, drafting, negotiating, and managing NDAs, T&Cs, supplier contracts, MoUs, and other legal documents
• Managing and maintaining contract documentation, templates, and the central contract repository
• Supporting governance, risk & compliance (GRC) processes and contributing to the continuous development of legal frameworks and policies
• Providing legal support in compliance matters, internal investigations, and remediation activities
• Advising on data protection and privacy topics in close collaboration with the DPO/CISO
• Coordinating and managing external legal advisors
• Supporting legal aspects of HR-related matters and internal policies
• Developing and implementing standardized legal processes, templates, and documentation standards across the organization
• Ensuring consistency, transparency, and legal quality across all contractual documentation
• Supporting trademark and insurance-related legal matters where required

Legal Counsel

Manager

• Managing and continuously improving the Information Security Management System (ISMS) in line with ISO/IEC 27001 requirements
• Ensuring the effective execution and maintenance of the PDCA cycle within the ISMS framework
• Preparing, coordinating, and documenting internal and external ISMS meetings, audits, and management reviews
• Collecting, structuring, and maintaining ISMS-related evidence and archiving
• Collaborating closely with IT teams to ensure implementation and effectiveness of security controls
• Advising business stakeholders on the implementation of information security controls, with a focus on cloud services and external IT providers
• Securing certification readiness and ensuring ongoing compliance with relevant information security standards and requirements
• Working closely with the CISO and supporting the DPO (Data Protection) and contributing to the further development of the information security function

ISMS Manager

• Acting as the first internal point of contact for legal matters, providing practical and business-oriented legal advice
• Identifying, assessing, and mitigating legal, contractual, and operational risks across the organization
• Reviewing, drafting, negotiating, and managing NDAs, T&Cs, supplier contracts, MoUs, and other legal documents, including full contract lifecycle management
• Managing and maintaining contract documentation, templates, and the central contract repository
• Supporting governance, risk & compliance (GRC) processes and contributing to the continuous development of legal frameworks and policies
• Providing legal support in compliance matters, internal investigations, and remediation activities
• Advising on data protection and privacy topics in close collaboration with the DPO/CISO
• Coordinating and managing external legal advisors, including selection, communication, and cost control
• Supporting legal aspects of HR-related matters and internal policies
• Developing and implementing standardized legal processes, templates, and documentation standards across the organization
• Ensuring consistency, transparency, and legal quality across all contractual documentation
• Supporting trademark and insurance-related legal matters where required