Information Systems Security Officer

Job Posting Organization:
INTERPOL is the world's largest international police organization, established in 1923, with a mission to facilitate cross-border police cooperation and support organizations, authorities, and services in preventing and combating international crime. With 196 member countries, INTERPOL plays a crucial role in global security" style="border-bottom: 1px dotted #007bff !important;">security and law enforcement. The organization actively encourages applications from women and nationals of member countries that are currently underrepresented among its staff, promoting diversity and inclusion in its workforce. The recruitment process is merit-based, ensuring that hiring decisions are made based on the qualifications of applicants and the needs of the organization.

Job Overview:
The Information Systems Security Officer (ISSO) will report to the Chief IT Governance Officer and is responsible for implementing INTERPOL's information security strategy within the Information Systems and Technology Directorate. The ISSO will serve as a liaison between the Chief Information Security Officer (CISO) and the IS Directorate, focusing on governance, risk, and compliance aspects of IT security. The role requires collaboration with various IS Sub-Directorates and Departments to develop and maintain Standard Operating Procedures (SOPs) that align with CISO policies, ensuring compliance with organizational security standards and policies. The ISSO will also be involved in risk management, advisory roles, and performance reporting related to IS security governance.

Duties and Responsibilities:
The ISSO will have several key missions: 1) Governance and Compliance: Collaborate with the CISO to implement the organizational information security strategy, develop IS security standards, ensure compliance with laws and regulations, and report on compliance progress. 2) Risk Management: Maintain the IS Directorate's security risk register, perform IT security risk assessments, assist in security audits, and develop a risk management framework. 3) Advisory and Awareness: Provide guidance on IT security aspects of projects, participate in security awareness initiatives, and act as the point of contact for security investigations. 4) Reporting and Performance Management: Collect and report KPIs related to IS security governance, prepare reports for management, and identify areas for improvement. 5) Perform any other duties as required by the supervisor.

Required Qualifications:
Candidates must possess three to four years of education at a university or specialized higher education institution. They should hold one or more internationally recognized IT Security Certifications such as CISM, CISSP, or CEH, with additional certifications like ITIL foundation being appreciated. Candidates must demonstrate a strong understanding of IT security governance frameworks and standards, risk management principles, and compliance with industry standards.

Educational Background:
The educational background required for this position includes a minimum of three to four years of higher education in a relevant field, such as information technology, cybersecurity, or a related discipline. Candidates are expected to have internationally recognized IT security certifications that validate their expertise in the field.

Experience:
A minimum of five years of experience in a large and complex IT enterprise environment is required. Candidates should have experience in developing and maintaining information security policies, conducting security audits, and providing recommendations for compliance and improvement. Proven experience in risk management and the ability to identify and mitigate IT security risks is essential.

Languages:
Fluency in English is mandatory for this position. Knowledge of another working language of the Organization, such as French, Arabic, or Spanish, would be considered an additional asset, enhancing the candidate's ability to communicate effectively within the diverse environment of INTERPOL.

Additional Notes:
The position is a fixed-term contract lasting 36 months, with the possibility of extension subject to satisfactory performance and availability of funds. Candidates must be prepared to provide official proof of employment for their professional experience. The recruitment process will include tests and interviews approximately one to three weeks after the application deadline. Selected candidates are expected to report for duty within one to three months after receiving an employment offer. Additionally, candidates should be aware of INTERPOL's age-limit regulation, which states that officials shall not normally be retained in service beyond the age of 65 years, and this may affect the duration of the appointment.