Senior System Security Specialist

Organizational Context

The Department of Safeguards operates as the IAEA's nuclear inspectorate, dedicated to global efforts to prevent the spread of nuclear weapons. Within this department, the Office of Information and Communication Systems (SGIS) provides secure ICT services essential for the Department's mandate, including developing and maintaining specialized solutions and protecting safeguards information.

Job Purpose

The Senior System Security Specialist provides expert leadership and guidance to Member States and the Department of Safeguards, focusing on reducing security vulnerabilities through the design and implementation of effective security controls for Safeguards products. This role involves leading a team responsible for critical security controls, such as identity and authorization systems, which are vital for protecting classified or higher-level information, thereby contributing to the integrity and security of nuclear safeguards.

Responsibilities

Lead a team in designing and developing innovative solutions to mitigate security risks across all software products and services. Provide expert advice on information security to prevent breaches and formulate new policies, strategies, and solutions. Champion security policies, procedures, and tools through effective communication. Develop risk measurement criteria aligned with the Department’s mission to guide the application of security controls. Evaluate new IT technical architectures against these risk criteria. Offer expertise in application security to ensure compliance with standards. Foster partnerships with Member States and development teams to achieve consensus on information security initiatives. Perform all other related duties as assigned.

Work Experience

A minimum of seven years of relevant practical experience is required, encompassing computer programming (at least five years in a service-oriented environment), identity and access management development (at least three years), and network engineering (at least three years, preferably in a complex network). Experience designing classified information systems is a plus.

Skills

Expertise in Computer Programming (web development, ASP.NET, HTML5, JavaScript frameworks), Information Access Management (access and authorization technologies/policies), Application Architecture (risk/threat assessment integration), IT Security (information security, secure coding), and Software Engineering (lifecycle, Agile, DevOps). Strong communication, interpersonal, and presentation skills are essential.

Explore related opportunities