Cybersecurity Consultant

Job Posting Organization:
The job posting organization is the United Nations Relief and Works Agency for Palestine Refugees in the Near East (UNRWA). Established in 1949, UNRWA provides assistance and protection to millions of Palestine refugees. The agency operates in five fields: Jordan, Lebanon, Syria, the West Bank, and the Gaza Strip. UNRWA's mission is to help Palestine refugees achieve their full potential in human development, and it employs thousands of staff across various sectors, including education, health, and social services. The organization is committed to upholding the rights and dignity of Palestine refugees and works in accordance with international standards and humanitarian principles.

Job Overview:
The Cybersecurity Consultant will play a crucial role in supporting the development, implementation, and continuous improvement of cybersecurity operations and vulnerability management frameworks within UNRWA. This position is essential for ensuring that the organization's practices align with international standards and internal policies, particularly in the context of data protection and privacy. The consultant will work closely with program teams, IT staff, and field offices to analyze and document data flows and systems used in Education and Health programs. The consultant will also identify gaps and risks in current data processing practices and recommend technical and organizational measures to ensure compliance with UNRWA’s Data Protection Policy. This role requires a proactive approach to integrating data protection principles into program operations and digital platforms, ensuring that the organization can effectively manage and protect sensitive information.

Duties and Responsibilities:
The Consultant will be responsible for a variety of tasks, including but not limited to: conducting a comprehensive mapping of digital systems and data flows within Education and Health programs; documenting types of personal and sensitive data collected, processed, stored, and shared; identifying third-party systems or integrations and assessing associated data protection risks; performing gap analyses against UNRWA’s Data Protection Policy and international standards; conducting Data Protection Impact Assessments (DPIAs) for high-risk processing activities; identifying vulnerabilities and recommending mitigation strategies; translating policy requirements into practical guidance for program and IT teams; developing templates, checklists, and standard operating procedures (SOPs) to support compliance; advising on privacy-by-design and data minimization strategies; delivering tailored training sessions and awareness materials for Education and Health staff; building capacity for field-level personnel to manage data responsibly and securely; preparing reports and presentations for internal stakeholders and donors; coordinating with legal, ethics, and program teams to ensure integrated approaches; and participating in relevant inter-agency or donor coordination platforms as needed.

Required Qualifications:
Candidates must possess an advanced university degree (Master’s or equivalent) in Information Technology, Law, Data Protection, Public Health Informatics, or a related field. Alternatively, a first-level university degree combined with two additional years of qualifying experience may be accepted in lieu of the advanced degree. Additionally, candidates should have a minimum of five years of progressively responsible experience in security" style="border-bottom: 1px dotted #007bff !important;">security" style="border-bottom: 1px dotted #007bff !important;">information security or data protection, including at least two years of leading data protection assessments. It is also required that candidates have a minimum of two continuous years of relevant international experience gained outside UNRWA and outside their country of citizenship unless they are currently serving as an international staff member in the UN Common System. Certification in data protection/privacy (e.g., CIPP/E, CIPM, CDPO) is considered an asset, and excellent oral and written communication skills in English are mandatory, with Arabic language skills being an advantage.

Educational Background:
The educational background required for this position includes an advanced university degree (Master’s or equivalent) in fields such as Information Technology, Law, Data Protection, Public Health Informatics, or a related area. Candidates with a first-level university degree may be considered if they have two additional years of qualifying experience. This educational foundation is critical for understanding the complexities of data protection and cybersecurity within the context of UNRWA's operations.

Experience:
The position requires a minimum of five years of progressively responsible experience in the fields of information security or data protection. This experience should include at least two years of actively leading data protection assessments. Candidates must also have a minimum of two continuous years of relevant international experience gained outside UNRWA and outside their country of citizenship unless they are currently serving as an international staff member in the UN Common System. Experience in a complex international environment or multilateral organization is desirable, as is familiarity with industry-standard security tools and technologies.

Languages:
Fluency in spoken and written English is mandatory for this position. Additionally, fluency in spoken and written Arabic is considered a plus, enhancing communication capabilities within the diverse context of UNRWA's operations and among its stakeholders.

Additional Notes:
The selected candidate will receive a monthly remuneration equivalent to P3 Step 1, amounting to $7,924.25 for every fully completed month. The duration of the contract is up to 12 months, with the possibility of extension subject to the availability of funds, continuing need, and satisfactory performance. The selected candidate will report to the Chief Digital Risk Officer and Senior Project Manager. It is important to note that the United Nations does not charge a fee at any stage of the recruitment process, including application, interview, or training, and does not require information on applicants’ bank accounts.