Information Security Advisor

Human Rights Watch; North Carolina; On-site; USD 90,000 - 150,000; Full time

Job summary

Human Rights Watch seeks an Information Security Advisor to partner with staff, providing practical guidance to manage security risks across the organization. The role emphasizes training, awareness, and day-to-day security support with a focus on Microsoft 365 and emerging technologies.

Reporting to the Director of Information Security, the position requires collaboration across IT, Safety, Legal, HR, and other teams, and may involve travel to offices globally.

Qualifications

• Experience translating complex security concepts for non-technical staff.
• Excellent written and verbal communication skills for a global audience.
• Ability to build trusted relationships across technical and non-technical teams.
• Experience designing or delivering security awareness or training programs.
• Ability to evaluate technologies, workflows and practices from a security lens.
• Knowledge of information security principles and risk management.

Responsibilities

• Serve as a trusted security partner for HRW staff and provide practical guidance.
• Lead security awareness and education program design, development and delivery.
• Develop learning content within HRW's LMS and create playbooks and FAQs.
• Plan phishing simulations and awareness campaigns to improve engagement.
• Support implementation of security policies and governance framework.
• Contribute to incident response and technology risk assessments.

Skills

User education guidance

Clear technical communication

Interpersonal collaboration

Security awareness design

Risk-based decision making

Incident response knowledge

Microsoft 365 security understanding

Windows/macOS security support

Education

Bachelor's degree or equivalent

Tools

Microsoft Defender XDR

Microsoft Purview

Microsoft Sentinel

Microsoft Entra ID

Microsoft Intune

Job description

FULL-TIME JOB VACANCY
INFORMATION SECURITY ADVISOR
Information Security Program
Multiple Locations Considered
Application Deadline: August 23, 2026

The Information Security Program at Human Rights Watch (HRW) supports the organization in working safely and securely in an increasingly complex digital environment. Our primary focus is helping staff understand and manage security risks, incorporate security into everyday work, and confidently use technology in ways that support HRW’s mission.

The Information Security Program is seeking an Information Security Advisor to serve as a trusted security partner for staff across the organization. This is a highly collaborative, people-focused role centered on helping staff understand and manage security risks through practical guidance, training, awareness, and day-to-day support.

Working closely with the Director of Information Security, IT Ops, and colleagues across HRW, the Information Security Advisor will support staff in making informed security decisions, provide guidance for higher-risk activities and travel, and lead the development of security training, learning resources, and awareness initiatives. The role also contributes to incident response, governance, and the secure adoption of new technologies, helping strengthen HRW’s overall security posture while ensuring security remains practical, approachable, and aligned with the organization’s mission.

This position reports to the Director of Information Security, based in the US. This role will be based within commuting distance of the following HRW offices, and must be willing to work from the office on an as-needed basis: Brussels, London, Stockholm, Amsterdam, Beirut, or Johannesburg.

Responsibilities

Staff Security Support & Guidance

1. Serve as a trusted point of contact for staff seeking information security advice and support.
2. Provide practical security guidance that enables staff to carry out their work safely while supporting HRW’s operational needs.
3. Support staff preparing for higher-risk travel, field work, and other sensitive activities.
4. Conduct security consultations for projects, workflows, technologies, and operational initiatives.
5. Assist staff in securely using Microsoft 365, AI tools, and other technologies adopted by HRW.
6. Build trusted working relationships across the organization and promote a collaborative approach to information security.

Security Awareness, Training & Guidance

1. Lead HRW’s information security awareness and education program.
2. Design, develop, and deliver engaging security training for staff globally.
3. Develop and maintain security learning content within HRW’s Learning Management System.
4. Create practical guidance, playbooks, knowledge articles, FAQs, and self-service resources.
5. Plan and coordinate security awareness campaigns, phishing simulations, and educational initiatives.
6. Measure the effectiveness of awareness activities and continuously improve staff engagement and learning outcomes.

Governance, Risk & Technology

1. Support the implementation of HRW’s information security policies, standards, and governance framework.
2. Help staff understand and apply information security policies in their day-to-day work.
3. Participate in security reviews of new technologies, platforms, and services, including AI tools.
4. Assist with information security risk assessments and provide practical recommendations to reduce risk.
5. Contribute to the development of guidance for the secure and responsible use of emerging technologies.

Incident Response & Microsoft Security Operations

1. Support staff in responding to information security incidents, providing practical guidance to help contain issues, recover safely, and learn from incidents.
2. Use Microsoft 365 security tools and related systems to investigate issues, understand risks, and support resolution.
3. Maintain accurate documentation of incidents, investigations, and lessons learned.

Collaboration & Continuous Improvement

1. Work closely with IT, Safety and Security, Legal, Human Resources, and other teams to strengthen HRW’s security posture.
2. Contribute to improving security processes, procedures, and documentation.
3. Develop reports, metrics, and dashboards that measure security activities and program effectiveness.
4. Stay informed about emerging threats and recommend improvements to HRW’s security capabilities.
5. Perform other duties as required.

Qualifications

Education: A level of education that, when combined with professional experience, demonstrates the ability to contribute meaningfully to HRW’s Information Security Program. Candidates with relevant academic qualifications or industry certifications are encouraged to apply, but these are not required.

Experience: A minimum of five years of professional experience in information security, IT security, or a related field.

Required Skills and Knowledge

1. Experience supporting users and helping non-technical audiences understand and manage security risks.
2. Excellent written and verbal communication skills, with the ability to explain technical concepts in clear, practical language.
3. Excellent interpersonal skills and the ability to build trusted relationships across technical and non-technical teams.
4. Experience designing or delivering security awareness, training, or educational programs.
5. Ability to evaluate technologies, workflows, and operational practices from a security perspective.
6. Understanding of information security principles, risk management, and common security frameworks.
7. Experience supporting or participating in the investigation and response to information security incidents.
8. Working knowledge of Microsoft 365 security and identity management.
9. Experience securing and supporting Microsoft Windows devices. Experience supporting Apple devices is highly desirable.
10. Ability to manage multiple priorities while working independently and collaboratively.
11. Ability to work respectfully and effectively with colleagues from diverse cultural and professional backgrounds.
12. Demonstrated curiosity, sound judgment, and a strong commitment to helping others work securely.
13. Working knowledge of the risks associated with human rights, civil society, journalism, or similarly high-risk environments is highly desirable

Additional Qualifications

1. Experience supporting global or distributed organizations.
2. Experience administering or operating Microsoft Defender XDR, Microsoft Purview, Microsoft Sentinel, Microsoft Entra ID, Microsoft Intune, or related Microsoft security services.
3. Experience evaluating AI tools or advising on the secure and responsible use of AI technologies.
4. Experience contributing to information security governance, policy implementation, or risk management initiatives.
5. Fluency or proficiency in one or more languages in addition to English.
6. Demonstrated commitment to continuous learning and knowledge sharing through research, speaking, writing, community participation, or open source contributions.

Other: HRW is only able to sponsor work authorization for this role if the successful candidate is based in either the UK or Belgium. Candidates based in other locations must possess valid work authorization for their location.

Salary and Benefits: HRW seeks exceptional applicants and offers comprehensive compensation and benefits.

Human Rights Watch is strong because it is diverse. We actively seek a diverse applicant pool and encourage candidates of all backgrounds to apply. Human Rights Watch does not discriminate on the basis of disability, age, gender identity and expression, national origin, race and ethnicity, religious beliefs, sexual orientation or criminal record. We welcome all kinds of diversity. Our employees include people who are parents and nonparents, the self-taught and university educated, and from a wide span of socio-economic backgrounds and perspectives on the world. Human Rights Watch is an equal opportunity employer.

Human Rights Watch is an international human rights monitoring and advocacy organization known for its in-depth investigations, its incisive and timely reporting, its innovative and high-profile advocacy campaigns, and its success in changing the human rights-related policies and practices of influential governments and international institutions.