Security Awareness Officer (P-3)

Application Deadline:	8 November 2011
Type/Duration of Appointment:	Fixed term, 3 years (subject to a probationary period of 1 year)

Organizational Setting

The Department of Safeguards is the organizational hub for the implementation of IAEA safeguards. The IAEA implements nuclear verification activities for more than 160 States in accordance with their safeguards agreements. The safeguards activities are undertaken within a dynamic and technically challenging environment including advanced nuclear fuel cycle facilities and complemented by the political diversity of the countries. The Department of Safeguards consists of six Divisions: three Operations Divisions: A, B and C, for the implementation of verification activities around the world; and three Technical Divisions, (i) Division of Concepts and Planning, (ii) Division of Information Management, and (iii) Division of Technical and Scientific Services, as well as two Offices: the Office of Safeguards Analytical Services and the Office of Information and Communication Services. The Office of the Department of Safeguards Security Coordinator manages a pre-emptive approach to security, both at Headquarters and at Field Offices, including the planning and deployment of security of the Enhancing the Capability of Analytical Services (ECAS) project,. It adopts the latest practices and technologies in order to address the constantly changing security challenges facing the department. The Office is responsible for managing the implementation of security initiatives, across the department, and its response to security incidents, as well as the formulation and implementation of an information security regime that reflects the requirements for safeguards that are fully information driven.

Main purpose

Reporting to the Safeguards Security Coordinator (SSC), the Security Awareness Officer is a member of the security team responsible for ensuring the confidentiality, integrity and availability of computer-based information as well as physical security throughout the Department of Safeguards. He/she contributes to the implementation of the security projects, including IT security and the development of processes, policies and procedures and their enforcement. He/she takes a leading role in all aspects of the security of Departmental staff and information in headquarters as well as non-headquarters locations and develops plans for adequate security response to issues such as serious incidents and threats to safety of staff and their dependents, as well as threats to the security of Safeguards information.

Role

The Security Awareness Officer is a technical specialist supporting the design and formulation of security measures and policies on all aspects of security, with special emphasis on Information Security and security awareness; a solution provider, coordinating service delivery; a facilitator, soliciting inputs from other specialists and assisting in defining, planning and executing projects; and a specialist advisor, advising the CSC on IT security and best practices.

Partnerships

The Security Awareness Officer works with the SSC to ensure the effective implementation of all aspects of information and physical security within the Department of Safeguards. He/she works with the SSC and business partners to ensure the effective deployment of Security Awareness Campaigns for the Department of Safeguards, promoting security awareness, distributing and promoting awareness products in the fields of information security. He/she works in close collaboration with IT infrastructure team on matters related to security, and collaborates tightly with business architects and development teams, on matters related to application security. The Security Awareness Officer ensures that the Department of Safeguards keeps up to date on new information and technical specifications to ensure the suitability of their products and keep abreast of technical progress. He/she cooperates in joint IAEA wide IT security projects with the Division of Information Technology (MTIT).

Functions / Key Results Expected

In close cooperation with the Safeguards Security Coordinator, assist in formulating Security related policies. Contribute to the transition to an information security regime that is consistent with safeguards that are fully information driven. This to involve ensuring the confidentiality, integrity and availability of Safeguards and data, through IT security measures and implementing proper technology and processes. Understand and implement a wide range of Safeguards security management policies and procedures and assist in developing clear goals that are consistent with agreed strategies. Facilitate and maintain the Security Internet pages on the SG Portal as well as on OASIS and contribute to the dissemination of Security Bulletins to staff, ensuring that information is current and up to date. Provide user/customer training on security awareness and related topics: Ensure that awareness and training material developed is appropriate and timely for the intended audiences; Ensure that awareness and training material is effectively deployed to reach the intended audience; Ensure that users and managers have an effective way to provide feedback on the awareness and training material and its presentation; Ensure that awareness and training material is reviewed periodically and updated when necessary; Assist in establishing a tracking and reporting strategy. Assist the Safeguards Training Section in creating/publishing training courses related to other aspects of security i.e. Radiation Protection. Participate in formulation, planning and execution of SGIM, and in particular IT, Security projects, through close cooperation with the various SGIM sections and the Central Security Coordinator. Participate in continuous security improvement activities. Consult with and take direction from supervisors, managers and clients regarding all aspects of security. Maintain proficiency with industry standard tools and practices as well as with IAEA policies and procedures. Ensure that actions are carried out on a timely manner on the recommendations of periodic security audits, vulnerability assessments and threat and risk assessments.

Knowledge, Skills and Abilities

Professional expertise: Knowledge and experience of deploying a security awareness campaign across a public or private organisation; Knowledge and experience in providing educational material/training courses; Thorough knowledge of analysis and design techniques, especially User Interface Design as well as broad experience and knowledge of programming languages and tools on a wide variety of platforms; Expert knowledge and hands on skills in Web based technology, design and engineering; Knowledge and experience in creating courses, including documentation; Knowledge and experience in security in an international organisation; Knowledge of UNDSS security systems and the Security Level System. Excellent analytical skills: Ability to analyse security requirements and propose solutions, analyse user and system requirements. Strong planning and organizing skills: Ability to set clearly defined objectives, plan activities in a timely way and monitor performance against deadlines and milestones. Learning attitude: Exhibits quick learning skills of new systems and requirements. Excellent communication skills including written and presentation skills. Strong interpersonal skills: Ability to work in a pro-active way in a multicultural environment and to interact effectively with staff and counterparts at various levels. Strong customer/user orientation: Ability to work effectively in a team environment, including facilitating discussion and formulating thoughts and ideas constructively.

Education, Experience and Language Skills

University (or equivalent) degree in information technology, computer science, or information security. CISSP qualification highly desirable. Minimum of five years of progressive working experience with IT security and customer support in an international organization, experience of the UN Security Management System, as well as experience in systems and requirements analysis. Practical and demonstrated experience in the following: Creating promotional documentation and creating customer awareness; Information- and knowledge-sharing environments; Strong customer relations; User interface design methods; Producing training materials and delivering training courses; Producing presentation material; Creating technical documentation; Working with technical architecture and addressing technical solutions; Using the applicable IAEA IT platforms; Security awareness within an international organisation. Fluency in written and spoken English. Knowledge of German highly desirable. Knowledge of other IAEA languages (Arabic, Chinese, French, Russian or Spanish) an asset.

Remuneration

The IAEA offers an attractive remuneration package including a tax-free annual net base salary starting at US $56 018 (subject to mandatory deductions for pension contributions and health insurance), a variable post adjustment which currently amounts to US $34 283*, dependency benefits, rental subsidy, education grant, relocation and repatriation expenses; 6 weeks' annual vacation, home leave, pension plan and health insurance. How to apply to the IAEA Complete an Online Application * Subject to change without notice

Applications from qualified women and candidates from developing countries are encouraged Applicants should be aware that IAEA staff members are international civil servants and may not accept instructions from any other authority. Staff members may be assigned to any location. The IAEA retains the discretion not to make any appointment to this vacancy, to make an appointment at a lower grade or to make an appointment with a modified job description or for shorter duration than indicated above. Testing may be part of the recruitment process.