Cybersecurity-Consultant for assessing BiH Cybersecurity Capacity and Resilience

Job Posting Organization:
The job is posted by the United Nations Development Programme (UNDP), which is a global development network of the United Nations. Established in 1965, UNDP aims to eradicate poverty and reduce inequalities through sustainable development. It operates in approximately 170 countries and territories, working with governments and people to address development challenges. UNDP focuses on various areas including democratic governance, peacebuilding, climate change, and disaster resilience, and has a significant presence in Bosnia and Herzegovina, where it supports national development priorities and initiatives.

Job Overview:
The position of Cybersecurity-Consultant involves assessing the cybersecurity capacity and resilience framework specifically within the energy sector of Bosnia and Herzegovina. The consultant will be tasked with evaluating existing cybersecurity measures, identifying vulnerabilities, and providing recommendations to enhance the overall cybersecurity posture of the energy sector. This role is crucial as it aims to ensure that the energy infrastructure is protected against cyber threats, which are increasingly prevalent in today's digital landscape. The consultant will work closely with local stakeholders, including government agencies and private sector entities, to gather data, analyze current practices, and develop a comprehensive assessment report. The assignment is expected to last from March 2026 to November 2026, with an estimated commitment of 45 days of work, which may include travel within Bosnia and Herzegovina to meet with relevant parties and conduct on-site evaluations.

Duties and Responsibilities:
The consultant will be responsible for the following duties:

• Conduct a thorough assessment of the current cybersecurity measures in place within the energy sector of Bosnia and Herzegovina.
• Identify gaps and vulnerabilities in the existing cybersecurity framework and practices.
• Engage with key stakeholders, including government officials, energy providers, and cybersecurity experts, to gather insights and data.
• Analyze the collected data to evaluate the effectiveness of current cybersecurity strategies and policies.
• Develop a comprehensive report detailing findings, recommendations, and best practices for enhancing cybersecurity resilience in the energy sector.
• Present the assessment findings to relevant stakeholders and facilitate discussions on implementation strategies.
• Provide ongoing support and guidance to stakeholders in the implementation of recommended cybersecurity measures.
• Ensure that all work is conducted in accordance with UNDP policies and procedures, maintaining a high standard of professionalism and integrity.

Required Qualifications:
Candidates must possess a strong background in cybersecurity, with specific expertise in assessing cybersecurity frameworks and resilience strategies. A thorough understanding of the energy sector's unique cybersecurity challenges is essential. Additionally, candidates should have experience working with governmental and non-governmental organizations, particularly in developing countries. Strong analytical skills, the ability to communicate complex information clearly, and proficiency in report writing are also required. Familiarity with international cybersecurity standards and best practices will be considered an asset.

Educational Background:
A minimum of a bachelor's degree in cybersecurity, information technology, computer science, or a related field is required. A master's degree or higher in a relevant discipline will be considered an advantage. Professional certifications in cybersecurity (such as CISSP, CISM, or equivalent) are highly desirable and will strengthen the candidate's application.

Experience:
Candidates should have at least 5 years of professional experience in cybersecurity, with a focus on risk assessment, policy development, and capacity building. Experience working in the energy sector or with energy-related cybersecurity initiatives is highly preferred. Previous experience working with UN agencies or similar international organizations will be beneficial.

Languages:
Fluency in English is mandatory, as all reports and communications will be conducted in English. Proficiency in Bosnian, Croatian, or Serbian is considered an asset, as it will facilitate communication with local stakeholders and enhance the consultant's effectiveness in the role.

Additional Notes:
This position is classified as an individual contractor role, and the assignment duration is from March 2026 to November 2026, with an estimated total of 45 working days. The consultant will be required to travel within Bosnia and Herzegovina as part of the assessment process. The application must be submitted through the UNDP supplier portal, and candidates are encouraged to register in advance to ensure a smooth application process. The deadline for submitting proposals is set for March 5, 2026, at 10:00 AM New York time.