Uganda: ICT Security and Operational Resilience Officer

Background Information - Job-specific

The United Nations Regional Service Center in Entebbe (RSCE) is a shared service centre based in Entebbe, Uganda. The center consolidates administrative and support functions previously located in various field missions in a less volatile, more family friendly regional location, with the goal of providing efficient, client-orientated and scalable services while reducing the missions’ footprints across Africa.

The ICT Security and Operational Resilience Officer will carry out his/her tasks within the Regional Information Security and Compliance unit in the RSCE Regional Field Technology Service (RFTS). Under the overall supervision of UNOPS Senior Programme Manager, the incumbent works under the guidance of the Regional Information Security and Compliance Officer.The incumbent of this position will be a staff member of UNOPS under its full responsibility.

Functional Responsibilities

Under the leadership of the Information Security and Compliance Officer, the incumbent will assume the following responsibilities

• Evaluate existing physical security and safety systems to determine the potential risks and identify possible ICT based integrated mitigation measures
• Perform evaluations of physical security systems and provide recommendations
• Assess and report on regional mission compliance with ICT policies, procedures, standards and guidelines
• Conduct security assessments and devise through reports with findings and recommendations
• Provide training on Integrated physical security systems
• Evaluate physical security documentation and operational activities to ensure they meet requirements
• Ensure that all required and applicable ICT-based security controls have been properly identified, implemented and maintained as intended
• Draft physical ICT risk assessment reports based on findings from the assessment activities
• Provide ICT-based integrated security solution services including physical security, static security, personnel security, facilities security, operations security, and integrated fire safety systems, as well as military grade surveillance and warning systems.
• Manage assigned client projects ensuring proper information flow, leveled expectations and on time deliverables
• Perform on-site Quality Control/Compliance assessments using project management tools and methodology
• Provide client support via conference calls, on-site meetings, and electronic communications
• Participate to the ICT Risk assessments, perform control assessments and risk analysis
• Participate to the review of information security policies, procedures, standards and guidelines
• Perform vulnerability assessments and provide reports with findings and recommendations; monitor compliance to the assessments findings.
• Liaise with regional missions to assist and ensure compliance to the organization’s information security policies and standards
• Participate in the organization of regional workshops and conferences on Information and Physical Security
• Provide assistance on the implementation and maintenance of security tools
• Participate to the delivery of security awareness activities**Impact of Results**

The results of the work of the ICT Security and Operational Resilience Officer impact directly on the delivery of the RFTS services. It will also ensure proper processes and methodologies are followed and implemented according to the latest the industry standards. The incumbent is responsible for ensuring that activities for all regional locations are in line with the overall business targets and UN policies, standards and procedures.

Education/Experience/Language requirements

Education :

• Master's Degree or equivalent in Computer Sciences, Information Security, Physical Security, or a related area.
• A Bachelor’s degree or equivalent with two additional years of qualifying experience may be accepted in lieu of the advanced university degree.

Experience :

• A minimum of 2 years of relevant experience in physical or information security is required
• A minimum of 1 year of experience in performing vulnerability assessments, security analysis, and/or developing mitigation strategies is required
• Professional experience at the international level in the public/private sector is desirable
• Experience with ISO 27000 series of security standards and best-practices is an asset

Language Requirements :

• Fluency in English is required
• Knowledge of a second UN language is highly desirable.

Certifications :

• CompTia Security+CCNA, COBIT, CISM, CRISC, SSCP, CSSLP, ITIL, PRINCE2 or GIAC are desirable

Click on the link below:

https://jobs.unops.org/Pages/ViewVacancy/VADetails.aspx?id=17342