Head, Confidentiality and Information Security

As the Head, Confidentiality & Information Security (CIS) Section, you will oversee and exercise governance, advisory, oversight functions and render confidentiality and information security support. You will also advise and provide services in connection with all aspects of the confidentiality regime of the Secretariat of the OPCW at large, as well as planning the framework, providing guidelines, instituting measures and implementing all the provisions necessary to guarantee and enforce the fulfilment of the confidentiality regime and the information security policy.

Job Summary

The Office of Confidentiality and Security (OCS) sets the framework, provides the guidelines, institutes the measures and implements the provisions necessary to guarantee and enforce the fulfilment of the stringent OPCW confidentiality regime; operational security of the Secretariat's assets; the security of all its electronic systems; the confidentiality of all classified material and its safeguarding.  Whilst the security regime for the protection of personnel, property, operations and information are the responsibility and main objectives of the OCS, more widely OCS delivers security management in support of all OPCW missions and activities.

Main Responsibilities

1. Implements the OPCW confidentiality regime to ensure compliance with relevant provisions of the Chemical Weapons Convention. Develop and oversee the implementation of Secretariat-wide confidentiality and information security related measures, policies, procedures and working instructions.
2. Manages the OCS Confidentiality and Information Security Section.
3. Oversees and coordinates all aspects of the OPCW Information & Communications Technology (ICT) security programme, including the implementation of all ICT security measures to ensure the preservation of the confidentiality, integrity and availability of OPCW’s information assets.
4. Monitoring the implementation of all security procedures; receiving and investigating (at the direction of the Director-General and Head of OCS) security incident reports, assessing and actioning security vulnerabilities weak spots in security. 
5.  Performing auditing activities on the Secure Critical Network (SCN); determining the existence of and compliance with relevant policies and procedures and recommending improvements to system security and existing control measures.
6. Implements the OPCW confidentiality training and awareness programme.
7. Liaise directly with the relevant OPCW Senior Management regarding Information Security Policy within the wider OPCW Information Management Policy Framework.
8. Liaise directly with the OPCW external Security Audit & Assessment Team (SAAT) to coordinate and plan all ICT audit activities. 
9. Implement a hands-on approach to confidentiality and information security, focused on supporting the Organisation in the execution of its mandate.
10. Undertake duties as Acting Head or Officer in Charge of OCS in the absence of Head of OCS.

Qualifications and Experience

Education: 

• Essential: Advanced university degree in Computer Science, Information Management, Risk Management or similar graduate discipline.  A first level degree with at least 9 years of relevant experience can be excepted in lieu of an advanced degree.
• Desirable: Certification in Leadership

Required Certification (if applicable): Additional Professional qualification(s) in information security, such as CISSP, CISA, CISM certification, along with strong technical (ICT) security skills and demonstrable experience in the design/implementation of secure IT environments are a must.

Knowledge and Experience

Essential: At least 7 years of progressively responsible and recent related experience in leadership, administration and management of the IT security function in large (international) organizations, including the supervision of all aspects of ICT security operations;

• Substantial experience in development and implementation of ICT and information security policies, standards and procedures.
• Recent and well-rounded supervisory experience with responsibilities in a classified or sensitive working environment to a level of at least SECRET.
• Understanding key concepts of designing and running classified systems including cryptographic assurance, secure thin client architectures and compartmentalisation.
• Solid understanding of telecoms related security concepts (endpoint defence, packet switched networks) in a sensitive environment.
• Experience in leading risk based ICT security operations and conducting security risk assessments.

Desirable: 

• Experience in implementing and/or auditing information security programmes based on ISO 27001/27002 and a detailed knowledge of other IT security standards is highly desirable.
• Experience in accreditation and assurance programmes from a national security perspective.

Skills and Competencies

• Demonstrated leadership with a focus to assure business results are achieved through and with people.
• Ability to deal with complex issues and interpret procedures and guidelines in order to adapt them to cover complex situations.
• Proven ability to work effectively under pressure, displaying sound initiative and good personal judgement.
• Proven ability to learn quickly and thoroughly while continually recognizing and adapting to changing conditions is critical.
• Ability to deliver training as necessary and to prepare documents of a technical nature.
• Excellent communications skills, including the ability to draft and edit professional documents in the English language, are required.
• Personal qualities must include tact, discretion, accuracy and the ability to work harmoniously in a multi-national environment.
• Ability to translate technical concepts into plain language to enable decision makers make the right decision.
• Advanced computer skills.

Languages

Fluency in English is essential and a good working knowledge of one of the other official languages (Arabic, Chinese, French, Russian, and Spanish) is desirable.

Additional Information

• This fixed-term appointment is for the duration of two years with a six-month probationary period, and is subject to the OPCW Staff Regulations and Interim Staff Rules.
• The OPCW is a non-career organisation with limited staff tenure. The total length of service for Professional staff shall not exceed 7 years.
• The mandatory age of separation at the OPCW is 65 years.
• This fixed-term appointment is for the duration of two years with a six-month probationary period, and is subject to the OPCW Staff Regulations and Interim Staff Rules.
• The OPCW is a non-career organisation with limited staff tenure. The total length of service for Professional staff shall not exceed 7 years.
• The mandatory age of separation at the OPCW is 65 years.
• The Director-General retains the discretion to not make any appointment to this vacancy, to make an appointment at a lower grade, or to make an appointment with a modified job description. Several vacancies may be filled.
• Only fully completed applications submitted before the closing date and through OPCW CandidateSpace will be considered. Only applicants under serious consideration for a post will be contacted.
• Fixed-term staff members participate in the OPCW Provident Fund. A monthly staff contribution is met with a doubled amount by the OPCW under the provisions for social security. As the OPCW is exploring membership of the United Nations Joint Staff Pension Fund (UNJSPF), staff participation in the Provident Fund may be replaced by participation in the UNJSPF effective 1 January 2025.
• Applications from qualified female candidates are strongly encouraged.