Vacancies at International Rescue Committee

Cyber Incident Response and IT Security 

• Continuously monitor the SIEM to identify and analyze potential security incidents and threats.
• Investigate security events escalated from the service desk or managed security service providers (MSSP), determining the root cause and implementing corrective actions.
• Run regular vulnerability scans using tools such as Qualys, and work with relevant teams to remediate identified vulnerabilities.
• Train the service desk on SecOps processes and procedures to ensure effective initial triage of security events.
• Compile and report on operational metrics to provide insights into the security posture and the effectiveness of security controls.
• Leverage a Security Information and Event Management (SIEM) system for advanced threat detection and response, utilize an IT service management (ITSM) platform for efficient ticket management, and employ a social media threat monitoring and protection tool.
• Research the latest in information technology security trends to keep up to date with the subject and use on the latest technology to protect information assets.
• Work with the team to develop a security plan for best standards and practices for the organization.
• Conduct frequent testing of simulated cyber-attacks to look for vulnerabilities in the systems and take care of these before an outside cyber-attack.
• Make recommendations to managers and senior executives about security advancements to best protect the organization.
• Help train junior colleagues in information security.

Key Working Relationships: 

• Position Reports to:  Manager – Security Operations 
• Position directly supervises: NA 
• Indirect Reporting: Director, Security Operations and Engineering Team
• Other Internal and/or external contacts: 
• Internal: IT staff across regions, HQ and Nairobi iHub, Safety and Security Team

Job Requirements: 
Education

• Bachelor's degree or equivalent professional experience. Prefer degree concentration in: Computer Information Systems, Management Information Systems, Computer Science

Work Experience 

• Min 2 years in IT security operations, 1 year in a global organization 

Demonstrated Skills and Competencies

• Strong knowledge of a Security Information and Event Management (SIEM) system, ITSM ticketing system, vulnerability management tools.
• Ability to analyze complex security issues and provide actionable recommendations.
• Excellent verbal and written communication skills for training and reporting purposes.
• Certifications: Relevant certifications such as CEH, or CompTIA Security+ are a plus.
• Experience: Previous experience in an operational information security role is highly desirable.

go to method of application »

We are seeking a highly skilled Information Security Manager to join our SecOps team. This role is purely operational and involves monitoring security information and event management (SIEM) systems, investigating security events, running vulnerability scans, and supporting the service desk. The ideal candidate will have experience with Microsoft Sentinel, ServiceNow ticketing, Qualys, and ZeroFox.

Major Responsibilities: 

• Continuously monitor the SIEM to identify and analyze potential security incidents and threats.
• Investigate security events escalated from the service desk or managed security service providers (MSSP), determining the root cause and implementing corrective actions.
• Run regular vulnerability scans using tools such as Qualys, and work with relevant teams to remediate identified vulnerabilities.
• Train the service desk on SecOps processes and procedures to ensure effective initial triage of security events.
• Compile and report on operational metrics to provide insights into the security posture and the effectiveness of security controls.
• Leverage Microsoft Sentinel for advanced threat detection and response, utilize ServiceNow for efficient ticket management, and employ ZeroFox for social media threat monitoring and protection.
• Lead a team of highly capable Security engineering staff who maintain security for system environments.­­
• Ability to mentor and have the capability influencing the group.
• Create and drive proactive monitoring and reporting for endpoint and system health including, patching, compliance, and other performance metrics.
• Manage vulnerability remediation and incident handling across global resources
• Implement new security technologies as required to support a dynamic/challenging business environment
• Identify operational opportunities to implement security orchestration and automation capabilities
• Support InfoSec-managed tools and enforcement of global security controls
• Effectively provide general information security guidance & technology support to the business
• Manage on call schedule and incident escalations
• Maintain the day to day operations of configuration management platforms including application deployment and settings distribution
• Work as the escalation point between various teams for Security related activities.
• Drive client and system security model and best practices
• Drive business decisions through data using tools like Splunk
• Integrate with other internal systems and tools
• Manage transition plans for major upgrades or patches
• Diagnose and investigate unique and complex systemic problems
• Work proficiently with minimal daily guidance and bring mature seasoned skills when working
• Evaluate and communicate security risk to a wide and varying audience

Key Working Relationships: 

• Position Reports to: Director, Security Operations and Enigeering Team
• Position directly supervises: One or more analysts
• Indirect Reporting: CISO, Senior Director Technology, Operations & Information Security  
• Other Internal and/or external contacts: 
• Internal:IT leadership and staff across regions, HQ and Nairobi iHub, global Safety and Security Team, line personnel across all regions, emphasis on International Programs. 
• External:Participates in  sector discussions of IT security-related issues. 

Job Requirements: 

• Education:Bachelor’s degree in an information systems-related field required. 
• Work Experience:3-6 years in IT system design, implementation and operations in a global organization; 1-3 years with  IT security systems

go to method of application »

Grants Management and Compliance

• Leads grant opening, quarterly review ( PIMS), and close-out meetings in collaboration with the Re: BUiLD Grants and Partnership Senior Coordinator and Program Director, ensuring follow-up on action points from these meetings.
• With guidance from the Re: BuiLD, Grants and Partnership Senior Coordinator, assist with annual updates to the Re: BuiLD Program Strategy and budget realignment for donor approval.

Donor Communication and Reporting

• Assist the Grants and Partnership Senior Coordinator in managing reporting requirements by sharing templates on time, following up on monthly updates, and  Monitor the review schedule to ensure reports are prepared, reviewed, and responsive to donor needs promptly
• Support the Grants and Partnership Senior Coordinator in establishing and maintaining effective internal and external communication channels regarding grants.

Partnerships Management

• Under the guidance of the Re: BUiLD Grants and Partnership Senior Coordinator, support program and operations staff with sub-contract and sub-grant management, including compliance and tracking partner deliverables.
• Advise and guide Re: BUiLD program staff on procurement planning and transactions for sub-contracts and sub-grants, in keeping with donor requirements and IRC policies, procedures, and standard practices

Information Management

• Lead in tracking the submission of reports maintaining file copies in Box and keeping a database of key donor contacts,
• Maintaining a comprehensive information management and filing system that ensures all donor and partner contractual documents, reports, key correspondences, etc. are appropriately filed in up-to-date and consistent soft and hard copies are available as needed.
• Assist in information management, including managing correspondence, filing, establishing procedures for systematic retention, protection, retrieval, transfer, and disposal of records

Administration management 

• Provide administrative support needs across all Re: BUiLD sites. 
• Assist in recruitment and coordination of  onboarding for new staff of  Re: BUiLD program
• Support in financial management, including assisting in budget preparation and tracking,  of financial reports, and preparation of payrolls where necessary. 
• Assist in procuring goods and services, including engaging consultants, and invoicing. 
• Support program team members to organize travel, including working with travel provider(s) to arrange and coordinate travel arrangements, visas, and booking system for Re: BUiLD teams 
• Support the planning of virtual and in-person meetings and workshops, including agendas, compiling and sending relevant pre-reads, taking minutes, and ensuring follow-up of action items. 
• Support managers to track team travel, working from home, annual leave, and general team 
• Whereabouts 
• Assist the Project Director or other Re: BUiLD program senior staff on special projects, as required 
• Assist in managing the Project Director’s calendar 

Requirements 

• 3-4 years of experience in a similar role preferably supporting senior staff 
• A collaborative and confident team player with strong interpersonal and communication skills 
• Ability to successfully and effectively liaise with people in different organizations and different time zones in a multi-cultural environment. 
• Highly computer literate and proficient in the use of Microsoft Word, Excel, PowerPoint, and Outlook. 
• Excellent written English and communication skills. 
• Solid organizational skills, detail-oriented, with ability to handle multiple tasks and prioritize tasks. 
• Resourceful and solutions-focused with the ability to suggest improvements to procedures. 
• Maintains sensitivity, confidentiality, and diplomacy with senior colleagues. 
• Experience arranging international travel and experiencing supporting events and meetings (virtual and in person) are an advantage.