Security Analyst/Senior Security Analyst (Cloud Security Assurance)

Job Posting Organization:
The International Monetary Fund (IMF) is an international organization established in 1944 with the mission to promote global economic stability and growth. The IMF has a workforce of approximately 2,700 employees and operates in 190 countries. The organization focuses on providing financial assistance, policy advice, and technical assistance to its member countries, aiming to foster economic cooperation and stability worldwide. The IMF is committed to ensuring that its operations are supported by innovative technology solutions, particularly through its Information Technology Department (ITD).

Job Overview:
The security" style="border-bottom: 1px dotted #007bff !important;">Security Analyst/Senior Security Analyst (Cloud Security Assurance) position within the IMF's Information Technology Department (ITD) is a critical role that focuses on enhancing the organization's cybersecurity posture. The selected candidate will work under the supervision of an information security assurance manager, providing expertise in defining, designing, engineering, and validating security configurations for both cloud and on-premises technology platforms. This role requires collaboration with various project teams, service providers, and business units to ensure that the IMF's information assets are safeguarded against emerging threats. The candidate will be expected to leverage their extensive experience in cloud security and risk management to address current and future cybersecurity challenges, thereby supporting the IMF's mission of global economic stability.

Duties and Responsibilities:
The primary duties and responsibilities of the Security Analyst/Senior Security Analyst include:

• Providing cybersecurity assurance expertise for IT initiatives, particularly focusing on Microsoft Azure and hybrid cloud environments.
• Defining and guiding the engineering and validation of security control standards and configuration baselines for technology platforms.
• Conducting quality assurance reviews of security requirements and audit recommendations.
• Collaborating with IT project teams to implement security controls for new and existing cloud services.
• Advocating for information security by working closely with IT stakeholders and business units to deliver security-related technical solutions.
• Identifying opportunities for improving IT security processes, including automation and compliance.
• Supporting Zero Trust initiatives by promoting identity-centric access and continuous verification across services.
• Developing scripts and templates for compliance checks and reporting across Azure and Entra ID.
• Contributing to the secure design and configuration of services such as Azure Kubernetes and Power Platform. 1
• Keeping abreast of international standards and best practices in information security and data privacy.

Required Qualifications:
Candidates must possess a Bachelor's degree in information security, computer science, engineering, mathematics, business, or a related field, along with a minimum of 10 years of relevant experience in cloud security, assurance, or architecture roles. Alternatively, candidates with an advanced degree in the aforementioned fields must have at least 4 years of relevant experience. Required certifications include CISSP or CISM, and Microsoft Certified: Azure Security Engineer Associate. Additional preferred certifications include CCSP, Microsoft Certified: Cybersecurity Architect Expert, and other Microsoft cloud security-related certifications at the Expert level. Candidates should also have a proven track record in delivering technical security assurance and engineering solutions, particularly in regulated environments.

Educational Background:
A Bachelor's degree in information security, computer science, engineering, mathematics, business, or a related field is required. An advanced degree in these fields is preferred and can substitute for some years of experience. The educational background should provide a solid foundation in technical concepts related to cybersecurity and cloud security.

Experience:
Candidates should have a minimum of 10 years of relevant experience in cloud security, assurance, or architecture roles if they hold a Bachelor's degree. Those with an advanced degree should have at least 4 years of relevant experience. Experience should include hands-on operational security in regulated environments, particularly with Microsoft Azure and other cloud platforms, as well as familiarity with multi-cloud security posture management.

Languages:
Proficiency in English is mandatory, as the role requires effective communication with stakeholders at various levels. Additional language skills may be beneficial but are not explicitly required for this position.

Additional Notes:
This position is a one-year contractual appointment, with the possibility of renewal for up to four years based on performance, budget availability, and ongoing business needs. The IMF promotes a non-discriminatory employment policy and welcomes requests for reasonable accommodations during the selection process.