UNV – Information Security Assistant

Contract

This is a UNV International Specialist contract. This kind of contract is known as International UN Volunteer. It is normally internationally recruited only. More about UNV International Specialist contracts.

    In accordance with the tasks outlined above, the incumbent is expected to produce the 
    following outputs:

• Implementation of an efficient and effective security incident planning, handling, analysis, and response. • Standard Operating Procedure (SOP) to guide and involve all business units in cybersecurity risk identification and management. • Comprehensive inventory of systems, applications, and hardware within the mission • Matured vulnerability management system and Mission-specific threat-hunting process • The development of capacity through coaching, mentoring and formal on-the-job training when working with (including supervising) national staff or (non-) governmental counterparts, including Implementing Partners (IPs). • Age, Gender, and Diversity (AGD) perspective is systematically applied, integrated, and documented in all activities throughout the assignment. • A final statement of achievements towards volunteerism for peace and development during the assignment, such as reporting on the number of volunteers mobilized, activities partici- pated in, and capacities developed.

    Under the direct supervision of the Information Systems Security Officer of the 
    Cybersecurity, Audit and Compliance unit in the Field Technology Section (FTS), the UN 
    Volunteer will undertake the following tasks:

• Identify and institute effective ICT infrastructure and data security controls. • Identify security gaps in systems and their solutions based on internationally accepted security frameworks and standards. • Conduct regular vulnerability assessments and identify mitigation solutions. • Deploy, configure, operate, and maintain security tools, including fully integrating them to raise the visibility of the ICT infrastructure and help reduce security incidents or be able to respond quickly and effectively. • Ensure the secure implementations of network (LAN, WLAN, Firewall, WAN) infrastruc-tures, servers, and endpoint devices. • Conduct ICT security audits following accepted standards to determine adequacy, effec- tiveness, and areas for improvement of security controls. • Design, manage and secure data, applications and infrastructure in the cloud using best practices, policies, and procedures. • Develop plans and conduct cyber security Awareness programs and technical training for users and FTS staff. • Draft, review and enforce information security policies, SOPS, and plans. • Conduct risk assessments in support of the development of business continuity and op- erational resiliency. • Monitor, and analyze logs and events from several sources, tools and devices and then take appropriate preventive and corrective actions. • Conduct a physical security assessment of systems and facilities. • Conduct digital forensic investigations on UAVs and other technology protection sys-tems. • Conduct web application testing and securing. • Plan and conduct Disaster Recovery and Security Incidence Response exercises. • Assists with the regular security assessments of production and FTS resources to identi-fy potential weaknesses for referral to supervisors; performs risk analysis and provide data for further analysis by supervisors. • Manage compliance to secure frameworks, standards, policies, and best practices. • Regularly monitor emerging Cyber security threats and provide timely advice on protec-tion. • Hold or attend meetings, prepare agenda and necessary visual aids, and draft minutes as may be required. • Collaborates effectively with other offices to ensure that Information and Communica-tions Technology implementations meet best practices and proven security standards. • Assist in planning, budgeting, procurement, and other administrative activities of the unit. • Perform any other duties assigned by the unit supervisor.

    Furthermore, UN Volunteers are required to: 

• Strengthen their knowledge and understanding of the concept of volunteerism by reading relevant UNV and external publications and take active part in UNV activities (for instance in events that mark International Volunteer Day). • Be acquainted with and build on traditional and/or local forms of volunteerism in the host country. • Reflect on the type and quality of voluntary action that they are undertaking, including par- ticipation in ongoing reflection activities. • Contribute articles/write-ups on field experiences and submit them for UNV publica- tions/websites, newsletters, press releases, etc. • Assist with the UNV Buddy Programme for newly arrived UN Volunteers. • Promote or advise local groups in the use of online volunteering or encourage relevant lo- cal individuals and organizations to use the UNV Online Volunteering service whenever technically possible.

relevant work experience as ICT Security Manager, Security Analyst, Security Auditor,

Bamako is a non-family duty station with a difficult security and working environment. Mali is a non-family duty station. Living conditions are acceptable in Bamako, but security instructions need to be strictly complied with. Adequate housing is available for rent at US$ 500-1500 per month. The national currency is the Franc CFA (April 2020 exchange rate was 1 US$ = 600 FCFA). Visa credit cards are accepted in some hotels and larger shops. Mali is a country prone to malaria, so mosquito nets are highly recommended. Basic medicines are available from pharmacies, but provision needs to be made for specialized medication. Security recommendations from the UN Department of Safety and Security (UNDSS) must be followed by all UN Staff in the course of their assignments in Mali. For the sake of rewarding experience, UN volunteers in MINUSMA carry out their duties with flexibility, commitment, and a willingness to live and work in challenging conditions including heat and limited water and electricity supply.