ICT Security and Operational Resilience Officer 296 views0 applications

Under the leadership of the Information Security and Compliance Officer, the incumbent will assume the following responsibilities :

• Evaluate existing physical security and safety systems to determine the potential risks and identify possible ICT based integrated mitigation measures
• Perform evaluations of physical security systems and provide recommendations
• Assess and report on regional mission compliance with ICT policies, procedures, standards and guidelines
• Conduct security assessments and devise through reports with findings and recommendations
• Provide training on Integrated physical security systems
• Evaluate physical security documentation and operational activities to ensure they meet requirements
• Ensure that all required and applicable ICT-based security controls have been properly identified, implemented and maintained as intended
• Draft physical ICT risk assessment reports based on findings from the assessment activities
• Provide ICT-based integrated security solution services including physical security, static security, personnel security, facilities security, operations security, and integrated fire safety systems, as well as military grade surveillance and warning systems.
• Manage assigned client projects ensuring proper information flow, leveled expectations and on time deliverables
• Perform on-site Quality Control/Compliance assessments using project management tools and methodology
• Provide client support via conference calls, on-site meetings, and electronic communications
• Participate to the ICT Risk assessments, perform control assessments and risk analysis
• Participate to the review of information security policies, procedures, standards and guidelines
• Perform vulnerability assessments and provide reports with findings and recommendations; monitor compliance to the assessments findings.
• Liaise with regional missions to assist and ensure compliance to the organization’s information security policies and standards
• Participate in the organization of regional workshops and conferences on Information and Physical Security
• Provide assistance on the implementation and maintenance of security tools
• Participate to the delivery of security awareness activities

Education :

• Master’s Degree or equivalent in Computer Sciences, Information Security, Physical Security, or a related area.
• A Bachelor’s degree or equivalent with two additional years of qualifying experience may be accepted in lieu of the advanced university degree.

Experience :

• A minimum of 2 years of relevant experience in physical or information security is required
• A minimum of 1 year of experience in performing vulnerability assessments, security analysis, and/or developing mitigation strategies is required
• Professional experience at the international level in the public/private sector is desirable
• Experience with ISO 27000 series of security standards and best-practices is an asset

Language Requirements :

• Fluency in English is required
• Knowledge of a second UN language is highly desirable.

Certifications :

• CompTia Security+CCNA, COBIT, CISM, CRISC, SSCP, CSSLP, ITIL, PRINCE2 or GIAC are desirable