Cybersecurity Advisory Consultant (IAM & Endpoint Protection)

WFP; Roma; In loco; EUR 85.000 - 120.000; Tempo pieno

Descrizione del lavoro

The World Food Programme (WFP) in Rome seeks a Cybersecurity Advisory Consultant (IAM & Endpoint Protection) to strengthen our security posture across IT systems and services. You will lead risk assessments, oversee Authorization to Operate (ATO) processes, and design security architectures embedding controls by design.

You will focus on IAM enhancements, define endpoint protection baselines, and guide stakeholders on emerging technologies and Zero Trust implementations, mentoring junior staff

Competenze

• Solid IT security skills with academic and professional experience.
• Expertise in Identity and Access Management (IAM).
• Experience with endpoint protection technologies (EDR, MDM) and Zero Trust security.
• Understanding of IT architecture, risk assessment and project management.
• Experience in multinational organizations and relevant certifications beneficial.

Mansioni

• Conduct comprehensive risk assessments and lead the Authorization to Operate (ATO) process.
• Design, review and oversee security architectures for applications, platforms and cloud services.
• Embed security controls by design and strengthen IAM and endpoint protections.
• Guide integration of identity and device-based controls and Zero Trust concepts.
• Develop cybersecurity procedures, governance frameworks and reports for stakeholders.
• Mentor junior team members and represent cybersecurity in forums.

Conoscenze

Cybersecurity risk assessment

Identity and Access Management (IAM)

Endpoint protection

Security architecture

Cloud security

Zero Trust

SSDLC

IT audit

Project management

Stakeholder relationship management

Threat and vulnerability assessment

AI security concepts

Formazione

Degree in Computer Science/Engineering or related STEM

Strumenti

EDR tools

MDM solutions

Descrizione del lavoro

Organizational context

The World Food Programme (WFP) is the world's largest humanitarian organization, dedicated to saving lives and building a pathway to peace, stability, and prosperity. WFP utilizes food assistance to support people recovering from conflict, disasters, and climate change impacts. The organization values diversity, inclusion, and invests in employee development, offering a dynamic and impactful career.

Job purpose

The Cybersecurity Advisory Consultant (IAM & Endpoint Protection) will play a crucial role in strengthening WFP's cybersecurity posture by providing expert advisory services. This role involves conducting risk assessments, leading Authorization to Operate (ATO) processes, and designing/reviewing security architectures for IT systems and services. The consultant will focus on enhancing identity and access management controls, defining endpoint protection requirements, and ensuring security is embedded by design in applications and cloud services. Responsibilities include assessing and strengthening IAM across various platforms, defining endpoint security baselines, and providing guidance on integrating identity and device-based controls. The consultant will also contribute to developing and improving cybersecurity procedures, researching innovative technologies, and advising stakeholders on cybersecurity risks associated with emerging technologies, ultimately safeguarding WFP's information assets and systems.

Responsibilities

The Cybersecurity Advisory Consultant will play a crucial role in enhancing the World Food Programme's (WFP) information security posture. Key responsibilities include conducting comprehensive risk assessments and leading the Authorization to Operate (ATO) process for IT systems, ensuring security risks are identified, evaluated, and mitigated. The consultant will design, review, and oversee security architectures for applications, platforms, and cloud services, embedding security controls by design and aligning with organizational policies and best practices. A significant focus will be on assessing and strengthening identity and access management (IAM) controls, including authentication, authorization, and privileged access management. Furthermore, the role involves defining and reviewing endpoint protection requirements for corporate and mobile devices, addressing compliance, hardening, threat protection, and monitoring. The consultant will provide expert guidance on integrating identity and endpoint controls, advise on cybersecurity risks associated with emerging technologies like cloud services and AI, and lead the development and continuous improvement of cybersecurity procedures and governance frameworks. They will also mentor junior team members, represent the cybersecurity branch in various forums, and prepare high-quality reports and recommendations for both technical and business audiences. This role is vital for protecting WFP's information assets and ensuring compliance with cybersecurity standards across the organization.

Education

A degree in Computer Science, Engineering, or a related STEM discipline is required. Equivalent work experience in a relevant field may also be considered.

Work experience

Requires solid IT security skills with academic and professional experience, and expertise in IT SDLC. Strong knowledge of Identity and Access Management (IAM) is essential. Experience with endpoint protection technologies (EDR, MDM, configuration hardening) and designing identity/device-based security controls for Zero Trust approaches is needed. Understanding of IT architecture, stakeholder management, cybersecurity risk assessment, and project management is also required. Experience in multinational organizations and relevant certifications are beneficial.

Skills

Cybersecurity risk assessment, Authorization to Operate (ATO) process, Application security, Identity and Access Management (IAM), Endpoint protection, Security architecture, Cloud security, Zero Trust principles, Risk-based access management, Secure Software Development Lifecycle (SSDLC), IT audit, Project management, Stakeholder relationship management, Threat and vulnerability assessment, AI security concepts

Required languages

English, Arabic, Chinese (Mandarin), French, Russian, Spanish, Portuguese

Desired languages

English, Arabic, Chinese (Mandarin), French, Russian, Spanish, Portuguese