Information Security Engineer, 15

Works with the Field Information Management and Technology Office (FIMTO) and Information Management and Technology Department (IMTD) teams as the information security contact point. The scope of responsibilities include:

Participating as a member of the UNRWA-wide network of information security staff in activities that aim to protect the whole organization.

Acting as a focal point for location-specific processes, procedures, and tools.

Acting as the focal point for Business Continuity and Disaster Recovery activities.

Delivering training and participating in security-related exercises.

Provides daily monitoring of security-related events, gathers required contextual information, shares knowledge among the network of information security staff, responds to events and incidents, following predefined policies, procedures, and guidelines.

Implements and manages security tools, e.g., firewalls, anti-malware solutions, EDR, vulnerability managements solutions, monitoring solutions, web filters, VPNs and similar. The systems may include local and UNRWA-wide solutions. Executes technical evaluations, including penetration tests.

Contributes to the development of policies, procedures, and guidelines. Tests new technological solutions in the information security area or tests specific configurations.

Coordinates the vulnerability management process in the location and participates in UNRWA-wide activities. Serves as the driving force for addressing vulnerabilities in the location, communicating with the management, preparing reports, and following up with system administrators on patching.

Participates in security-related audits and assessments. Identifies and collects evidence and organizes interviews. Coordinates the implementation of location specific recommendations and participates in implementing UNRWA wide recommendations. Executes internal security and compliance audits to identify security issues and non-compliance.

Performs evaluations and research and coordinates activities regarding large security-related projects, including, but not limited to, network segmentation and migration to the cloud.

Coordinates security awareness initiatives in the location and participates in UNRWA-wide activities.

Contributes to UNRWA-wide security strategy development and budget planning.

Keeps abreast of latest technology developments and invests time in developing securityrelated capacity, e.g., by practicing forensic skills or developing skills in using security tools and provides advice and recommendations to section head on security development issues.

Performs other duties as may be assigned by the supervisor.