Information Security Advisor

Human Rights Watch; United States; Hybrid; USD 100,000 - 150,000; Full time

Job summary

Human Rights Watch is seeking an Information Security Advisor to partner with staff across the organization to understand and manage security risks. The role emphasizes practical guidance, training, and day-to-day security support in a highly collaborative environment.

Reporting to the Director of Information Security, this position involves incident response support, security awareness program leadership, and guidance on the use of Microsoft 365, AI tools, and other technologies.

Qualifications

• Five or more years in information security or related fields.
• Ability to translate security concepts for non-technical staff and leadership.
• Experience delivering security training and programs across dispersed teams.
• Familiarity with Microsoft 365 security controls and governance.

Responsibilities

• Staff Security Support & Guidance: provide practical security advice and support to staff.
• Security Awareness, Training & Guidance: lead awareness programs and develop training content.
• Incident Response & Microsoft Security Operations: assist in incident handling and use Microsoft security tools.
• Policy and Risk Management: help implement policies and assess security risks for new technologies.
• Collaboration: work with IT, Legal, HR and other teams to strengthen security posture.

Skills

Security awareness training

Microsoft 365 security

Incident response

Risk assessment

Communication skills

Cross-functional collaboration

Non-technical training delivery

Windows and Apple device support

AI tools security

Education

Bachelor's degree or equivalent

Tools

Microsoft Defender XDR

Microsoft Purview

Microsoft Sentinel

Microsoft Entra ID

Microsoft Intune

Job description

FULL-TIME JOB VACANCY
INFORMATION SECURITY ADVISOR
Information Security Program
Multiple Locations Considered
Application Deadline: August 23, 2026

The Information Security Program at Human Rights Watch (HRW) supports the organization in working safely and securely in an increasingly complex digital environment. Our primary focus is helping staff understand and manage security risks, incorporate security into everyday work, and confidently use technology in ways that support HRW's mission.

The Information Security Program is seeking an Information Security Advisor to serve as a trusted security partner for staff across the organization. This is a highly collaborative, people-focused role centered on helping staff understand and manage security risks through practical guidance, training, awareness, and day-to-day support.

Working closely with the Director of Information Security, IT Ops, and colleagues across HRW, the Information Security Advisor will support staff in making informed security decisions, provide guidance for higher-risk activities and travel, and lead the development of security training, learning resources, and awareness initiatives. The role also contributes to incident response, governance, and the secure adoption of new technologies, helping strengthen HRW's overall security posture while ensuring security remains practical, approachable, and aligned with the organization's mission.

This position reports to the Director of Information Security, based in the US. This role will be based within commuting distance of the following HRW offices, and must be willing to work from the office on an as-needed basis: Brussels, London, Stockholm, Amsterdam, Beirut, or Johannesburg.

Responsibilities

Staff Security Support & Guidance

• Serve as a trusted point of contact for staff seeking information security advice and support.
• Provide practical security guidance that enables staff to carry out their work safely while supporting HRW's operational needs.
• Support staff preparing for higher-risk travel, field work, and other sensitive activities.
• Conduct security consultations for projects, workflows, technologies, and operational initiatives.
• Assist staff in securely using Microsoft 365, AI tools, and other technologies adopted by HRW.
• Build trusted working relationships across the organization and promote a collaborative approach to information security.

Security Awareness, Training & Guidance

• Lead HRW's information security awareness and education program.
• Design, develop, and deliver engaging security training for staff globally.
• Develop and maintain security learning content within HRW's Learning Management System.
• Create practical guidance, playbooks, knowledge articles, FAQs, and self-service resources.
• Plan and coordinate security awareness campaigns, phishing simulations, and educational initiatives.
• Measure the effectiveness of awareness activities and continuously improve staff engagement and learning outcomes.
• Support the implementation of HRW's information security policies, standards, and governance framework.
• Help staff understand and apply information security policies in their day-to-day work.
• Participate in security reviews of new technologies, platforms, and services, including AI tools.
• Assist with information security risk assessments and provide practical recommendations to reduce risk.
• Contribute to the development of guidance for the secure and responsible use of emerging technologies.

Incident Response & Microsoft Security Operations

• Support staff in responding to information security incidents, providing practical guidance to help contain issues, recover safely, and learn from incidents.
• Use Microsoft 365 security tools and related systems to investigate issues, understand risks, and support resolution.
• Maintain accurate documentation of incidents, investigations, and lessons learned.
• Work closely with IT, Safety and Security, Legal, Human Resources, and other teams to strengthen HRW's security posture.
• Contribute to improving security processes, procedures, and documentation.
• Develop reports, metrics, and dashboards that measure security activities and program effectiveness.
• Stay informed about emerging threats and recommend improvements to HRW's security capabilities.
• Perform other duties as required.

Qualifications

Education: A level of education that, when combined with professional experience, demonstrates the ability to contribute meaningfully to HRW's Information Security Program. Candidates with relevant academic qualifications or industry certifications are encouraged to apply, but these are not required.

Experience: A minimum of five years of professional experience in information security, IT security, or a related field.

Required Skills and Knowledge

• Experience supporting users and helping non-technical audiences understand and manage security risks.
• Excellent written and verbal communication skills, with the ability to explain technical concepts in clear, practical language.
• Excellent interpersonal skills and the ability to build trusted relationships across technical and non-technical teams.
• Experience designing or delivering security awareness, training, or educational programs.
• Ability to evaluate technologies, workflows, and operational practices from a security perspective.
• Understanding of information security principles, risk management, and common security frameworks.
• Experience supporting or participating in the investigation and response to information security incidents.
• Working knowledge of Microsoft 365 security and identity management.
• Experience securing and supporting Microsoft Windows devices. Experience supporting Apple devices is highly desirable.
• Ability to manage multiple priorities while working independently and collaboratively.
• Ability to work respectfully and effectively with colleagues from diverse cultural and professional backgrounds.
• Demonstrated curiosity, sound judgment, and a strong commitment to helping others work securely.
• Working knowledge of the risks associated with human rights, civil society, journalism, or similarly high-risk environments is highly desirable

Additional Qualifications

• Experience supporting global or distributed organizations.
• Experience administering or operating Microsoft Defender XDR, Microsoft Purview, Microsoft Sentinel, Microsoft Entra ID, Microsoft Intune, or related Microsoft security services.
• Experience evaluating AI tools or advising on the secure and responsible use of AI technologies.
• Experience contributing to information security governance, policy implementation, or risk management initiatives.
• Fluency or proficiency in one or more languages in addition to English.
• Demonstrated commitment to continuous learning and knowledge sharing through research, speaking, writing, community participation, or open source contributions.

Other:HRW is only able to sponsor work authorization for this role if the successful candidate is based in either the UK or Belgium. Candidates based in other locations must possess valid work authorization for their location.

Salary and Benefits:HRW seeks exceptional applicants and offers comprehensive compensation and benefits.

Human Rights Watch is strong because it is diverse. We actively seek a diverse applicant pool and encourage candidates of all backgrounds to apply. Human Rights Watch does not discriminate on the basis of disability, age, gender identity and expression, national origin, race and ethnicity, religious beliefs, sexual orientation, or criminal record. We welcome all kinds of diversity. Our employees include people who are parents and nonparents, the self-taught and university educated, and from a wide span of socio-economic backgrounds and perspectives on the world. Human Rights Watch is an equal opportunity employer.

Human Rights Watch is an international human rights monitoring and advocacy organization known for its in-depth investigations, its incisive and timely reporting, its innovative and high-profile advocacy campaigns, and its success in changing the human rights-related policies and practices of influential governments and international institutions.