OSCE ICT Officer, Security in Kyiv 85 views

The OSCE has a comprehensive approach to security that encompasses politico-military, economic and environmental, and human aspects. It therefore addresses a wide range of security-related concerns, including arms control, confidence- and security-building measures, human rights, national minorities, democratization, policing strategies, counter-terrorism and economic and environmental activities. All 57 participating States enjoy equal status, and decisions are taken by consensus on a politically, but not legally binding basis.

The objective of the OSCE Special Monitoring Mission to Ukraine (SMM) is to contribute, in close co-operation with OSCE institutions and other actors of the international community, to reducing tensions and fostering peace and stability in Ukraine, and ensuring the observance of OSCE principles and commitments, thus establishing conditions for inclusive political dialogue aimed at achieving a sustainable transition respecting the territorial integrity and sovereignty of Ukraine.

The Mission is composed of about 1500 mission members, from more than 40 participating States and has a budget over EUR 100 million.

The Administration and Finance Department comprises of the following Units: ICT Management, Finance and Budget, Human Resources, Medical Services, Procurement and Contracts Management and Infrastructure (including General Support Services and Dnipro Forward Logistics Base).

The Special Monitoring Mission to Ukraine (SMM), in line with the OSCE Action Plan for the Promotion of Gender Equality, is committed to further improving gender balance among staff in all areas and levels within the SMM. We encourage qualified applicants, in particular female candidates to apply for this position.

If applicable, deployment is subject to attendance to and successful completion of pre-deployment training and assessment.

Applicants are hereby notified that the Special Monitoring Mission to Ukraine (SMM) is designated by the OSCE as a nonfamily duty station. This designation is based on the fluid and dynamic working environment in the SMM. The currently prevailing working conditions in the duty station may include working in a hazardous location with extended hours of service, and possibly curtailed freedom of movement. Successful candidates who are appointed to locations deemed by the OSCE as hazardous will receive hazard pay. In addition, all successful candidates will be required to participate in the OSCE accident and life insurance scheme in accordance with the OSCE Staff Regulations and Staff Rules.

Under the direct supervision of the Head, ICT, as ICT Officer, Security, you will execute architecture reviews, conduct ICT security and quality assurance assessments, prepare and update relevant Mission documentation, circulars, SOPs, etc. You will assist ICT staff with design and technical direction of IT projects and operations, with a particular focus on IT security aspects. In addition, you will manage and supervise the IT Service Desk team, the IT infrastructure team, and two IT field support teams, while ensuring the daily operation of IT services and managing the operation, maintenance, trouble-shooting and upgrading of Information Technology and Communications systems and networks.

Where necessary, you will co-ordinate with the OSCE Secretariat Information Security and Co-ordination and Security Operations Centre teams to revise, maintain and monitor key internal controls within SMM, and ensure that these controls are being applied effectively, providing support where necessary. You will ensure that Mission members receive appropriate ICT security training as well as provide training and support users in various applications.

Specific duties and responsibilities include:

1. Contributing to IT infrastructure planning to meet new and changing requirements, especially reference system security; assessing impact of changes in IT infrastructure on physical space and staff resources; developing criteria to assess needs for IT infrastructure upgrades; designing frameworks governing systems management processes;
2. Conducting requirements analysis for architecture and design of SMM IT solutions; identifying, interpreting, and evaluating security aspects of IT system and network requirements; reviewing IT network architecture, topology, interdependencies, and constraints; leading security analysis of design reviews as well as overall design and integration plan for new processes, protocols, and equipment; recommending selection of architecture, topology, hardware, and software;
3. Providing direction and managing network vulnerability assessments; developing, implementing and maintaining IT security incident management program for SMM; monitoring and reporting security problems; defining and validating baseline security configurations for operating systems, applications, networking, and telecommunications equipment; providing guidance on disaster recovery design and implementation for SMM-wide disaster recovery management programs;
4. Developing and implementing an ongoing risk assessment program targeting IT security matters; assessing potential vulnerabilities in the network and information technology infrastructure and applications;
5. Based on risk assessment results, analyze the effectiveness of IT security control activities, and report on them with actionable recommendations to ensure resources are adequately protected; make recommendations for improvement of existing controls and implement new ones if necessary;
6. Defining IT security requirements; keeping current with industry practices and standards; assessing currency and efficiency of IT security documents; revising policies and standards to meet changing requirements according to OSCE policies; providing inputs during organization-wide reviews of information security policies and procedures;
7. Co-ordinating, the development and delivery of Information Security training and awareness programs for employees and other authorized users; providing security briefings to advise on critical issues that may affect OSCE in general and SMM in particular;
8. Performing other related work as assigned.

For more detailed information on the structure and work of the OSCE Special Monitoring Mission to Ukraine, please see https://www.osce.org/special-monitoring-mission-to-ukraine

• Citizenship of an OSCE participating State, excluding Ukraine;
• First-level university degree with specialization in information and communications systems, information security, computer science, or other related discipline;
• A minimum of six years of experience working in an IT infrastructure or information security role including knowledge of networks, servers, workstations, databases, storage, mobile devices, and service desk operations;
• Advanced knowledge of ICT operations and service management standards, including ICT services design, transition, and operation is required;
• Good analytical, problem-solving and project management skills; supervisory experience;
• Excellent presentation and training skills;
• Experience working for International Organizations, especially field operations, would be an advantage;
• ITILv3 or v4 Foundation certification is required; other ITIL certifications are beneficial;
• CISSP and/or CISM certification is highly desirable; additional information security certifications such as GIAC would also be beneficial;
• PRINCE2 Foundation or Project Management Professional (PMP) certification is highly desired, PRINCE2 Practitioner certification would be an asset;
• Demonstrated commitment to gender equality objectives as well as the ability to integrate a gender perspective into tasks and activities;
• Effective interpersonal skills, able to influence effectively and build partnerships and consensus, in teams and with stakeholders;
• Professional fluency in the English language, both oral and written; professional fluency in the Ukrainian and/or Russian language(s) is desirable;
• Holding a valid driving license is desirable;
• Demonstrated ability to work long hours in high stress environments, willingness to occasionally deploy to eastern Ukraine and wear body armour and other personal protective equipment.

• Commitment: Actively contributes to achieving organizational goals
• Diversity: Respects others and values their diverse perspectives and contributions
• Integrity: Acts in a manner consistent with the Organization’s core values and organizational principles
• Accountability: Takes responsibility for own action and delegated work

Core competencies

• Communication: Actively works to achieve clear and transparent communication with colleagues and with stakeholders of the Organization
• Collaboration: Works effectively with others on common goals and fosters a positive, trust-based working environment
• Planning: Works towards the achievement of goals in a structured and measured manner
• Analysis and decision-making: Analyses available information, draws well-founded conclusions and takes appropriate decisions
• Initiative-taking: Proposes and initiates new ideas, activities and projects
• Flexibility: Responds positively and effectively to changing circumstances

Managerial competencies (for positions with managerial responsibilities)

• Leadership: Provides a clear sense of direction, builds trust and creates an enabling environment
• Strategic thinking: Identifies goals that advance the organizational agenda and develops plans for achieving them
• Managing performance: Helps to maximize team performance by providing active feedback and skill development opportunities

Monthly remuneration subject to social security deductions is about USD 5,080 to which is added Board and Lodging Allowance (currently EUR 125 per day subject to change without prior notice). Social benefits will include possibility of participation in the Cigna medical insurance scheme and the OSCE Provident Fund.

Please note that appointments are normally made at step 1 of the applicable OSCE salary scale.

If you wish to apply for this position, please use the OSCE’s online application link found under https://jobs.osce.org/vacancies.

The OSCE retains the discretion to re-advertise/re-post the vacancy, to cancel the recruitment, to offer an appointment at a lower grade or to offer an appointment with a modified job description or for a different duration.

Only those applicants who are selected to participate in the subsequent stages of recruitment will be contacted.

Please note that vacancies in the OSCE are open for competition only amongst nationals of participating States, please see https://www.osce.org/participating-states.

The OSCE is committed to diversity and inclusion within its workforce, and encourages qualified female and male candidates from all religious, ethnic and social backgrounds to apply to become a part of the Organization.

The OSCE is a non-career organization committed to the principle of staff rotation, therefore the maximum period of service in this post is 7 years.

Please be aware that the OSCE does not request payment at any stage of the application and review process.