Job Title: Cyber Security Assistant
Organisation: United Nations Regional Service Centre Entebbe (RSCE)
Duty Station: Entebbe, Uganda
Reports to: Head of Regional Information Security and Compliance Unit
Job Opening ID: 223768
Grade: G-6
About US:
The Regional Service Centre in Entebbe, Uganda (RSCE) was established in July 2010, following the adoption of General Assembly resolution 64/269. The Centre provides efficient, client-oriented and scalable services with the goal of moving transactional, non-location dependent administrative functions to the Centre from its client entities. This includes transactional elements of human resources, finance, multimodal movement and control, personnel and cargo transport and information and communications technology (ICT) support.
Key Duties and Responsibilities:
- Support the identification, analysis, evaluation, and mitigation of risks to information technology, communications, and data systems in collaboration with stakeholders. Support implementation of cyber security procedures and guidelines at the organizational unit level for secure information communications and technology (ICT) as required for compliance.
- Communicate cyber security procedures and standards to employees, contractors, and other relevant partners.
- Assist the regular assessments of the entity’s infrastructure to identify potential vulnerabilities, prioritising and categorising the risks, and contribute to the development of implementation plans to remediate or mitigate them.
- Generate and communicate operational vulnerability reports to relevant colleagues (e.g., system owners).
- Support the implementation of the cyber security advisories to mitigate vulnerabilities.
- Assist cyber security investigations and events related to information technology, communications and data systems, networks and devices.
- Assist the coordinated incident response, digital forensics, and authorised investigation efforts through close collaboration with internal business units and external partners. Provide assistance to the implementation and testing of Disaster Recovery Plans (DRPs).
- Assist with management and monitoring of ICT assets for performance to ensure effective security measures are in place. Assist in coordinating with non-compliant sections/units and systems owners and escalate issues as appropriate.
- Keep abreast of the current and emerging security issues, risks, threats, vulnerabilities, and advancements in cyber security techniques and technologies.
- Provide input to the security awareness trainings and other communications to increase personnel understanding of cyber security policies, procedures and regulatory requirements set by the UN.
- Provide security guidance to users and ICT specialists to ensure the security of the Organization and achieve compliance.
- Maintain confidentiality and integrity and handle sensitive information with discretion ensuring compliance with the data privacy, security requirements, and standards.
- Provide assistance to the activities related to changes to the Organization, business processes, information processing facilities, and systems to ensure that effective internal controls are in place.
- Assist with the collection and analysis of data as well as preparation of data presentations and reports for information sharing, responding to queries, knowledge management, planning and decision making.
Qualifications, Skills and Experience:
- The United Nations Regional Service Centre Entebbe (RSCE) Cyber Security Assistant must hold a High school diploma or equivalent. Required.
- An active level certificate in Information Security (e.g., CISM, CISSP or equivalent) is required.
- A minimum of seven (7) years of progressively responsible experience using knowledge of cyber threats, network and application security principles, common vulnerabilities, and exploits is required and should be evident in the employment details in the application. The minimum years of relevant experience is reduced to five (5) years for candidates who possess a first level degree or higher. Use of skills to conduct research such as systematic data collection and analysis of information from various sources is desirable. Use of ability to identify systemic security issues based on the analysis of vulnerability and configuration data is desirable.
- Languages: fluency in oral and written English is required. Knowledge of French is desirable.
Competencies
- Professionalism: Knowledge of current, new, and emerging information and cyber security technologies and the ability to adapt to changes. Knowledge of current and emerging cyber security threat landscape, attack methodologies, tools, technologies, and mitigation/remediation methods. Ability to analyse network traffic and apply techniques for detecting host and network-based intrusions using intrusion detection technologies. Shows pride in work and in achievements; demonstrates professional competence and mastery of subject matter; is conscientious and efficient in meeting commitments, observing deadlines, and achieving results; is motivated by professional rather than personal concerns; shows persistence when faced with difficult problems or challenges; remains calm in stressful situations. Commitment to implementing the goal of gender equality by ensuring the equal participation and full involvement of women and men in all aspects of work.
- Teamwork: Works collaboratively with colleagues to achieve organizational goals; solicits input by genuinely valuing others’ ideas and expertise; is willing to learn from others; places team agenda before personal agenda; supports and acts in accordance with final group decision, even when such decisions may not entirely reflect own position; shares credit for team accomplishments and accepts joint responsibility for team shortcomings.
- Planning & Organizing: Develops clear goals that are consistent with agreed strategies; identifies priority activities and assignments; adjusts priorities as required; allocates appropriate amount of time and resources for completing work; foresees risks and allows for contingencies when planning; monitors and adjusts plans and actions as necessary; uses time efficiently.
- Technological Awareness: Keeps abreast of available technology; understands applicability and limitation of technology to the work of the office; actively seeks to apply technology to appropriate tasks; shows willingness to learn new technology.
How to Apply:
All suitably qualified and interested candidates who wish to join the United Nations should apply online at the link below
Deadline: 9th March 2024