Information Security Operations Officer

The role supports the ILO's information security operations by monitoring events, managing incidents, conducting threat hunting, and managing vulnerabilities. It contributes to the design and maintenance of security platforms and tools.

Department: INFOTEC

• Champion information security operations, including incident assessment, categorization, triage and escalation, in line with established Incident Response playbooks and procedures and in collaboration with the SOC
• Drive the hardening and baselining of assets, monitor and investigate deviations from recognised security baselines, define and implement technical measures, and perform post-implementation reviews and audits
• Participate in planning and deliver simulation exercises, including tabletop and purple-team exercises, to test preparedness, validate response capabilities and strengthen organisational resilience against cyber-attacks
• Conduct targeted digital forensics services to acquire images and reconstruct intrusion timelines, events, vectors, tools and techniques from compromised assets
• Closely monitor technology developments within the domain to anticipate shifts, identify opportunities and propose tools or processes evolutions
• Advocate for information security standards and best practices across the Organization and contribute to the development and continuous improvement of internal guidelines, procedures and standards
• Perform any other relevant duties as assigned

• Advanced level university degree in computer science or other closely related field, or a first-level university degree with an additional two years of relevant experience
• One or more industry-recognized certifications covering IT security such as CISSP, BTL1/2, GCIH, TryHackMe SOC, Microsoft Certified Security Operations Analyst Associate, any relevant SANS certifications, or equivalent
• At least five years of professional experience in the cyber security field
• One working language (English, French, Spanish) of the Organization and a working knowledge of a second working language of the Organization. One of these languages must be English

• Apply by email to ilojobs@ilo.org with the requested documents.
• Fixed Term contract
• Recruitment for this vacancy is subject to the availability of funding
• External candidates will be on probation for the first two years of assignment
• Successful completion of the ILO Assessment Centre is required for all external candidates and any internal candidate applying to a higher category
• External candidates whose mother tongue is not one of the working languages (English, French, Spanish) shall be required to possess a fully satisfactory working knowledge of at least one of the ILO working languages and are expected to acquire a knowledge of a second working language during their initial years of service