ICT Security Operations Officer

Organizational Context

UNIDO promotes inclusive and sustainable industrial development (ISID) in Member States, aligning with the 2030 Agenda and SDG-9. The Directorate of Corporate Services and Operations (COR) manages UNIDO's resources, and the Digitalization, Innovation, and TC Optimization Services (COR/DIT) division enables the organization through digital solutions and secure IT services. This position within COR/DIT contributes to the first line of defense in cybersecurity, implementing and improving controls, and coordinating with the second line.

Job Purpose

To implement, operate, and maintain cybersecurity controls and security systems as part of the first line of defense, ensuring the secure and efficient operation of UNIDO's ICT environment.

Responsibilities

Lead technical enterprise services in infrastructure, application, and network security, including monitoring, incident response, and vulnerability management. Manage and configure security tools (SIEM, EDR, IPS, WAF). Oversee secure implementation in hybrid multi-cloud environments. Operate AI security controls, monitor AI usage, detect threats, and enforce policies. Manage data protection controls (classification, DLP, encryption). Perform continuous security monitoring, incident detection, triage, and response. Execute vulnerability management processes. Develop security baselines. Monitor backup and disaster recovery systems. Provide updates to Risk Management and Compliance Unit. Maintain Risk Mitigation Plan. Develop and implement strategic security improvements. Backstop and monitor third-party security services (MSSP). Ensure compliance with UNIDO's Information Security Management System and ICT policies. Analyze security events and trends. Contribute to a secure ICT environment. Collaborate with stakeholders to promote consistent security controls.

Work Experience

A minimum of 8 years of relevant professional experience with a Bachelor's degree, 5 years with a Master's, or 3 years with a Doctorate. This includes at least 3 years of hands-on experience in cybersecurity and ICT infrastructure configuration, administration, and troubleshooting in an enterprise environment. Required experience includes cloud security operations (CSPM, identity monitoring, misconfiguration remediation), standard operational procedure development, security protection systems (firewalls, proxies), security monitoring, threat detection, incident response, vulnerability management, and security operations technologies (SIEM, SOC, EDR, IPS, WAF, email security). Hands-on experience with application security operations (vulnerability scanning, SAST/DAST) is also required. Desirable experience includes AI security monitoring, MSSP oversight, information security forensics, ISO 27001, project management (PMP/Prince2), ITSM (ITIL), security operations/incident response certifications, cloud security certifications, digital forensics certifications, and application security certifications.

Skills

Core Values: Integrity, Professionalism, Diversity. Key Competencies: Focus on People, Results and Responsibilities, Communication and Trust, Thinking Outside the Box and Innovation. Technical skills include expertise in SIEM, EDR, vulnerability analysis, systems hardening, IPS, WAF, AI security controls, data protection, incident response, and application security tools.

Explore related opportunities