The UNICC workforce consists of many diverse nationalities, cultures, languages, and opinions. UNICC seeks to sustain and strengthen this diversity by ensuring equal opportunity and an inclusive working environment for its entire workforce. Applications are encouraged from all qualified candidates without distinction on grounds of race, ethnicity, sex, national origin, age, religion, disability, sexual orientation and gender identity.

Purpose of the Position:

Within the Cybersecurity Resilience Section (CSR), the incumbent will provide technical guidance and support to the Partner Organizations and will be responsible to coordinate the cyber and continuity exercising capability by leading, orchestrating and executing cybersecurity exercises, simulations, and drills.

Objectives of the Programme:

UNICC provides the digital foundations that support the digital transformation and future of the UN system and other international organizations.

Main duties and responsibilities:

The incumbent will work under the guidance and supervision of the Head, Cybersecurity Resilience (CSR) within the Cybersecurity Division (CS) and in close collaboration with other CS teams. The incumbent could be requested to do any other tasks of similar level in related fields.

Under the guidance of the Head, CSR, and in close collaboration with the relevant team members, the incumbent will establish and coordinate the Continuity and Cybersecurity Exercise (CCEx) Service, including:

• Define, implement, and maintain the CCEx Service
• Develop and coordinate cybersecurity exercises including tabletop exercises, red teaming, and incident response simulations, tailored to each client’s operational environment and requirements
• Develop exercise materials, workshops, and training programs
• Deliver exercises and webinars to enhance organizational and client CCEx capabilities
• Develop and coordinate cybersecurity exercises
• Ensure the proper functioning of CCEx systems, addressing any issues accordingly
• Keep abreast of latest CCEx tools and techniques to identify how they can benefit the organization and partners
• Act as subject-matter expert for any CCEx matters

The incumbent will also undertake the following regular cybersecurity duties:

• Coordinate the onboarding of clients
• Translate customer requirements to technical implementations
• Stay abreast of evolving threats and technological advancements, and update exercises/scenarios accordingly
• Develop, maintain, and customize tools and procedures that can be used to deliver CCEx services
• Support information security incidents, as and when required
• Other: Provide other ad hoc support either within the team or in other teams as required – this includes the participation in special projects or support to service delivery for short period of time on a part-time or full-time basis upon request from the senior management

Experience and Skills required:

Essential:

• At least five (5) years of relevant experience in the field of Cybersecurity
• Demonstrated experience in continuity and exercise development
• Excellent knowledge of simulation methodologies and technologies
• Demonstrated experience in leading the design and execution of cybersecurity exercises, simulations, or drills, as blue and/or red team
• Demonstrated experience in penetration testing, red teaming, incident response, threat analysis, and vulnerability assessment
• Demonstrated skills to effectively convey complex cybersecurity concepts to diverse audiences

 Desirable:

• Demonstrated knowledge of cybersecurity tactics, techniques, tools, technologies, and frameworks, coupled with an understanding of emerging threats and trends
• Demonstrated experience in researching and identification of new vulnerabilities
• Understanding of the management of cloud-based infrastructure (e.g. Azure, AWS, etc)
• Demonstrated experience in conducting security incident response and SIEM concepts

*Education:

Essential:

• First university degree in Cybersecurity, Computer Science, InformationTechnology, or related field

 Desirable:

• Advanced university degree in Cybersecurity, Computer Science,Information Technology, or another related field
• Any of the following certification: OSCP, CEHv9, ITILv3, eCPTX, eWPTXv2,eCPPTv2, CISSP, or other related certifications

Languages:

• English: Expert knowledge is required
• Knowledge of another UN official language would be an advantage

UNICC Global Competencies:

• Teamwork: Develops and promotes effective relationships with colleagues and team members. Deals constructively with conflicts.
• Communicating: Expresses oneself clearly in conversations and interactions with others; listens actively. Produces effective written communications. Ensures that information is shared.
• Respecting and promoting individual and cultural differences: Demonstrates the ability to work constructively with people of all backgrounds and orientations. Respects differences and ensures that all can contribute.
• Producing results: Produces and delivers quality results. Is action oriented and committed to achieving outcomes.
• Moving forward in a changing environment: Is open to and proposes new approaches and ideas. Adapts and responds positively to change.
• Building and promoting partnerships across the Organization and beyond: Develops and strengthens internal and external partnerships that can provide information, assistance, and support to UNICC. Identifies and uses synergies across the Organization and with external partners.

Eligibility:

This vacancy notice is open only to internal candidates

Compensation:

Annual Salary Estimation (net of tax at single rate):

• Valencia, (Spain) including post adjustment (31,9% on January 2025): US$ 92,609
• Madrid, (Spain) including post adjustment (31,9% on January 2025): US$ 92,609

UNICC also offers generous leave and absence allowances, flexible working hours, overtime compensation, teleworking, access to training, and depending on eligibility other benefits such as relocation grant, dependency allowance, language allowance, or education grant.

Closing date for applications:

Applications will be accepted until midnight (Geneva Time) on 23 January 2025.

Notes:

• Technical and/or personality tests may be carried out as part of the selection process
  Only short-listed candidates will be contacted
  Though you may not be selected for this advertised position, the UNICC will keep your application in a roster if your profile is deemed to be of potential interest for the Centre. You may thus be solicited by our HR department to participate in an interview for another position* For UNICC staff members who do not meet the minimum educational qualifications, please refer to the applicable WHO e-Manual Annex 6 – Guidelines on Standard Minimum Experience Exposure and Education Requirements

* For UNICC staff members who do not meet the minimum educational qualifications, please refer to the applicable WHO e-Manual Annex 6 – Guidelines on Standard Minimum Experience Exposure and Education Requirements

Please inform us should you require any specific accommodation to facilitate your application

The UNICC workforce consists of many diverse nationalities, cultures, languages, and opinions. UNICC seeks to sustain and strengthen this diversity by ensuring equal opportunity and an inclusive working environment for its entire workforce. Applications are encouraged from all qualified candidates without distinction on grounds of race, ethnicity, sex, national origin, age, religion, disability, sexual orientation and gender identity.

For applications to be valid, they must contain a motivation letter and the filled Personal History Form.