Information and Communications Technology (ICT) Officer (Information Security Officer) (P)

Introduction

Established in 1951, IOM is a Related Organization of the United Nations and the leading UN agency in the field of migration. Working closely with governmental, intergovernmental and non-governmental partners, IOM promotes humane and orderly migration for the benefit of all. It saves lives and protects people on the move, drives solutions to displacement, and facilitates pathways for regular migration, while providing services and advice to governments and migrants. 

IOM is committed to fostering a respectful, inclusive and supportive workplace where all employees can thrive professionally and feel valued. By creating such an environment, IOM aims to better harness the full potential of migration and strengthen its support to people on the move.

IOM invites candidates from diverse backgrounds to apply and provides reasonable accommodation throughout the recruitment process when required. Learn more about IOM’s workplace culture at IOM workplace culture | International Organization for Migration

Internal and external candidates will be considered for this vacancy. 

For the purposes of this vacancy, internal candidates are defined as staff members holding a regular, fixed-term or short-term graded or ungraded contract, including Junior Professional Officers (JPOs), UN Volunteers with at least twelve (12) months of continuous service in IOM, staff on Special Leave Without Pay (SLWOP), and staff members on secondment/loan released by the Organization, unless otherwise specified in their contract. Staff members holding a regular, fixed-term or short-term graded contract will not retain their contract type if appointed to an ungraded position.

Organizational Context and Scope

Under the overall and direct supervison of the Senior Information Security Officer (SISO), the

Information Security Officer ensures that IT systems, services, and data in the IOM-ICT ecosystem

meet NIST cybersecurity standards. Key responsibilities include developing and improving information

and data security policies and controls, ensuring regulatory compliance, and collaborating with business

units to maintain security requirements throughout system lifecycles. The role requires collaboration,

governance and technical leadership, and translating security needs into solutions, with frequent

support of other teams.

This position reports to the Senior Information Security Officer within the Information Security &

Risk Management Unit. All IOM staff must perform duties according to job descriptions, delegated

authorities, UN and IOM rules, and uphold IOM’s values of professionalism, integrity, and respect for diversity.

Required Qualifications and Experience

Education

• Master’s degree in Computer Science, Information Technology, Cybersecurity or a related field from an accredited academic institution with two years of relevant experience; or, 
• University degree in the above fields with four years of relevant experience. 
  Essential: CompTIA Security+, CISSP, CISM, CISA, or equivalent information security certifications. 
  Desirable: NIST Cybersecurity Framework Practitioner, ISO 27001 Lead, CIS Controls.

Accredited Universities are those listed in the UNESCO World Higher Education Database.

Experience

• Experience in establishing and implementing Information Security Management System programs in accordance with NIST, ISO, or similar frameworks; 
• Experience with security technologies such as SIEM, Email Security Gateway, Insider Risk Management, DLP, IAM, endpoint protection, encryption, and cloud security controls (Azure, AWS, etc.); 
• Experience working collaboratively with business partners and technical teams to translate business needs into secure applications and data solutions; and 
• Experience operating in humanitarian, development, or United Nations organizations is an added advantage. 

Skills

• Proven understanding of data protection regulations (e.g., GDPR) and experience implementing compliance measures in applications and data management; 
• Ability to develop solution documentation, security policies, and user training materials using industry-standard methods and tools; 
• Proven track record in risk assessments, security audits, and incident response for applications and enterprise systems; 
• Excellent communication skills for articulating complex technical concepts to technical and non-technical audiences; 
• Excellent analytical, conceptual, and problem-solving skills; 
• Knowledge of IOM/UN-specific ICT processes and technologies; 
• Working knowledge of any other official UN language;
• Excellent interpersonal skills; 
• Solid organizational and document and project management; 
• Demonstrated investigative skills; 
• Proven ability to continue to learn and grow; 
• Basic knowledge of reporting tools (e.g., MS Excel, Power BI, Power BI Report Builder); 
• Ability to translate technical security vulnerabilities into business risk/impact to applications; 
• Demonstrated skill in creating security policies and procedures based on ISO27001, NIST 800-53, and Computer Information System (CIS) controls; 
• Proven analytical and problem-solving skills and proactive thinking skills; 
• Able to articulate complex, technical concepts to non-technical audiences; 
• Excellent English oral and written communication skills;
• Ability to work closely with government and international officials;
• Demonstrated ability to act independently and exercise sound judgment;
• Ability to work under pressure; 
• Demonstrated ability to prepare clear and concise reports; 
• Knowledge of International Public Sector Accounting Standards (IPSAS) is an advantage; and
• Knowledge of ERP (Oracle) is highly desirable.
   

Languages

For this position, fluency in English is required (oral and written).

Working knowledge of another official UN language (Arabic, Chinese, French, Russian and Spanish) is an advantage.

Working knowledge of Spanish is an advantage.

Required Competencies

IOM’s competency framework can be found at this link. Competencies will be assessed during the selection process.

Values - all IOM staff members must abide by and demonstrate these five values:

• Inclusion and respect for diversity: Respects and promotes individual and cultural differences. Encourages diversity and inclusion.
• Integrity and transparency: Maintains high ethical standards and acts in a manner consistent with organizational principles/rules and standards of conduct.
• Professionalism: Demonstrates ability to work in a composed, competent and committed manner and exercises careful judgment in meeting day-to-day challenges.
• Courage: Demonstrates willingness to take a stand on issues of importance.
• Empathy: Shows compassion for others, makes people feel safe, respected and fairly treated.

Core Competencies – behavioural indicators

• Teamwork: Develops and promotes effective collaboration within and across units to achieve shared goals and optimize results.
• Delivering results: Produces and delivers quality results in a service-oriented and timely manner. Is action oriented and committed to achieving agreed outcomes.
• Managing and sharing knowledge: Continuously seeks to learn, share knowledge and innovate.
• Accountability: Takes ownership for achieving the Organization’s priorities and assumes responsibility for own actions and delegated work.
• Communication: Encourages and contributes to clear and open communication. Explains complex matters in an informative, inspiring and motivational way.

Managerial Competencies – behavioural indicators

• Leadership: Provides a clear sense of direction, leads by example and demonstrates the ability to carry out the Organization’s vision. Assists others to realize and develop their leadership and professional potential.
• Empowering others: Creates an enabling environment where staff can contribute their best and develop their potential.
• Building Trust: Promotes shared values and creates an atmosphere of trust and honesty.
• Strategic thinking and vision: Works strategically to realize the Organization’s goals and communicates a clear strategic direction.
• Humility: Leads with humility and shows openness to acknowledging own shortcomings. 

Notes

Internationally recruited professional staff are required to be mobile. Please refer to this link for guidance on IOM Job Category. Any offer made to the candidate in relation to this vacancy notice is subject to funding confirmation.

Appointment will be subject to all clearances, including medical and security as well as accreditation, any residency or visa requirements. Vacancies close at 23:59 local time Geneva, Switzerland on the respective closing date. No late applications will be accepted.

IOM has a zero-tolerance policy on conduct that is incompatible with the aims and objectives of the United Nations and IOM, including sexual exploitation and abuse, harassment, sexual harassment, abuse of authority and any forms of discrimination. IOM is committed to promote the protection and safeguarding of all children.

IOM conducts reference checks and background verification, including through system wide databases such as Clear Check, to help ensure that candidates have no record of misconduct, including on sexual harassment, sexual exploitation and abuse, or fraud. Candidates are expected to uphold these standards and principles at all times.

IOM does not charge any fees at any stage of the recruitment process—whether for application, interview, processing, training, or otherwise—and does not request any information related to bank accounts.

IOM only accepts duly completed applications submitted through the IOM WAVE system (for internal candidates link here). The online tool also allows candidates to track the status of their application. Only shortlisted candidates will be contacted. For further information and other job postings, you are welcome to visit our website: IOM Careers and Job Vacancies