Information Security Officer (Cybersecurity) (P-3)

A Short-Term Appointment is used to recruit staff to meet short-term needs. The duration of this assignment is provided above. The maximum duration of a short-term appointment including extensions shall not exceed 12 months.

A Short-Term Appointment does not carry any expectancy, legal or otherwise, of renewal and shall not be converted to any other type of appointment.

A current ICC staff member who is holding a fixed-term appointment may apply for any short-term position. Where a current ICC staff member is selected to a short-term position, he or she will be temporarily assigned to the position in line with section 4.10 of ICC/AI/2016/001.

The terms and conditions of service for staff members appointed under a short-term appointment are governed by ICC/AI/2016/001.

Organisational Context

The Information, Knowledge and Evidence Management Section (IKEMS), headed by an Information Management Coordinator, combines the OTP’s information, solutions development, digital forensics and evidence management operations into one consolidated section. IKEMS aims to maintain a coordinated, flexible and operationally responsive IKEM support capacity throughout the OTP, in order to support the full spectrum of the OTP’s information and evidence operations.

Duties and Responsibilities

Reporting to the Head, Cyber Unit IKEMS, the incumbent performs the following tasks:

• Assists the Head of CU in the implementation of the cybersecurity strategy and the identification of procurement requirements;
• Contributes to the development and reviews of policies and procedures in the area of cybersecurity, disaster mitigation and recovery, and business continuity;
• Manages projects involving security threat studies, systems analysis, design, development, and implementation of new, moderately complex systems to secure the information of The Office; provides Information security support to projects and activities of The Office;
• Provides support to digital forensic investigations conducted by the Cyber Unit, and other related activities that may arise during security incident response activities;
• Keeps abreast of new developments and trends regarding enhancing information security technology through constant learning and researching; researches, analyses and evaluates new technologies and makes recommendations for their deployment;
• Monitors and audits information security controls while measuring results and responding to new risks. Gathers, develops and organizes evidence for security audits;
• Executes day-to-day cybersecurity operations tasks and takes care of related projects, making sure they meet objectives;
• Provides guidance to and may oversee the work of consultants and interns;
• Facilitates communications between the Corporate Information Security Officer (CISO), the OTP and other key internal/external stakeholders, on matters related to information security;
• Performs other duties as required.

Essential Qualifications

Education:

Advanced university degree preferably in computer science, information management systems, computer engineering, cyber forensics or a related field, is required. A first-level university degree in combination with two additional years of qualifying experience is accepted in lieu of the advanced university degree

Relevant information security certification, such as Certified Information Security Auditor, Certified Information Security Manager, Certified Information Security Systems Professional or Global Information Assurance Certification (GIAC) certificates, is desirable.

Experience:

A minimum of 5 years (7 years with a first level university degree) of progressively responsible relevant experience in IT and Telecommunications security and risk management, is required.

At least 2 years of experience in implementing technology solutions for identity and access management, encryption, vulnerability management, intrusion monitoring, detection and response, is required.

Knowledge, skills and abilities:

• Proven ability to plan, organize and manage operations. Ability to forecast operational requirements based on changing needs and circumstances;
• Knowledge in investigations / fugitive tracking, with proven ability to analyse information and to make valid recommendations with respect to those reports;
• Excellent drafting ability and communication skills, both oral and written; ability to prepare written reports that are clear, concise and meaningful;
• Good interpersonal skills; demonstrated ability to work in a multicultural, multi-ethnic environment and to maintain effective working relations with people of different national and cultural backgrounds. Demonstrated ability to maintain and encourage a collaborative team environment;
• Reputation for dealing honestly and openly; recognized and highly respected by peers, clients and staff.

Knowledge of languages:

Proficiency in one of the working languages of the Court, English or French, is required. Working knowledge of the other is considered an asset. Knowledge of another official language of the Court (Arabic, Chinese, Russian and Spanish) is considered an asset.