FULL-TIME JOB VACANCY
INFORMATION SECURITY ADVISOR
Information Security Program
Multiple Locations Considered
Final date to receive applications:
August 23, 2026
The Information Security Program at Human Rights Watch (HRW) supports the organization in working safely and securely in an increasingly complex digital environment. Our primary focus is helping staff understand and manage security risks, incorporate security into everyday work, and confidently use technology in ways that support HRW’s mission.
The Information Security Program is seeking an Information Security Advisor to serve as a trusted security partner for staff across the organization. This is a highly collaborative, people-focused role centered on helping staff understand and manage security risks through practical guidance, training, awareness, and day-to-day support.
Working closely with the Director of Information Security, IT Ops, and colleagues across HRW, the Information Security Advisor will support staff in making informed security decisions, provide guidance for higher-risk activities and travel, and lead the development of security training, learning resources, and awareness initiatives. The role also contributes to incident response, governance, and the secure adoption of new technologies, helping strengthen HRW’s overall security posture while ensuring security remains practical, approachable, and aligned with the organization’s mission.
This position reports to the Director of Information Security, based in the US. This role will be based within commuting distance of the following HRW offices, and must be willing to work from the office on an as-needed basis:
Brussels, London, Stockholm, Amsterdam, Beirut, or Johannesburg.
Responsibilities Staff Security Support & Guidance
Serve as a trusted point of contact for staff seeking information security advice and support.Provide practical security guidance that enables staff to carry out their work safely while supporting HRW’s operational needs.Support staff preparing for higher-risk travel, field work, and other sensitive activities.Conduct security consultations for projects, workflows, technologies, and operational initiatives.Assist staff in securely using Microsoft 365, AI tools, and other technologies adopted by HRW.Build trusted working relationships across the organization and promote a collaborative approach to information security.Security Awareness, Training & Guidance
Lead HRW’s information security awareness and education program.Design, develop, and deliver engaging security training for staff globally.Develop and maintain security learning content within HRW’s Learning Management System.Create practical guidance, playbooks, knowledge articles, FAQs, and self-service resources.Plan and coordinate security awareness campaigns, phishing simulations, and educational initiatives.Measure the effectiveness of awareness activities and continuously improve staff engagement and learning outcomes.Governance, Risk & Technology
Support the implementation of HRW’s information security policies, standards, and governance framework.Help staff understand and apply information security policies in their day-to-day work.Participate in security reviews of new technologies, platforms, and services, including AI tools.Assist with information security risk assessments and provide practical recommendations to reduce risk.Contribute to the development of guidance for the secure and responsible use of emerging technologies.Incident Response & Microsoft Security Operations
Support staff in responding to information security incidents, providing practical guidance to help contain issues, recover safely, and learn from incidents.Use Microsoft 365 security tools and related systems to investigate issues, understand risks, and support resolution.Maintain accurate documentation of incidents, investigations, and lessons learned.Collaboration &
Continuous ImprovementWork closely with IT, Safety and Security, Legal, Human Resources, and other teams to strengthen HRW’s security posture.Contribute to improving security processes, procedures, and documentation.Develop reports, metrics, and dashboards…
