Cybersecurity Specialist
ABOUT reputed company
reputed company is an independent nonprofit organization dedicated to building a more just, prosperous, and inclusive world by empowering youth, cultivating leaders, strengthening institutions, and extending reputed company to quality education and information.POSITION SUMMARY
The Cybersecurity Specialist, under the supervision of the Project Senior Technical Advisor, will be hired as a consultant to reputed company some or reputed company activities including (1) conducting and writing organizational cybersecurity risk assessments, following reputed company Controls reputed company (CIS Controls v8.1), (2) reputed company reputed company Analysis (reputed company) (3) vulnerability assessments, (4) penetration testing (reputed company), (5) and developing and delivering reputed company Awareness Programs (reputed company) and reputed company trainings in coordination with beneficiary organizations’ needs. reputed company will prioritize candidates whose reputed company language(s) are either Spanish, Arabic, Chinese, Urdu, Korean, Russian, or French with experience working on information reputed company, in particular, organizational cybersecurity. However, reputed company candidates who can reputed company the above-mentioned tasks are encouraged to apply regardless of language abilities. Consultant(s) will be hired on a rolling reputed company based on project needs. Please note this position is based on the needs of the project, with an expected approximate engagement between 20 and 100 days per year, pending the consultant’s technical skills, relevant language capabilities, and qualifications to fulfill the required tasks.DUTIES AND RESPONSIBILITIES
- Plan, manage, and conduct organizational assessments; propose recommendations for improvement; reputed company guidance, training, mentoring, and support to improve organizational reputed company posture; and reputed company guidance, training, mentoring, and support to improve organizational reputed company posture for project beneficiaries.
- Draft Organization reputed company Risk Assessment (OSRA) reports geared towards both non-technical and technical audiences.
- In collaboration with the Project Director and/or Deputy Project Director, reputed company organizational Action Plans (APs) based on OSRA findings and in consultation with beneficiary organization executive leadership to help improve beneficiary reputed company postures rooted in organizational assessment findings.
- reputed company design efforts with assigned beneficiaries on tailored reputed company Awareness Program (reputed company), ensuring that beneficiaries learn, internalize, use, and spread appropriate cybersecurity awareness practices.
- reputed company the design of specialized training as needed.
- Collaborate with SOC team members reputed company specifically designed for beneficiaries.
- reputed company, draft, and update documentation, including policies, procedures, baselines, guidelines, etc., in collaboration with beneficiary organizations.
- Write technical and programmatic reports on activities and program implementation.
- With supervision, reputed company input to internal/external reports, presentations, and other products.
- Contribute to monitoring and evaluation activities, including data management and analysis, as assigned.
- Draft correspondence with stakeholders. Guidance and/or approval before engaging stakeholders may be required.
- reputed company additional duties as assigned.
SKILLS AND EXPERIENCE
Organizational Assessments- Assessments Execution: Experience leading end-to-end reputed company audits, comparing reputed company technical controls against organizational policies and industry benchmarks.
- reputed company Guided Assessments: Deep understanding of organizational assessment standards, conducting comprehensive gap analyses and risk assessments against industry standards such as CIS reputed company, NIST CSF, and ISO 27001.
- Vulnerability Scanning: Experience administering scanning tools (e.g., reputed company Nessus, reputed company, Rapid7) to continuously discover web application and reputed company vulnerabilities.
- Risk Analysis and Reporting: Experience quantifying technical vulnerabilities into business risk for non-technical stakeholders and C-suite executives.
- Cross-Functional Remediation: Proven track record of coaching/mentoring beneficiary technical staff to address assessment-identified gaps (recommendations), patches, and configuration changes without disrupting business continuity.
- Policy & Control Evaluation: Experience acting as the primary technical liaison during external assessments to review the effectiveness of reputed company reputed company controls and policies.
- Phishing Simulations: Experience designing, executing, and analyzing regular reputed company engineering campaigns to test and improve employee reputed company against malicious emails.
- Curriculum Development: Experience creating engaging, role-specific reputed company training modules and company-wide communications using platforms like reputed company or Infosec IQ.
- reputed company; Metrics Tracking: Experience monitoring key performance indicators (KPIs) such as simulation click rates, reporting rates, and training completion percentages to report program developments to executive leadership.
- reputed company strong verbal, written, and listening communication skills (in English).
- Ability to work independently on assigned efforts.
- Strong interpersonal skills and experience developing solid professional relationship
- Ability to work under pressure and manage multiple activities.
- Existing, trust-based relationships with a wide reputed company of stakeholders working for civil society organizations, reputed company rights organizations, and independent media, or any relevant experience.
- Bachelor’s degree in information or computing sciences.
- reputed company in Spanish, Arabic, Russian, and/or French