Date of publication: 15 February 2023
Deadline for applications: 1 April 2023
Post title: Information Systems Officer (Cybersecurity)
Organizational unit: Information and Communication Technologies Division 
Grade:    P-3
Duty Station: International Court of Justice, The Hague, Netherlands
Vacancy Announcement Number: 2023/921
Indicative minimum net annual remuneration (including post adjustment) based on current rates: USD 92,719.00

Organizational setting

The position is located in the Registry’s Information and Communication Technologies Division (ICT Division). The incumbent reports directly to the Head of Division.

Duties/Responsibilities

Under the direct supervision of the Head of the ICT Division and within the limits of delegated authority, the incumbent will perform the following duties: 

 Participates in the review, development, implementation and reinforcement of information security policies 

• Contributes to the development and implementation of the overall information management strategy. 
• Develops, implements and advises on policies relating to information security practices which ensure the confidentiality, integrity and continued availability of the Court’s information assets based on the needs of the Court and its staff, business process, workflows, technical architecture and information resources analysis. 
• Defines technical and procedural security controls to protect all information processed, whether verbally, electronically, on paper or in any other format, taking into account endpoint security, network security, security architecture, physical security and service desk operations. 
• Develops a client outreach strategy and co-ordinates its implementation to develop an environment of joint responsibility for the protection of the Court’s digital information. 
• Develops best practices and manuals, and organizes training for the Court’s staff and users on the use of systems and best practices for information management. Conducts ongoing policy-oriented research on information security issues. 
• Ensures strict adherence to information security access and restrictions policies. 
• Monitors, analyses and reports to the Head of the ICT Division on the implementation and impact of, and non-compliance with, strategy, administrative issuances and policies, and, within delegated authority, takes or advises on follow-up actions. 
• Advises the Head of the ICT Division on measures to strengthen compliance with information strategies and policies. 

Manages information security projects involving security threat studies, systems analysis, design, development and implementation of new, moderately complex systems to secure the information of the Court 

• Supports and facilitates internal communication, information sharing and knowledge management, particularly about protecting the integrity of Court records of all forms and preventing breaches of confidentiality. 
• Provides metrics and reports regarding the performance and value of all information security operation tools. 
• Ensures audit trails, system logs and other monitoring data sources are reviewed periodically and are in compliance with policies and audit requirements. 
• Co-ordinates and supervises the investigation, communication, documentation and resolution of information security incidents. Assesses and corrects incidents, including driving root cause analysis to prevent future occurrences. 
• Co-ordinates and supervises forensic investigation activities. 
• Adopts standards consistent with ISO 27001 regarding information security issues arising from the use, development and implementation of information and communications systems, software applications and IT infrastructure. 
• Builds and maintains effective relations with clients and key staff involved in information management and its security and understands the needs of the organization and clients, and business process. 
• Manages the information security audit programme and reviews the information security audits conducted by the ICT Division. 

Assists the Head of the ICT Division in some administrative aspects of information security matters 

• Assists in the development, preparation, co-ordination and monitoring of information security programmes. 
• Assists the Head of the ICT Division in budget preparations, procurement actions and reporting of programme performance with respect to information security matters. 
• Supervises the work of the GS-5 Information Security Assistant. 
• Represents the ICT Division, as required, in working groups, task forces and other fora, advocating information security standards. 
• Performs other related duties as required. 

Education

• Advanced university degree (Master’s degree or equivalent) in computer science, information systems or related field. A first-level university degree in combination with two additional years of qualifying experience may be accepted in lieu of an advanced university degree.
• Formal certification in information systems security, such as CISM, CCISP, CISSP or equivalent is desirable.
• Formal certification in Microsoft Azure Security Technologies is desirable.

Experience and skills

• A minimum of five years of progressively responsible experience in planning, design, development, implementation and maintenance of computer information systems or related area is required.
• Experience managing technology projects and resources is required.
• Experience performing digital forensic analysis is desirable.
• Experience assessing State-actor or similar level attack capabilities, hacking tools and surveillance capabilities is desirable.
• Experience designing and implementing information security technologies across a variety of platforms is desirable.
• Experience using tools and techniques for threat and risk assessment (e.g. CRAM or COBRA) is desirable.
• Experience using eDiscovery tools is desirable.
• Experience implementing a data protection program is desirable.
• Experience working for a judicial institution is considered an asset.

Languages

• English and French are the official and working languages of the Court. Proficiency in one of these languages is required, as well as a working knowledge of the other. Knowledge of other official languages of the United Nations would be an asset. 

Competencies

Professionalism: Demonstrates knowledge of information technology security architecture across a variety of platforms, including firewalls, intrusion prevention systems, SSL certificates, proxy and content filtering technologies, databases, managing third-party storage providers (“cloud services”), Core Networking and the Open Web Application Security Project (OWASP); demonstrates knowledge of IT governance best practices, such as ITIL and ISO 27001; shows pride in work and in achievements; demonstrates professional competence and mastery of subject-matter; is conscientious and efficient in meeting commitments, observing deadlines and achieving results; is motivated by professional rather than personal concerns; shows persistence when faced with difficult problems or challenges; remains calm in stressful situations.
 

Communication: Speaks and writes clearly and effectively; listens to others, correctly interprets messages from others and responds appropriately; asks questions to clarify and exhibits interest in having two-way communication; tailors language, tone, style and format to match audience; demonstrates openness in sharing information and keeping people informed.
 

Teamwork: Works collaboratively with colleagues to achieve organizational goals; solicits input by genuinely valuing others’ ideas and expertise; is willing to learn from others; places team agenda before personal agenda; builds consensus for task purpose and direction with team members; supports and acts in accordance with final group decisions, even when such decisions may not entirely reflect own position; shares credit for team accomplishments and accepts joint responsibility for team shortcomings.
Planning and Organizing: Develops clear goals that are consistent with agreed strategies; identifies priority activities and assignments; adjusts priorities as required; monitors and adjusts plans and actions as necessary; allocates appropriate amount of time and resources for completing work; uses time efficiently.
 

Accountability: Takes ownership of all responsibilities and honours commitments; delivers outputs for which one has responsibility within prescribed time, cost and quality standards; operates in compliance with organizational regulations and rules; supports subordinates, provides oversight and takes responsibility for delegated assignments; takes personal responsibility for his/her own shortcomings and those of the work unit, where applicable.
 

Creativity: Actively seeks to improve programmes or services; offers new and different options to solve problems or meet client needs; promotes and persuades others to consider new ideas; takes calculated risks on new and unusual ideas; thinks “outside the box”; takes an interest in new ideas and new ways of doing things; is not bound by current thinking or traditional approaches.
 

Client Orientation: Considers all those to whom services are provided to be “clients” and seeks to see things from clients’ point of view; establishes and maintains productive partnerships with clients by gaining their trust and respect; identifies clients’ needs and matches them to appropriate solutions; monitors ongoing developments inside and outside the clients’ environment to keep informed and anticipate problems; keeps clients informed of progress or setbacks in projects; meets timeline for delivery of products or services to client.
 

Commitment to Continuous Learning: Keeps abreast of new developments in own occupation/profession; actively seeks to develop oneself professionally and personally; contributes to the learning of colleagues and subordinates; shows willingness to learn from others; seeks feedback to learn and improve.
 

Technological Awareness: Keeps abreast of available technology; understands applicability and limitations of technology to the work of the office; actively seeks to apply technology to appropriate tasks; shows willingness to learn new technology.
 

Remuneration

Depending on professional background, experience and family situation, a competitive compensation and benefits package is offered.

The Court’s salaries are calculated in US dollars but paid in euros. They consist of a basic salary and a post adjustment which reflects the cost of living in the Netherlands and the euro/dollar exchange rate.

In addition, the Court offers an attractive benefits package including 30 days of annual leave, home travel every two years, an education grant for dependent children, a pension plan and subsidized medical insurance.

Assessment

The assessment of qualified candidates will include a remote written test and an interview.

Notice

The Court is an equal opportunity employer and encourages all candidates, irrespective of gender, nationality, religious and ethnic backgrounds, including persons with disabilities, to apply to become a staff member

How to apply

Candidates should apply through the Court’s e-recruitment system. Please note that applications received after the deadline will not be accepted.

The selected candidates may be subject to security clearance, including verification of the information provided and a criminal record check. All candidates should be in a position to submit an electronic copy of their passport and all diplomas listed on their profile when requested.

The Registrar reserves the right not to appoint any candidate to the post, or to appoint one at a lower level or on the basis of a modified job description. Applications that are found by the Court to meet the above criteria may be added to a reserve list in case a similar vacancy arises in the future.

Only applications from candidates under serious consideration will be acknowledged.