Job Details

Description

Part of the core global IT team, the Information Security Officer (ISO) is responsible for cybersecurity program management, operations, planning, response, remediation, and recovery. Using industry standard tools, policy, compliance, and user training, the ISO will develop and maintain a safe and secure IT environment that enables Pathfinders to perform their work while keeping our data and operations safe. Creates a culture of security awareness and compliance.

Key Job Outcomes:

1. Cybersecurity Program Management: Defines, implements, and supports IT security program across the company. Weighs business needs against operational risk and determines proper security program elements.
2. Cybersecurity Operations: Responsible for the support of IT security systems including monitoring, remediation, response, configuration, incident and problem management.
3. Vendor Management: Provides oversight, support, and review on the cybersecurity and compliance of third-party systems.
4. Compliance: Ensures compliance with policy, donor, and regulatory requirements.
5. User Training: Through training and communications cultivates an environment of security awareness and compliance.
6. Documentation: Maintains and updates policies, communications, and training materials.
7. Records and Data Management: Ensure compliance with records retention policies.

Related IT responsibilities as assigned: Will perform occasional non-Security or Compliance work as needed.

Minimally Required Job-Specific Competencies:

• IT Security Program Management: Advanced skills in defining, implementing and supporting a hybrid cloud system of security tools including, but not limited to, Microsoft Cloud.
• IT Security Operations: Advanced skills in managing the entire spectrum of cybersecurity tools operations, including Microsoft Defender, Azure Sentinel, Meraki, and Azure Identity Protection.
• Computer Applications and Systems: Advanced skills in Microsoft SharePoint, Microsoft Office 365, Microsoft Endpoint Manager, Azure, Veeam Backup and Restore, Microsoft Applications Services.
• Incident and Crisis Management: Proven ability to analyze, troubleshoot, support, and implement security solutions at all levels including ransomware, phishing, DoS, supply chain, and reputational attacks.
• Security Documentation and Training: Advanced skills documenting, and training around security and compliance. Must have excellent communications and writing skills.
• Change Leadership: Ability to lead and manage change initiatives enterprise-wide.

Minimally Required Organizational Competencies:

• Languages: Advanced writing and speaking skills using local language and English language
• Communication: Advanced oral and written communication skills.
• Sexual and Reproductive Health and Rights Services: Foundational knowledge of family planning and reproductive health principles, practices and services, including program strategies and indicators.
• Passion for Sexual and Reproductive Health: Commitment to family planning, reproductive health services, gender, maternal, child health services, and eradication of harmful traditional practices.
• Influencing and Customer Service Skills: Advanced influencing and diplomacy skills. Advanced demonstrated customer service skills.
• Organization, Planning and Multi-tasking: In-depth demonstrated organizational and planning skills, project planning and management skills. Demonstrated ability to set priorities, meet deadlines and multi-task with minimal supervision.
• Self-Management and Teamwork: Ability to work independently or as a member of the team, ability to be detailed-oriented, and ability to manage stress effectively in a fast-pace environment.
• Matrix Management; Ability to thrive in a matrixed organization.
• Confidentiality: Ability to maintain confidentiality in work-related matters.

Minimally Required Education, Training and Experience:

• Bachelor’s degree in Computer Sciences or Information Technology, or related field
• 5 years’ experience in cybersecurity program operation at mid-sized company
• CISSP or equivalent knowledge
• Prefer: Previous work experience with an international NGO
• Fluent English Speaker. French, Portuguese, Amharic, are a plus.

Other Information:

• Travel required (10% or less)
• Uses cellular and desk phone; laptop or desktop computer