Cybersecurity Consultant - Threat Exposure & Vulnerability Management Specialist
Organizational Context
The World Food Programme (WFP) is the world's largest humanitarian organization, dedicated to saving lives in emergencies and building pathways to peace and prosperity. WFP utilizes food assistance to support people recovering from conflict, disasters, and extreme weather. With a vision for diverse, skilled, and high-performing teams, WFP fosters an inclusive work environment where employees embody core values and collaborate to change lives.
Job Purpose
The Cybersecurity Consultant - Threat Exposure & Vulnerability Management Specialist will play a crucial role in strengthening WFP's cybersecurity posture by leading initiatives to enhance threat exposure and vulnerability management practices. This position involves coordinating and executing adversarial validation activities, such as penetration testing and red/purple teaming, to proactively identify exploitable vulnerabilities within IT infrastructure and systems. The specialist will be responsible for assessing the impact of these findings, prioritizing remediation efforts, and ensuring alignment with organizational objectives. By collaborating with various teams, the incumbent will integrate validation results into ongoing threat detection and exposure management processes, continuously refining these practices to minimize organizational risk and address critical security gaps.
Responsibilities
The Cybersecurity Consultant - Threat Exposure & Vulnerability Management Specialist will be responsible for enhancing the organization's threat exposure and vulnerability management practices. This involves coordinating and leading adversarial validation initiatives, such as penetration testing, threat exposure assessments, and red/purple teaming. The primary goal is to identify and assess exploitable vulnerabilities within IT infrastructure and systems, validating identified risks and gaps. The specialist will prioritize remediation efforts and ensure alignment with business objectives. Collaboration with various teams is crucial to integrate validation findings into threat exposure and detection processes. Continuous monitoring, reporting, and refinement of validation techniques are essential to minimize organizational risk by addressing critical vulnerabilities and detection gaps. Key accountabilities include designing and coordinating validation activities, validating findings to assess risk levels, guiding remediation, and developing clear reports and dashboards for stakeholders. Effective communication of findings, risks, and strategies to senior leadership is also a core responsibility. The role requires refining validation techniques based on emerging threats and prioritizing vulnerabilities based on their risk impact to the organization's operations.
Work Experience
Requires 5-7 years of experience in cybersecurity, specifically focusing on vulnerability management and threat exposure management. This experience should include hands-on involvement with vulnerability scanning tools, processes, and remediation workflows, as well as familiarity with threat modeling and risk-based decision-making.
Skills
Information not available.