Information Systems Security Officer

Implements information-security governance across INTERPOL’s technology directorate, translating CISO policy into standards, controls and roadmaps, maintaining risk and compliance frameworks, advising projects, coordinating audits and investigations, and reporting security performance to management.

Department: Information Systems and Technology Directorate

• Implement the organizational information-security strategy across the technology directorate
• Develop security standards and guidelines aligned with CISO policies
• Maintain the directorate security-risk register and conduct risk assessments
• Coordinate security audits, compliance reviews and penetration-test follow-up
• Advise technology projects and products on security requirements and corrective actions
• Deliver security-awareness guidance and support security investigations
• Track security governance, risk and compliance indicators and report performance
• Propose corrective actions that improve security controls and compliance

• Three to four years of university or specialized higher education
• One or more internationally recognized information-security certifications such as CISM, CISSP or CEH
• At least five years of experience in a large and complex information-technology enterprise environment
• Experience developing information-security policies, standards, procedures and guidelines
• Experience identifying and mitigating information-security risks and implementing risk-management plans
• Experience conducting security audits, assessments and compliance reviews
• Fluency in English

• Fixed-term appointment for 36 months
• The selection may generate a reserve list, but this is a position-specific vacancy