_____________________________________________________________
This selection exercise may be used to generate a roster of pre-approved candidates to address future staffing needs for similar functions in any of the Departments and Offices of the Organization.
IMPORTANT NOTICE REGARDING APPLICATION DEADLINE: Please note that the closing date for submission of applications is indicated in local time as per the time zone of the applicant's location.
Duration
The foreseen Development Reassignment duration dates are 01 September 2026 (or as soon as possible after that date) to 31 December 2026, with possibility of further extension.
Organizational Setting
The Department of Safeguards carries out the IAEA’s duties and responsibilities as the world’s nuclear inspectorate, supporting global efforts to stop the spread of nuclear weapons. The primary role of the Department is to develop and implement IAEA safeguards to ensure that there is no diversion of declared nuclear material from peaceful activities and no indications of undeclared nuclear material or activities in a State as a whole.
The Department comprises nuclear safeguards inspectors, responsible for carrying out inspections and verifications of all-safeguards relevant information for nuclear facilities in over 180 States; and technical staff responsible for a wide range of activities including: developing concepts and approaches for implementing safeguards; developing and maintaining safeguards equipment; providing analytical and laboratory services for sample analysis; collecting, evaluating and analysing safeguards-relevant information; providing information and communication technology infrastructure and services; and providing programme coordination support.
The Office of Information and Communication Systems (SGIS) is responsible for the provision of secure Information and Communication Technology (ICT) services that enable the Department of Safeguards to deliver on its mandate. Major services provided by SGIS include provision of information technology project management services; development and maintenance of specialized ICT solutions; operation of resilient ICT infrastructure; provision of customer support services; and protection of safeguards information. In partnership with other organizational entities, SGIS is responsible for planning and implementing ICT strategies as well as promoting ICT standards.
Main Purpose
Reporting to the Section Head, the Senior System Security Specialist provides specialized leadership and guidance to Member States and the Department of Safeguards to reduce security vulnerabilities by designing and applying effective security controls in Safeguards products. In particular, the Senior System Security Specialist leads a team responsible for security controls, such as the Safeguards identity and authorization systems, which are used directly or indirectly to protect classified or higher information.
Role
The Senior System Security Specialist is: (1) an innovator, developing new strategies and policies to secure our IT products; (2) a leader, leading a team to coordinate with Member States and the Department of Safeguards to establish and unify security controls across all software, systems and networks; (3) an expert for IT identity and access management systems; (4) a senior software and infrastructure engineer, specifying, designing and ensuring correct implementation.
Functions / Key Results Expected
* Lead a team responsible for the design and development of innovative solutions which ensure that security risks are reduced across all software products and services.
* Provide specialized advice in information security to mitigate breaches and develop new policies, strategies, and solutions to reduce security vulnerabilities.
* Advocate and champion our security policies, procedures, and tools through clear communication initiatives and strategies.
* Develops risk measurement criteria consistent with the Department’s mission, which will enable the organization to determine where to effectively apply security controls.
* Evaluate new IT technical architectures based on that risk measurement criteria.
* Provide advice and expertise in all aspects of application security to ensure standards compliance.
* Build partnerships with Member States and various development teams to obtain consensus and to find appropriate solutions on information security initiatives.
* Perform all other related duties as assigned.
Competencies and Expertise
Core Competencies(Competency Framework)
| Name | Definition |
|---|---|
| Communication | Communicates orally and in writing in a clear, concise and impartial manner. Takes time to listen to and understand the perspectives of others and proposes solutions. |
| Achieving Results | Takes initiative in defining realistic outputs and clarifying roles, responsibilities and expected results in the context of the Department/Division’s programme. Evaluates his/her results realistically, drawing conclusions from lessons learned. |
| Teamwork | Actively contributes to achieving team results. Supports team decisions. |
| Planning and Organizing | Plans and organizes his/her own work in support of achieving the team or Section’s priorities. Takes into account potential changes and proposes contingency plans. |
Functional Competencies
| Name | Definition |
|---|---|
| Client orientation | Helps clients to analyse their needs. Seeks to understand service needs from the client’s perspective and ensure that the client’s standards are met. |
| Judgement/decision making | Consults with supervisor/manager and takes decisions in full compliance with the Agency’s regulations and rules. Makes decisions reflecting best practice and professional theories and standards. |
| Technical/scientific credibility | Ensures that work is in compliance with internationally accepted professional standards and scientific methods. Provides scientifically/technically accepted information that is credible and reliable. |
Required Expertise
| Function | Name | Expertise Description |
|---|---|---|
| Information Technology | Computer Programming | In depth knowledge in web development (ASP.NET, HTML5, JavaScript, and JavaScript frameworks) and extensive expertise in programming. |
| Information Management | Information Access Management | Expert in access and authorization technologies and policies. |
Asset Expertise
| Function | Name | Expertise Description |
|---|---|---|
| Information Technology | Application Architecture | Ability in designing system architectures that incorporate risk and threat assessments. |
| Information Technology | IT Security | Expert in information security and secure coding practices. |
| Information Technology | Software Engineering | Through understanding of software engineering lifecycle, Agile development and DevOps. |
Qualifications, Experience and Language skills
Master's Degree - Advanced university degree in Computer Science, Information Systems, or Engineering.
Bachelor's Degree - First level university degree in Computer Science, Information Systems, or Engineering plus 2 years of relevant work experience may be considered in lieu of the Advanced university degree.
Other - Advanced certifications in security, identity and access management is an asset (e.g. CISSP).
* A minimum of 7 years of relevant practical experience in the all of the Expertise areas listed; of which 5 years of Computer Programming experience in a service oriented environment; of which 3 years of Identity and Access management development; of which 3 years of Network Engineering experience, preferably in a complex network.
* Strong interpersonal skills with the ability to work effectively and efficiently across multiple projects and teams simultaneously, in multidisciplinary/multicultural teams, with sensitivity for respect and diversity.
* Strong communications and presentation skills, including the ability to present to internal/external technical/non-technical audiences.
* Experience designing classified information systems is a plus.
Excellent oral and written command of English. Knowledge of other official IAEA languages (Arabic, Chinese, French, Russian and Spanish) is an asset.
_________________________________________________________________
This is a Development Reassignment (DR) opportunity in line with the staff mobility procedures. Subject to the conditions set out in those procedures, staff members who hold a fixed-term contract on a long-term basis or a fixed term contract and who have completed at least three years of uninterrupted service in the Agency are eligible for a DR. For further information about DRs, please contact MTHR.