Information and Communications Technology (ICT) Officer (Security Operating Center Analyst) (C)

IOM; Valencia; Presencial; EUR 55.000 - 75.000; Jornada completa

Descripción de la vacante

The International Organization for Migration (IOM) seeks a Security Operating Center (SOC) Analyst to monitor, detect, analyze, escalate, and respond to cybersecurity threats. The role includes 24x7 incident response, alert triage, log management, and collaboration to uphold security requirements across systems.

Requirements include a Master's degree or equivalent, CISSP/CISM/CISA (Security+ acceptable), and strong experience with SIEM (Microsoft Sentinel), DLP, IAM, and Power BI.

Formación

• A Master's degree or equivalent with 4+ years of relevant experience, or a Bachelor's with 6+ years.
• Certifications such as CISSP, CISM, CISA or Security+ are required/desirable.
• Experience with UN or humanitarian organizations is a plus.

Responsabilidades

• Review and handle cybersecurity alerts and incidents via the ticketing system.
• Provide 24x7 incident response coverage and collaborate with diverse staff for coordinated responses.
• Maintain the Global CSIRT website and prepare comprehensive incident reports.
• Conduct internal log analysis and create dashboards using Microsoft Sentinel and Power BI.
• Manage and optimize cybersecurity tools; collect inventory information and support audits.
• Review security policies against standards; conduct vulnerability assessments and organize training.

Conocimientos

Microsoft Sentinel

Defender for Vulnerability Management

Power BI

CSIRT

Incident response

Analytical skills

Communication skills

Risk assessment

Security policies

Educación

Master's degree in Computer Science/Information Technology/Cybersecurity

Bachelor's degree with 6 years of relevant experience

Essential certifications: CompTIA Security+, CISSP, CISM, or CISA

Herramientas

SIEM

Email Security Gateway

DLP

IAM

Endpoint protection

Cloud security (Azure, AWS)

Descripción del empleo

Organizational context: Established in 1951, the International Organization for Migration (IOM) is a UN-related agency promoting humane and orderly migration. The Security Operating Center (SOC) Analyst role operates within the Information Security & Risk Management Unit, reporting to the Information Security Officer, and contributes to ensuring cybersecurity threats are monitored, detected, analyzed, escalated, and responded to effectively.

Job purpose: The Security Operating Center (SOC) Analyst is responsible for ensuring the timely and effective monitoring, detection, analysis, escalation, and response to cybersecurity threats. This role involves continuous security monitoring using various tools, alert triage, incident detection and response, threat hunting, log management, and documentation. The analyst will collaborate with internal teams to maintain security requirements throughout system lifecycles and contribute to the overall security posture of the organization, supporting IOM's mission to promote humane and orderly migration.

Responsibilities: The SOC Analyst will review and handle cybersecurity alerts, responding to incidents via the ticketing system and providing 24x7 incident response coverage. Responsibilities include collaborating with diverse IOM staff for coordinated response, maintaining the Global CSIRT website, and preparing comprehensive incident reports. The role involves conducting internal log analysis, creating dashboards using Microsoft Sentinel and Power BI, and managing/optimizing cybersecurity tools. Additionally, the analyst will collect inventory information, support project initiatives like DLP and AI applications, assist with audits, review security policies against standards, conduct vulnerability assessments, and organize training sessions to enhance incident preparedness.

Education: A Master’s degree in Computer Science, Information Technology, Cybersecurity, or a related field with four years of relevant experience, or a University degree with six years of relevant experience. Essential certifications include CompTIA Security+, CISSP, CISM, or CISA. Desirable certifications include NIST Cybersecurity Framework Practitioner, ISO 27001 Lead, or CIS Controls.

Work experience: Experience is required with security technologies such as SIEM, Email Security Gateway, DLP, IAM, endpoint protection, and cloud security controls (Azure, AWS). The role also requires experience collaborating with business and technical teams to develop secure solutions and experience working within humanitarian, development, or United Nations organizations.

Skills: Advanced experience with Microsoft Sentinel and Microsoft Defender for Vulnerability Management. Proficiency in Power BI for dashboard creation and reporting. Proven cybersecurity incident response team (CSIRT) experience, including incident handling and playbook development. Knowledge of NIST 800-61 and ISO-27035 frameworks. Strong analytical, problem-solving, and communication skills, with the ability to articulate technical concepts to non-technical audiences. Experience in risk assessments, security audits, and developing security policies.

Required languages: Arabic, English, French, Russian, Spanish

Desired languages: