CYBERSECURITY ADVISORY CONSULTANT (AI Security & Secure by Design)

Job Posting Organization:
The World Food Programme (WFP) is the world’s largest humanitarian organization, established to save lives in emergencies and to use food assistance to build pathways to peace, stability, and prosperity for people recovering from conflict, disasters, and the impacts of climate change. WFP operates in numerous countries around the globe, employing a diverse workforce committed to its mission. The organization is dedicated to fostering an inclusive work environment and values diversity among its employees, encouraging applications from qualified candidates regardless of their background. WFP has received the Nobel Peace Prize in 2020, highlighting its significant contributions to humanitarian efforts worldwide. The organization invests in the personal and professional development of its employees through various training and mentorship programs, ensuring that they are equipped to meet the challenges of their roles effectively. WFP's commitment to its values—Integrity, Collaboration, Commitment, Humanity, and Inclusion—guides its operations and interactions with partners and stakeholders.

Job Overview:
The Cybersecurity Advisory Consultant position at WFP is a critical role that involves providing expert guidance and consulting services in the field of cybersecurity, particularly focusing on AI security" style="border-bottom: 1px dotted #007bff !important;">security and secure-by-design principles. The incumbent will work under the general supervision of the Chief Information Security Officer and the Head of Cybersecurity Advisory Services. The role requires conducting comprehensive risk assessments, leading the Authorization to Operate (ATO) process, and ensuring that security risks are identified, evaluated, documented, and communicated effectively. The consultant will also be responsible for designing and reviewing security architecture for applications and platforms, developing security requirements for AI solutions, and embedding secure-by-design principles throughout the technology lifecycle. This position is pivotal in supporting the secure adoption of emerging technologies and ensuring compliance with organizational security standards. The consultant will collaborate with various stakeholders, including Country Offices and Regional Bureaus, to address cybersecurity challenges and enhance the organization's overall security posture.

Duties and Responsibilities:
The duties and responsibilities of the Cybersecurity Advisory Consultant include conducting comprehensive risk assessments and leading the ATO process for IT systems and services. The consultant will design, review, and oversee the security architecture of new and existing applications, ensuring that appropriate security controls are embedded by design. They will develop and maintain security requirements for AI solutions, conduct security assessments of AI use cases, and embed secure-by-design principles into solution development processes. The consultant will lead the development and continuous improvement of cybersecurity procedures and governance frameworks, research innovative technologies, and propose new security standards to enhance the organization's security maturity. Additionally, they will provide expert advisory services to various WFP divisions, guide IT solution owners on security controls, advise on cybersecurity risks associated with emerging technologies, maintain records of decisions and assessments, and mentor junior team members. The consultant will also represent the Cybersecurity Branch in various meetings and initiatives, ensuring that cybersecurity objectives are met.

Required Qualifications:
Candidates must possess a degree in Computer Science, Engineering, or related STEM disciplines, or equivalent working experience. A minimum of 6 years of relevant work experience in IT security is required. Candidates should have solid IT security skills, a strong understanding of AI security concepts, and the ability to implement secure-by-design principles throughout the solution lifecycle. Experience in conducting security reviews of AI-enabled solutions, understanding IT architecture and design concepts, and managing stakeholder relationships is essential. Good project management skills and experience in multinational organizations are also required. IT Security and IT Audit certifications, as well as familiarity with compliance processes such as ISO, NIST, HIPAA, or PCI, are highly desirable.

Educational Background:
The educational background required for this position includes a degree in Computer Science, Engineering, or related STEM fields. Equivalent working experience may also be considered in lieu of formal education. The role demands a strong academic foundation in IT security principles and practices, as well as a comprehensive understanding of cybersecurity frameworks and methodologies.

Experience:
The position requires at least 6 years of relevant work experience in the field of IT security, with a focus on cybersecurity advisory services, risk management, and compliance. Candidates should have a proven track record of successfully managing cybersecurity projects and initiatives, particularly in multinational organizations. Experience in conducting security assessments, developing security architectures, and implementing cybersecurity best practices is essential for this role.

Languages:
Fluency in oral and written English is mandatory for this position. Additionally, an intermediate knowledge of another official UN language (Arabic, Chinese, French, Russian, or Spanish) or Portuguese, which is one of WFP’s working languages, is desirable. Proficiency in multiple languages will be considered an asset and may enhance a candidate's application.

Additional Notes:
The contract for this position is classified as CST Level II and is expected to last for a duration of 11 months. The position allows for remote work, providing flexibility for the incumbent. WFP is committed to providing reasonable accommodations for individuals with disabilities throughout the recruitment process. The organization does not charge any fees for applications or recruitment processes, ensuring that all candidates can apply without financial barriers. Selected candidates will undergo rigorous reference and background checks to ensure compliance with WFP's standards and values.