Information Risk Management Officer (Applications will only be accepted if submitted through the link provided)

About Mercy Corps

Mercy Corps is a leading global organization powered by the belief that a better world is possible.
In disaster, in hardship, in more than 40 countries around the world, we partner to put bold solutions
into action — helping people triumph over adversity and build stronger communities from within.
Now, and for the future.

Program / Department Summary

The war in ME continues; more than 11 million people have been displaced from their homes and the number relying on humanitarian assistance continues to grow, in ME and in neighboring countries. With a large and complex portfolio of work across the region, Mercy Corps has established itself as an analytical, strategic and flexible responder, adapting continually to shifting front lines and operational realities to respond effectively and efficiently through multiple modalities with teams across the response region.  Mercy Corps has a large and diverse portfolio of work and a substantial team that works in multiple languages

General Position Summary

The Information Risk Management Officer will support the Security Department and Programs team through the identification, evaluation, and control of cybersecurity-related risks. The IRM Officer will also support the Security Department in keeping up-to-date SOPs on software programs used by the department, conduct IRM checks on software programs, and provide daily situation updates.

Essential Job Responsibilities

Main Requirements

• Assist in the development of IRM SOPs;
• Assist in drafting short-term and long-term Information Security Strategies;
• Conduct IRM checks on potential cybersecurity threats
• Send out bi-weekly cyber security updates to the team with a focus on the Middle East but also Global trends that are identified;
• Manage an incident database which will include importing large datasets into a software platform, this will include multiple country coverage;
• Communicate risks and recommend mitigation measures to the Security Coordinator and Safety & Security Director
• Develop and conduct Information Security awareness sessions for all teams which will include new employee induction(s);
• Act proactively and ensure proper protections such as firewalls and intrusion detection are in place.
• Manage datasets and trackers;
• Manage communications platforms for departments as required;
• Generate maps on ArcGIS or similar programs as requested by departments to assist in risk management for programmes teams;
• Maintain professional confidentiality and discretion over all subject matters at all times and actively report any issues identified;
• Conduct other related tasks when required and as directed.

Security

• Ensure compliance with cyber-security procedures and policies for all staff in coordination with relevant management functions;
• Proactively ensure that team members operate in a secure environment and are aware of MC policies and procedures for secure cyber operating and electronic presence.

Organizational Learning 

• As part of our commitment to organizational learning and in support of our understanding that learning organizations are more effective, efficient and relevant to the communities they serve, we expect all team members to commit 5% of their time to learning activities that benefit Mercy Corps as well as themselves.

Accountability to Beneficiaries

• Mercy Corps team members are expected to support all efforts toward accountability, specifically
  to our beneficiaries and to international standards guiding international relief and development work, while actively engaging beneficiary communities as equal partners in the design, monitoring and evaluation of our field projects.
• Team members are expected to conduct themselves in a professional manner and respect local laws, customs and MC's policies, procedures, and values at all times and in all in-country venues.

Supervisory Responsibility

None

Accountability

Reports Directly To: Line managed by the Security Coordinator with technical/matrix management by the Safety & Security Director.

Works Directly With: The Security Department, Programmes teams, Mercy Corps IT Department.

Knowledge and Experience

• Minimum one year of IRM experience required;
• Minimum one year of experience to include working with computer and networking infrastructures, operating systems, and application software development required;
• Minimum of Technical Diploma required, Bachelor’s Degree preferred;
• Strong writing skills.
• Proficient use of Adobe Creative Cloud Suite;
• Strong knowledge on building maps and visualizing data (QGIS, ArcGIS);
• Strong organizational skills;
• Ability to interact effectively with international and national personnel;
• A demonstrated ability to multi-task and process information from multiple streams;
• Ability to think critically; 
• Ability to remain impartial and objective;
• Ability to meet strict deadlines;
• Ability to work under pressure and with very short deadlines.
• Note: Knowledge of the Lebanese and regional contexts is a plus.

Success Factors

The successful candidate will have the ability to identify and communicate cyber-security threats to departmental management in a way that effectively increases our safety, security and informs programming in a practical manner, while increasing the team’s technical capacity. S/he will be able to work closely with a diverse team of individuals in a highly intense and fluid work and security environment. S/he will be a self-starter, take initiative and offer to assist in decision-making processes that could benefit from a safety/security perspective.