Information and Communications Technology (ICT) Officer (Information Security Officer) (P)

Job Description

Introduction

Established in 1951, IOM is a Related Organization of the United Nations and the leading UN agency in the field of migration. Working closely with governmental, intergovernmental and non-governmental partners, IOM promotes humane and orderly migration for the benefit of all. It saves lives and protects people on the move, drives solutions to displacement, and facilitates pathways for regular migration, while providing services and advice to governments and migrants.

IOM is committed to fostering a respectful, inclusive and supportive workplace where all employees can thrive professionally and feel valued. By creating such an environment, IOM aims to better harness the full potential of migration and strengthen its support to people on the move.

IOM invites candidates from diverse backgrounds to apply and provides reasonable accommodation throughout the recruitment process when required. Learn more about IOM’s workplace culture at IOM workplace culture | International Organization for Migration

Internal and external candidates will be considered for this vacancy.

For the purposes of this vacancy, internal candidates are defined as staff members holding a regular, fixed-term or short-term graded or ungraded contract, including Junior Professional Officers (JPOs), UN Volunteers with at least twelve (12) months of continuous service in IOM, staff on Special Leave Without Pay (SLWOP), and staff members on secondment/loan released by the Organization, unless otherwise specified in their contract. Staff members holding a regular, fixed-term or short-term graded contract will not retain their contract type if appointed to an ungraded position.

Organizational Context and Scope

Under the overall and direct supervison of the Senior Information Security Officer (SISO), the

Information Security Officer ensures that IT systems, services, and data in the IOM-ICT ecosystem

meet NIST cybersecurity standards. Key responsibilities include developing and improving information

and data security policies and controls, ensuring regulatory compliance, and collaborating with business

units to maintain security requirements throughout system lifecycles. The role requires collaboration,

governance and technical leadership, and translating security needs into solutions, with frequent

support of other teams.

This position reports to the Senior Information Security Officer within the Information Security &

Risk Management Unit. All IOM staff must perform duties according to job descriptions, delegated

authorities, UN and IOM rules, and uphold IOM’s values of professionalism, integrity, and respect for diversity.

Responsibilities

Key Governance Responsibilities

• Plan and conduct internal security audits, as well as support external audit activities.
• Identify, assess, evaluate, document, and report cybersecurity risks, maintain a centralized risk register, and track mitigation actions.
• Support organizational objectives by ensuring that business needs are met with secure, compliant, and cost-effective solutions.
• Ensure data protection and privacy compliance, including the General Data Protection Regulation (GDPR) and other relevant regulations for both applications and data, through the implementation of technical and organizational measures.
• Support the design and implementation of security controls for data-in-transit and data-at-rest, including encryption, access controls, and monitoring.
• Advise business units and management on information security requirements and strategic security issues.
• Support the SISO in developing and executing a comprehensive cybersecurity strategy that aligns with organizational goals and ensures robust risk and compliance management frameworks that address current and emerging threats.
• Support the SISO in establishing and implementing an effective information security management system and program.
• Oversee vendor, contract, and change management activities related to cybersecurit...

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Sed ut perspiciatis unde omnis iste natus error sit voluptatem accusantium doloremque laudantium, totam rem aperiam, eaque ipsa quae ab illo inventore veritatis.