MTIT/CISG SSA - Information Security GRC Specialist - (TAL-MTIT20250310-002)
Organization: MTIT-Division of Information Technology
Primary Location: Austria-Vienna-Vienna-IAEA Headquarters
Job Posting: 2025-03-12, 2:24:53 AM
Closing Date: 2025-04-02, 4:59:00 PM
Duration in Months: 12
Contract Type: Special Service Agreement - SSA
Full Competitive Recruitment: No

QUALIFICATIONS AND EXPERIENCE

• University Degree in Information Security, Information Management, Computer Information Systems, Risk Management, or related field (or four additional years of experience may be considered in lieu of a University Degree.)
• Non-Degree Program - Accredited certification in CISA certification or any other related (such as CISSP, CISM) as an asset.
• Minimum of five years of experience with Information Security, Governance, Risk Management, Compliance, Auditing or a related field.
• Minimum of two years of experience working with the development of policies and standards.
• Proven experience with project management, planning, coordination, implementation.
• Proven experience with and knowledge of presentation of data visualisation, strategies, roadmaps, and best practices to effectively communicate.
• Ability to work independently and self-initiate relevant tasks.
• Excellent communication skills to convey complex findings to both technical and business executives.

The Information Security Management System (ISMS) is a set of policies and procedures for systematically managing the information security risk of Agency information assets. The Agency ISMS is certified under ISO/IEC 27001: 2022. To maintain and increase the maturity of the Information Security Programme at the IAEA, it is imperative to ensure a comprehensive and robust Governance, Risk, and Compliance Framework is in place. This initiative is necessary to ensure information security standards and governance, set within the risk management framework, underlie critical business processes to assure confidentiality, integrity, and availability across the Agency.