Identity and Access Management (IAM) Programme Officer(P4)

Organizational Setting

The Department of Management (MT) provides a ‘platform of services’ that serves as a foundation for the successful delivery of the IAEA’s scientific and technical programmes. Its mission statement is as follows: “MT is a partner and a business enabler that champions change and efficiency, leveraging a common purpose”. Thus, among other support activities, it assists a scientific manager in recruiting the right expert, helps a technical officer coordinate the purchase of radiation equipment, and ensures that all Board documents are translated and distributed on a timely basis to Member States.

The Division of Information Technology provides support to the IAEA in the field of information and communication technology (ICT), including information systems for technical programmes and management. It is responsible for planning, developing and implementing an ICT strategy, for setting and enforcing common ICT standards throughout the Secretariat and for managing central ICT services. The IAEA's ICT infrastructure comprises hardware and software platforms, and cloud and externally-hosted services. The Division has implemented an IT service management model based on ITIL (IT Infrastructure Library) and Prince2 (Projects in a Controlled Environment) best practices.

Main Purpose

Reporting to the Section Head with a dotted reporting line to the Chief Information Security Officer (CISO), the IAM Programme Officer ensures a results-oriented response to the Secretariat's priorities as communicated by the Section Head and the other Divisional management team members. He/she has primary responsibility for the Agency’s Identity and Access management (IAM) programme involving twenty or more project team members and is responsible for multiple smaller cross-cutting projects under this programme simultaneously.

Role

The IAM Programme Officer is: (1) a substantive specialist, performing business analysis and managing challenging projects; (2) an adviser to the section head, the CISO, and other senior managers in the Secretariat (both within and outside of the Division) on business process, risk, change and system implementation issues; (3) a business analyst, working with clients/users to investigate, model and specify business functions, processes, information flows and data structures that will meet business requirements, using methodical and consistent techniques; and (4) a manager of products and projects, providing guidance, assistance and supervision of project team members and defining, planning and making business cases for projects to develop/implement business processes.

Functions / Key Results Expected

With guidance and support provided by the Section Head, and in close collaboration with the CISO, the IAM Programme Officer is expected to: • Maintain and update the road-map for the IAM programme that holds the Agency's IAM strategy. • Initiate and manage the roll-out of the road-map as the IAM programme manager. This also includes managing the Extra-budgetary Contributions that funded this road-map and regularly reporting back progress to the donating member states. • Initiate and manage projects of the road-map as the project manager. This includes managing the further roll-out of the Privileged Access Management (PAM) project and the initiation and roll-out of the Identity & Governance Management (IGM) project. • Implement as part of these projects new information systems, or enhancements of existing systems, by providing analysis of information processes and/or technical solutions; by developing project plans in a manner consistent with relevant policies and standards, with the IAEA's technical and information architecture, and with the best practices as identified in PRINCE2 methodology; and through the effective use of PRINCE2 controls to manage risk, quality, budget and schedule. • Provide expertise and advice in the roll-out of the other programmes of the Information Security Road-map.

Competencies and Expertise

Core Competencies

table { border-collapse: collapse; } table, th, td { word-wrap: break-word; valign="top"; } Name Definition Communication Communicates orally and in writing in a clear, concise and impartial manner. Takes time to listen to and understand the perspectives of others and proposes solutions. Achieving Results Takes initiative in defining realistic outputs and clarifying roles, responsibilities and expected results in the context of the Department/Division’s programme. Evaluates his/her results realistically, drawing conclusions from lessons learned. Teamwork Actively contributes to achieving team results. Supports team decisions. Planning and Organizing Plans and organizes his/her own work in support of achieving the team or Section’s priorities. Takes into account potential changes and proposes contingency plans.Functional Competencies

Name Definition Client orientation Helps clients to analyse their needs. Seeks to understand service needs from the client’s perspective and ensure that the client’s standards are met. Commitment to continuous process improvement Plans and executes activities in the context of quality and risk management and identifies opportunities for process, system and structural improvement, as well as improving current practices. Analyses processes and procedures, and proposes improvements. Technical/scientific credibility Ensures that work is in compliance with internationally accepted professional standards and scientific methods. Provides scientifically/technically accepted information that is credible and reliable.Required Expertise

Function Name Expertise Description Information Technology Business System Analysis Extensive expertise analysing business processes and with business processes re-engineering. Information Technology Information Security and Risk Management Strong knowledge of Information Security and IT Security. Information Technology Project Management Extensive experience in managing moderate to complex IT projects.Qualifications, Experience and Language skills

Advanced university degree (Master's Degree or equivalent) in Computer Science, Business Administration or other related field.

A first level university degree (Bachelor's or equivalent) in the above educational areas with three additional years of experience may be accepted in lieu of the advanced university degree.

Accredited Project management certification in PMP or PRINCE2 is preferred.

Accredited Information Management Security certification (ISO 27001).

Minimum of seven years of relevant working experience in an information systems context; of which minimum of three years' experience in high-visibility, cross-cutting activities sponsored by the senior executive management of a large, complex organisation. Proven experience with all elements of Software Development Life-cycle: eliciting and documenting business process flows, use cases, requirements, quality management plans, user acceptance testing, and end-user training. Product management experience, preferably with a customer-facing web portal, integration solution, identity management, or other enterprise platform

Excellent oral and written command of English. Knowledge of other official IAEA languages (Arabic, Chinese, French, Russian and Spanish) is an asset.

Remuneration

The IAEA offers an attractive remuneration package including a tax-free annual net base salary starting at US $75602 (subject to mandatory deductions for pension contributions and health insurance), a variable post adjustment which currently amounts to US $ 31753*, dependency benefits, rental subsidy, education grant, relocation and repatriation expenses; 6 weeks' annual vacation, home leave, pension plan and health insurance

------------------------------------------------------------------------------------------------------------------------------------------------------------- Applications from qualified women and candidates from developing countries are encouraged

Applicants should be aware that IAEA staff members are international civil servants and may not accept instructions from any other authority. The IAEA is committed to applying the highest ethical standards in carrying out its mandate. As part of the United Nations common system, the IAEA subscribes to the following core ethical standards (or values): Integrity, Professionalism and Respect for diversity. Staff members may be assigned to any location. The IAEA retains the discretion not to make any appointment to this vacancy, to make an appointment at a lower grade or with a different contract type, or to make an appointment with a modified job description or for shorter duration than indicated above. Testing may be part of the recruitment process -------------------------------------------------------------------------------------------------------------------------------------------------------------