Security Analyst/Senior Security Analyst (Infrastructure Security)

Job Posting Organization:
The International Monetary Fund (IMF) is an international organization established in 1944, headquartered in Washington, D.C. The IMF aims to promote global economic stability and growth by providing financial assistance, policy advice, and technical assistance to its member countries. The organization has a diverse workforce of over 2,700 employees from around the world, operating in more than 190 countries. The IMF plays a crucial role in the global economy by monitoring economic trends, providing financial support, and fostering international monetary cooperation.

Job Overview:
The security" style="border-bottom: 1px dotted #007bff !important;">Security Analyst/Senior Security Analyst (Infrastructure Security) position within the Information Technology Department (ITD) at the IMF is a pivotal role that focuses on enhancing the security posture of the organization. This position is designed for seasoned cybersecurity professionals who will work under the supervision of an information security assurance manager. The primary responsibilities include defining, designing, engineering, and validating security configurations for technology platforms both in the cloud and on-premises. The candidate will collaborate with various project teams, service providers, and business units to ensure that security measures align with the IMF's operational needs. The role requires a proactive approach to advising technology and business personnel on safeguarding information and infrastructure, ensuring that security practices are integrated into the organization's operations effectively.

Duties and Responsibilities:
The duties and responsibilities of the Security Analyst/Senior Security Analyst include:

• Providing cybersecurity assurance expertise for IT initiatives, including defining and guiding the implementation of security control standards and configuration baselines.
• Conducting quality assurance reviews of security requirements and audit recommendations.
• Communicating security requirements and educating stakeholders on appropriate security designs and configurations.
• Collaborating with IT project teams to develop implementation plans for new security-related products and services.
• Advocating for information security by working closely with IT stakeholders and business units to provide technical security solutions.
• Identifying opportunities for improving business practices and IT security processes.
• Monitoring compliance and audit recommendations to ensure they are comprehensive and of high quality.
• Supporting the maintenance of the Fund's ISO 27001 certification by promoting self-compliance among IT staff.
• Keeping abreast of international information security codes of practice and regulations. 1
• Analyzing and recommending process improvements within the context of information security.

Required Qualifications:
Candidates must possess a Bachelor's degree in information security, computer science, engineering, mathematics, business, or a related field, along with a minimum of 10 years of relevant experience in infrastructure or enterprise security roles. Alternatively, an advanced degree in a related field with at least 4 years of relevant experience is acceptable. Required certifications include CISSP or CISM, with at least two preferred certifications such as CCSP, Microsoft Certified: Cybersecurity Architect Expert, or GIAC certifications. Experience should demonstrate a proven track record in delivering technical security assurance and engineering solutions, particularly within regulated environments.

Educational Background:
The educational background required for this position includes a Bachelor's degree in information security, computer science, engineering, mathematics, business, or a related field. An advanced degree in a similar field is preferred and can substitute for a portion of the required experience. Candidates should have a strong foundation in cybersecurity principles and practices, as well as familiarity with various security technologies and frameworks.

Experience:
Candidates should have extensive experience in infrastructure or enterprise security roles, with a minimum of 10 years of relevant experience for those with a Bachelor's degree, or 4 years for those with an advanced degree. Experience should include practical implementation of security solutions in regulated environments, with a focus on cloud and on-premises security configurations. A strong background in Microsoft Azure services and security controls is essential, along with hands-on experience in securing various infrastructure services and applications.

Languages:
Proficiency in English is mandatory, as the role requires effective communication with stakeholders at all levels. Additional language skills may be beneficial but are not explicitly required for this position.

Additional Notes:
This position is a one-year contractual appointment, with the possibility of renewal for up to four years based on performance, budget availability, and ongoing business needs. The IMF is committed to diversity and inclusion, ensuring that employment decisions are made without discrimination. Reasonable accommodations for disabilities during the selection process are available upon request.