Information Security Officer; P

The OPCW’s mission is to implement the provisions of the Chemical Weapons Convention to achieve our vision of a world free of chemical weapons in which chemistry is used for peace, progress, and prosperity, and to contribute to international security and stability, general and complete disarmament, and global economic development.

The OPCW was awarded the Nobel Peace Prize in 2013 for its extensive efforts to eliminate chemical weapons.

• Contract Type
  Fixed-term Professional
• Grade
  P3
• Total Estimated monthly remuneration depending on post adjustment and family status: USD
  8,728
• Closing Date
  24/09/2026

The Office of Confidentiality and Security (OCS) sets the framework, provides the guidelines, institutes the measures and implements the necessary provisions to guarantee and enforce the fulfilment of the stringent OPCW confidentiality regime; operational security of the Secretariat's assets; the security of all its electronic systems; the confidentiality of all classified material and its safeguarding.

Under the direct supervision of the Head, Confidentiality and Information Security (H/CIS), the Information Security Officer contributes to the implementation, monitoring and assurance of the OPCW information security programme by supporting information security governance, policy, risk assessment, compliance monitoring, access control review, incident response, investigations, resilience and security testing.

Main Responsibilities:

1. OPCW Information Security Governance and Programme Support

• Coordinates all aspects of the OPCW information security programme and implementation of information and ICT security measures to ensure the preservation of the confidentiality, integrity and availability of OPCW’s information;
• Serves as focal point for all information security-related programmes and projects, advising the H/CIS, and contributes to information security governance, policy, compliance and management reporting;
• Contributes to the development, review, maintenance and enforcement of policies, procedures, standards and guidelines for secure Information and Communications Technology (ICT) and information handling;
• Monitors, assesses, and reports on control implementation and effectiveness for the maintenance of compliance with organisational policies, confidentiality requirements and relevant international information security standards;
• Conducts and reviews security audits of ICT service providers and the supply chain;
• Collaborates with staff across OPCW to provide guidance on confidentiality and information security requirements;
• Contributes to data collection informing senior leadership on the organisation’s information security posture and programme effectiveness. Assists the H/CIS in drafting the Director-General’s Annual Reports requiring OCS/CIS input;
• Serves as Acting H/CIS when required.

2. Risk, Vulnerability and Control Assessments

• Performs security risk, vulnerability and control assessments to identify risks to ICT and data systems, and information assets. Recommends appropriate mitigation measures;
• Identifies, analyses and evaluates risks to a/m systems. Recommends or coordinates mitigation measures in close coordination with stakeholders;
• Performs regular assessments of the OPCW infrastructure to identify potential vulnerabilities, prioritise and categorise related risks, and supports the development of implementation plans to remediate or mitigate them;
• Reviews and assesses the security management, monitoring and performance of ICT assets, recommends improvements, and reports identified gaps where required;

• Monitors emerging information security threats, standards, products, techniques, and technologies. Advises the H/CIS on relevant and applicable controls and measures;
• Supports security and confidentiality reviews of new or changed applications, platforms and ICT services prior to procurement, approval or deployment.

3. Security Monitoring, Incident Response and Investigations

• Conducts security monitoring, incident response, preliminary enquiries, investigations and digital evidence handling related information to security incidents, confidentiality…