Security Analyst/Senior Security Analyst (Cloud Security Assurance)

Job Posting Organization:
The International Monetary Fund (IMF) is a global organization established to promote international monetary cooperation, facilitate balanced growth of international trade, and provide resources to member countries in need. Founded in 1944, the IMF has grown to include 190 member countries, with a mission to foster global economic stability and growth. The organization employs over 2,700 staff members from diverse backgrounds and operates in various countries around the world, providing financial assistance, policy advice, and technical assistance to its members. The IMF's Information Technology Department (ITD) plays a crucial role in supporting the organization's mission by integrating innovative technology solutions and ensuring the security" style="border-bottom: 1px dotted #007bff !important;">security and integrity of its information assets.

Job Overview:
The Security Analyst/Senior Security Analyst (Cloud Security Assurance) position within the Information Technology Department (ITD) at the IMF is a pivotal role that focuses on the definition, design, engineering, and validation of security configurations for technology platforms both in the cloud and on-premises. The successful candidate will work under the supervision of an information security assurance manager and will be responsible for collaborating with project teams, service providers, and business units to ensure that the IMF's technology functions optimally while managing information risks. This role requires a pragmatic approach to cloud security and risk management, enabling the IMF to meet its current and future business needs. The candidate will also be expected to advise and influence technology and business personnel on safeguarding information, applications, systems, and infrastructure, thereby contributing to a secure operational framework that supports the IMF's mission.

Duties and Responsibilities:
The duties and responsibilities of the Security Analyst/Senior Security Analyst include providing cybersecurity assurance expertise for a wide range of IT initiatives, particularly focusing on Microsoft Azure and hybrid cloud environments. Key responsibilities include defining and guiding the engineering of security control standards, conducting quality assurance reviews of security requirements, and effectively communicating security design and technical configuration guidance to IT teams. The analyst will work closely with IT project teams to implement security controls for new and existing cloud services, advocate for information security, and identify opportunities for improving business practices related to IT security. Additionally, the analyst will support Zero Trust initiatives, develop and maintain scripts for compliance checks, and contribute to the secure design and configuration of various services. The role also involves supporting audit and compliance initiatives, keeping abreast of international standards, and recommending process improvements within the context of information security.

Required Qualifications:
Candidates must possess a Bachelor's degree in information security, computer science, engineering, mathematics, business, or a related field, along with a minimum of 10 years of relevant experience in cloud security, assurance, or architecture roles. Alternatively, candidates with an advanced degree in a related field may qualify with a minimum of 4 years of relevant experience. Required certifications include CISSP or CISM, as well as Microsoft Certified: Azure Security Engineer Associate. Additional preferred certifications include CCSP, Microsoft Certified: Cybersecurity Architect Expert, and other Microsoft cloud security-related certifications at the Expert level. Candidates should have a proven track record in delivering technical security assurance and engineering solutions, particularly in regulated environments, and should be familiar with multi-cloud security posture management tools.

Educational Background:
The educational background required for this position includes a Bachelor's degree in information security, computer science, engineering, mathematics, business, or a related field. An advanced degree in a similar field is also acceptable, particularly for candidates with fewer years of experience. The educational qualifications should provide a strong foundation in technical concepts related to cybersecurity, cloud security, and risk management.

Experience:
Candidates should have extensive experience in cloud security, assurance, or architecture roles, with a minimum of 10 years of relevant experience for those with a Bachelor's degree, or 4 years for those with an advanced degree. Experience should include hands-on operational security in regulated environments, particularly with Microsoft Azure and other cloud platforms. The ideal candidate will have a strong background in technical security assurance, engineering solutions, and familiarity with various security tools and practices.

Languages:
The position requires proficiency in English, both spoken and written, as effective communication is essential for articulating complex technical ideas to non-technical stakeholders. Additional language skills may be beneficial but are not mandatory.

Additional Notes:
This position is a one-year contractual appointment, with the possibility of renewal for up to four years based on performance, budget availability, and ongoing business needs. The IMF is committed to diversity and inclusion, ensuring that employment decisions are made without discrimination. The organization welcomes requests for reasonable accommodations for disabilities during the selection process.