Chief Information Security Officer (CISO) Re-advertisement

The UNOPS ICT Unit is part of the Finance Group within UNOPS and is responsible for architecting, designing, delivering, and managing all UNOPS ICT infrastructure and business applications.  The ICT function within UNOPS is currently undergoing a transformation from being a service provider to becoming a strategic business partner.  This transformation requires addressing several foundational aspects of enterprise IT as well as embedding innovation and harnessing of cutting-edge technology to deliver solutions to UNOPS that truly address business needs as well as provide greater effectiveness, efficiency and differentiation to UNOPS products and services.  ICT’s place within the UNOPS Finance Group also enables the transformation by ensuring that IT decisions are made with a strategic focus on costs, benefits, and risks. 

We are looking for highly skilled and motivated individuals who will help us position UNOPS ICT as a truly transformative part of UNOPS.

1.     Ensure corporate risk management and mitigation actions as well as Compliance Requirements to safeguard the organisation against information security risks:

• Manage the corporate risk and control assessment reporting process as well as manage and maintain infrastructure elements (e.g. management reporting, including reporting to senior management).
• Manage the implementation of all aspects of the risk function, including implementation of processes, tools and systems to identify, assess, measure, manage, monitor and report risks.
• Assist in the development of and manage processes to identify and evaluate business areas' risks and risk and control self-assessments.
• Manage the process for developing risk policies and procedures, risk limits and approval authorities.
• Monitor major and critical risk issues.
• Manage the process for elevating control risks to more senior levels when appropriate.
• Share knowledge and develop training programmes for relevant personnel in performing risk assessment.
• Coordinate the process of risk assessment
• Propose the selection of safeguards and deadlines for safeguards implementation.
• Develop the list of interested parties related to information security and their requirements.
• Coordinate all efforts related to personal data protection.

2.     Develop and document  information security policies and guidelines, as follows:

• Draft primary information security documents, such as Information security policy, Classification policy, Access control policy, Acceptable use of assets, Risk assessment and risk treatment methodology, Statement of Applicability, Risk treatment plan, etc.
• Maintains responsibility for reviewing and continually updating key information security-related policies and guidelines.
• Propose and monitor Improvements in information security
• Manage the maintenance and inventory of all key information assets.
• Propose corrective actions on nonconformities to information security policies and monitor their implementation.
• if the corrective actions have eliminated the cause of nonconformities

3.     Report to and advise top management on information security-related areas, as follows:

• Notify top management about key risks and advise top executives on all information security-related matters.
• Communicate and be an advocate on the benefits of information security.
• Propose information security objectives.
• Report on the results of measuring information security-related risks.
• Propose security improvements and corrective actions.
• Report on key requirements of interested parties.
• Report on the implementation of safeguards and their effectiveness.

• Advanced degree in Computer Sciences, Information and Communications Technology or related discipline.
• A combination of a Bachelor’s degree in Computer Science, Information and Communications Technology or related discipline with 9 years of relevant work experience may be accepted in lieu of the education requirements outlined above.
• Certified Information Security Manager (CISM) certification or Certified Information Systems Security Professional (CISSP) certification highly desired.

• A minimum of 7 years of progressively responsible experience in technical and/or managerial roles in information technology and/or information-security management in a large international and/or corporate organization is required.
• Within these 7 years, a minimum of 4 years’ responsibility in managing information-security systems or programmes of complex organizations in diverse geographic settings is required.
• Experience in UN system organizations is desirable.

• Please note that the closing date is midnight Copenhagen time
• Applications received after the closing date will not be considered.
• Only those candidates that are short-listed for interviews will be notified.
• Qualified female candidates are strongly encouraged to apply.
• For staff positions only, UNOPS reserves the right to appoint a candidate at a lower level than the advertised level of the post
• The incumbent is responsible to abide by security policies, administrative instructions, plans and procedures of the UN Security Management System and that of UNOPS.  

It is the policy of UNOPS to conduct background checks on all potential recruits/interns. Recruitment/internship in UNOPS is contingent on the results of such checks.

UNOPS supports the successful implementation of its partners’ peacebuilding, humanitarian and development projects around the world. Our mission is to serve people in need by expanding the ability of the United Nations, governments and other partners to manage projects, infrastructure and procurement in a sustainable and efficient manner.

Working in some of the world’s most challenging environments, our vision is to advance sustainable implementation practices, always satisfying or surpassing our partners’ expectations.

With over 7,000 personnel spread across 80 countries, UNOPS offers its partners the logistical, technical and management knowledge they need, wherever they need it.

A flexible structure and global reach means that we can quickly respond to our partners' needs, while offering the benefits of economies of scale.