Global Initiative against Transnational Organized Crime

Security Engineer

• Maintain a threat assessment rooted in GI’s work and programs, and communicate the key facets of this assessment to relevant stakeholders
• Based on this threat assessment, implement and operate an Information Security Management System (ISMS), reporting as relevant into GI’s management team
• Maintaining ‘scoring’ and an improvement backlog based on this ISMS and a Cyber Security Framework (CSF)
• Working with the management team to align investment and strategy with GI’s risk appetite, costing and funding constraints and priorities - aiming to right-size cybersecurity investment and obtain funding as needed for sustainable risk management
• Engaging with GI’s staff to drive a culture of risk and data-based practice, embedding appropriate cyber security skills, supporting effective governance across the organisation, and enabling researchers and program staff to respond as appropriate to suspected breaches or intrusion
• Designing and rolling out technical controls as needed based on GI’s budget and risk appetite, and overarching information security management system
• Handling and respond to suspected breaches, targeted attacks, or ‘incidents’, developing over time a more formal incident handling process

Digital Security Lead – Consultant Role