Information Security Officer

Job Posting Organization:
The International Atomic Energy Agency (IAEA) is an international organization that seeks to promote the peaceful use of nuclear energy and to inhibit its use for any military purpose, including nuclear weapons. Established in 1957, the IAEA has a mission to accelerate and enlarge the contribution of atomic energy to peace, health, and prosperity throughout the world. The organization operates in over 170 countries and has a workforce of approximately 2,500 employees. The IAEA's headquarters is located in Vienna, Austria, and it collaborates with various member states and international organizations to achieve its goals.

Job Overview:
The security" style="border-bottom: 1px dotted #007bff !important;">security" style="border-bottom: 1px dotted #007bff !important;">Information Security Officer position is critical in supporting the IAEA's mission by ensuring the security of information systems and data. The officer will play a vital role in defining and creating repeatable processes that enhance information security across the organization. This includes developing and delivering a comprehensive information security program, managing security projects, and overseeing the implementation of security controls. The role requires a proactive approach to identifying and mitigating risks, ensuring compliance with international standards, and fostering a culture of security awareness within the organization. The officer will also be responsible for maintaining the Agency's ISO 27001 certification and will engage in various IT projects to embed security measures effectively.

Duties and Responsibilities:
The Information Security Officer will have a diverse set of responsibilities, including but not limited to:

• Contributing to the development and implementation of information security policies and procedures to ensure the confidentiality, integrity, and availability of information systems.
• Operating the Agency's Information Security Management System (ISMS) to maintain ISO 27001 certification.
• Developing and maintaining a risk management system that addresses the latest threats and vulnerabilities.
• Participating in risk assessments, identifying potential risks, and recommending corrective actions.
• Conducting training and awareness programs to promote information security best practices among staff.
• Collaborating with project teams to ensure security is integrated into IT projects from the outset.
• Producing detailed reports on security matters, presenting complex information clearly and concisely.
• Staying updated on industry standards and IAEA policies to ensure compliance and best practices are followed.

Required Qualifications:
Candidates must possess a Bachelor's degree in computer science, information management, IT security, or a related field. Additionally, they should hold accredited information security certifications such as CISSP, CISM, CISA, or GIAC. A project management certification such as PMP or Prince2 is also desirable. The role requires a minimum of five years of professional experience in managing information security programs within enterprise IT environments, demonstrating expertise in IT risk management, policy development, and compliance monitoring. Strong stakeholder engagement skills are essential, along with a proven track record in IT project management.

Educational Background:
The educational background required for this position includes a Bachelor's degree in a relevant field such as computer science, information management, or IT security. Candidates are also expected to have additional certifications in information security and project management, which enhance their qualifications for the role.

Experience:
The position requires a minimum of five years of professional experience in managing information security programs. Candidates should have a solid background in applying standardized frameworks such as ISO/IEC 27000 and demonstrate expertise in IT risk management, policy development, and compliance monitoring. Experience in IT project management is also crucial, as the officer will be involved in various projects that require effective management and coordination.

Languages:
Fluency in English is mandatory, with excellent oral and written communication skills. Knowledge of other official IAEA languages, including Arabic, Chinese, French, Russian, and Spanish, is considered an asset and may enhance a candidate's profile.

Additional Notes:
The IAEA offers an attractive remuneration package, including a tax-free annual net base salary starting at approximately US $71,335, along with a variable post adjustment and various benefits such as dependency benefits, rental subsidies, and education grants. Employees are entitled to six weeks of annual leave, home leave travel, and a pension plan. The IAEA is committed to diversity and encourages applications from qualified women and candidates from developing countries. The recruitment process emphasizes fairness and integrity, ensuring that all candidates are evaluated based on their qualifications and experience.