Job Summary
The Vacancy Notice has been re-opened in order to expand the pool of candidates. Candidates who have already applied do not need to re-apply.
The Office of Confidentiality and Security (OCS) sets the framework, provides the guidelines, institutes the measures and implements the provisions necessary to guarantee and enforce the fulfilment of the stringent OPCW confidentiality regime; operational security of the Secretariat's assets; the security of all its electronic systems; the confidentiality of all classified material and its safeguarding. Whilst the security regime for the protection of personnel, property, operations and information are the responsibility and main objectives of the OCS, more widely OCS delivers security management in support of all OPCW missions and activities.
As the Head, Confidentiality & Information Security (CIS) Section, you will oversee and exercise governance, advisory, oversight functions and render confidentiality and information security support. You will also advise and provide services in connection with all aspects of the confidentiality regime of the Secretariat of the OPCW at large, as well as planning the framework, providing guidelines, instituting measures and implementing all the provisions necessary to guarantee and enforce the fulfilment of the confidentiality regime and the information security policy.
Main Responsibilities
- Implements the OPCW confidentiality regime to ensure compliance with relevant provisions of the Chemical Weapons Convention. Develop and oversee the implementation of Secretariat-wide confidentiality and information security related measures, policies, procedures and working instructions.
- Manages the OCS Confidentiality and Information Security Section.
- Oversees and coordinates all aspects of the OPCW Information & Communications Technology (ICT) security programme, including the implementation of all ICT security measures to ensure the preservation of the confidentiality, integrity and availability of OPCW’s information assets.
- Monitoring the implementation of all security procedures; receiving and investigating (at the direction of the Director-General and Head of OCS) security incident reports, assessing and actioning security vulnerabilities weak spots in security.
- Performing auditing activities on the Secure Critical Network (SCN); determining the existence of and compliance with relevant policies and procedures and recommending improvements to system security and existing control measures.
- Implements the OPCW confidentiality training and awareness programme.
- Liaise directly with the relevant OPCW Senior Management regarding Information Security Policy within the wider OPCW Information Management Policy Framework.
- Liaise directly with the OPCW external Security Audit & Assessment Team (SAAT) to coordinate and plan all ICT audit activities.
- Implement a hands-on approach to confidentiality and information security, focused on supporting the Organisation in the execution of its mandate.
- Undertake duties as Acting Head or Officer in Charge of OCS in the absence of Head of OCS.
Qualifications and Experience
Education
Essential :
Advanced university degree in Computer Science, Information Management, Risk Management or similar graduate discipline. A first level degree with at least 9 years of relevant experience can be excepted in lieu of an advanced degree.
Desirable : Certification in Leadership
Required Certification (if applicable) : Additional Professional qualification(s) in information security, such as CISSP, CISA, CISM certification, along with strong technical (ICT) security skills and demonstrable experience in the design / implementation of secure IT environments are a must.
Knowledge and Experience
Essential :
At least 7 years of progressively responsible and recent related experience in leadership, administration and management of the IT security function in large (international) organizations, including the supervision of all aspects of ICT security operations;
Substantial experience in development and implementation of ICT and information security policies, standards and procedures.Recent and well-rounded supervisory experience with responsibilities in a classified or sensitive working environment to a level of at least SECRET.Understanding key concepts of designing and running classified systems including cryptographic assurance, secure thin client architectures and compartmentalisation.Solid understanding of telecoms related security concepts (endpoint defence, packet switched networks) in a sensitive environment.Experience in leading risk based ICT security operations and conducting security risk assessments.Desirable :
Experience in implementing and / or auditing information security programmes based on ISO 27001 / 27002 and a detailed knowledge of other IT security standards is highly desirable.Experience in accreditation and assurance programmes from a national security perspective.Skills and Competencies
Demonstrated leadership with a focus to assure business results are achieved through and with people.Ability to deal with complex issues and interpret procedures and guidelines in order to adapt them to cover complex situations.Proven ability to work effectively under pressure, displaying sound initiative and good personal judgement.Proven ability to learn quickly and thoroughly while continually recognizing and adapting to changing conditions is critical.Ability to deliver training as necessary and to prepare documents of a technical nature.Excellent communications skills, including the ability to draft and edit professional documents in the English language, are required.Personal qualities must include tact, discretion, accuracy and the ability to work harmoniously in a multi-national environment.Ability to translate technical concepts into plain language to enable decision makers make the right decision.Advanced computer skills.Languages
Fluency in English is essential and a good working knowledge of one of the other official languages (Arabic, Chinese, French, Russian, and Spanish) is desirable.