Cybersecurity Advisory Consultant (IAM & Endpoint Protection)

Organizational context

Vuole candidarsi? Legga tutte le informazioni su questa posizione qui sotto, poi prema il pulsante per candidarsi.

The World Food Programme (WFP) is the world's largest humanitarian organization, dedicated to saving lives and building a pathway to peace, stability, and prosperity. WFP utilizes food assistance to support people recovering from conflict, disasters, and climate change impacts. The organization values diversity, inclusion, and invests in employee development, offering a dynamic and impactful career.

Job purpose

The Cybersecurity Advisory Consultant (IAM & Endpoint Protection) will play a crucial role in strengthening WFP's cybersecurity posture by providing expert advisory services. This role involves conducting risk assessments, leading Authorization to Operate (ATO) processes, and designing/reviewing security architectures for IT systems and services. The consultant will focus on enhancing identity and access management controls, defining endpoint protection requirements, and ensuring security is embedded by design in applications and cloud services. Responsibilities include assessing and strengthening IAM across various platforms, defining endpoint security baselines, and providing guidance on integrating identity and device-based controls. The consultant will also contribute to developing and improving cybersecurity procedures, researching innovative technologies, and advising stakeholders on cybersecurity risks associated with emerging technologies, ultimately safeguarding WFP's information assets and systems.

Responsibilities

The Cybersecurity Advisory Consultant will play a crucial role in enhancing the World Food Programme's (WFP) information security posture. Key responsibilities include conducting comprehensive risk assessments and leading the Authorization to Operate (ATO) process for IT systems, ensuring security risks are identified, evaluated, and mitigated. The consultant will design, review, and oversee security architectures for applications, platforms, and cloud services, embedding security controls by design and aligning with organizational policies and best practices. A significant focus will be on assessing and strengthening identity and access management (IAM) controls, including authentication, authorization, and privileged access management. Furthermore, the role involves defining and reviewing endpoint protection requirements for corporate and mobile devices, addressing compliance, hardening, threat protection, and monitoring. The consultant will provide expert guidance on integrating identity and endpoint controls, advise on cybersecurity risks associated with emerging technologies like cloud services and AI, and lead the development and continuous improvement of cybersecurity procedures and governance frameworks. They will also mentor junior team members, represent the cybersecurity branch in various forums, and prepare high-quality reports and recommendations for both technical and business audiences. This role is vital for protecting WFP's information assets and ensuring compliance with cybersecurity standards across the organization.

Education

A degree in Computer Science, Engineering, or a related STEM discipline is required. Equivalent work experience in a relevant field may also be considered.

Work experience

Requires solid IT security skills with academic and professional experience, and expertise in IT SDLC. Strong knowledge of Identity and Access Management (IAM) is essential. Experience with endpoint protection technologies (EDR, MDM, configuration hardening) and designing identity/device-based security controls for Zero Trust approaches is needed. Understanding of IT architecture, stakeholder management, cybersecurity risk assessment, and project management is also required. xysqume Experience in multinational organizations and relevant certifications are beneficial.

Skills

Cybersecurity risk assessment, Authorization to Operate (ATO) process, Application security, Identity and Access Management (IAM), Endpoint protection, Security architecture, Cloud security, Zero Trust principles, Risk-based access management, Secure Software Development Lifecycle (SSDLC), IT audit, Project management, Stakeholder relationship management, Threat and vulnerability assessment, AI security concepts

Required languages

English, Arabic, Chinese (Mandarin), French, Russian, Spanish, Portuguese

Desired languages

English, Arabic, Chinese (Mandarin), French, Russian, Spanish, Portuguese

#J-18808-Ljbffr