Information Security Operations Officer

Leads day-to-day information security operations for the ILO, covering incident response, threat hunting, vulnerability management, forensic analysis and security tooling across organisational technology services.

Department: INFOTEC

• Lead information security incident assessment, triage and escalation with the Security Operations Centre
• Conduct threat detection, threat hunting, incident analysis and lessons-learned activities
• Monitor the threat landscape and design mitigation controls, detections and alerts
• Harden assets and investigate deviations from CIS and STIG security baselines
• Plan and run tabletop and purple-team exercises to test cyber response readiness
• Collect and analyse logs, metrics and security events to improve reporting and alerting
• Perform digital forensics to reconstruct timelines, events, vectors and indicators of compromise
• Support vulnerability scanning, triage, remediation planning and security standards improvement

• Advanced university degree in computer science or a closely related field, or a first-level university degree with two additional years of relevant professional experience
• One or more recognised industry certifications in information security such as CISSP, BTL1/2, GCIH, TryHackMe SOC, Microsoft Security Operations Analyst Associate, SANS certifications or equivalents
• At least five years of professional experience in cybersecurity
• Excellent command of one ILO working language and working knowledge of a second ILO working language, one of which must be English

• Fixed-term appointment, with first contract issued for 24 months
• Recruitment is subject to availability of funds
• Successful external candidates are on probation for the first two years of assignment
• Applications from candidates already retired or early-retired from ILO service will not be considered
• Applications must be submitted online through ILO Jobs