Cybersecurity Consultant

Washington, DC

Employer:

Description

Cybersecurity Consultant

Estimated Start Date: March 16, 2024
Estimated Completion Date: September 15,2024
Estimated LOE: 40hrs/week

About Palladium:

Palladium is a global company working to design, develop and deliver positive impact on the lives and livelihoods of people around the globe; broaden access to health, water, power, and infrastructure; build enduring, sustainable, and transformative institutions and market systems to address global challenges; and conserve the natural world. We operate in over 90 countries and have a workforce of 4,000 talented, motivated, and diverse staff of all religions, races, languages, and gender identities.

This Opportunity:

The consultant will provide support by conducting cybersecurity assessments for the components of the system. Ensuring information security in the system's design and implementation is vital given its integration and interoperability with external systems. The consultant will collaborate with the Global ICT's IT Security Manager to conduct the assessments and develop best practices, Standard Operating Procedures (SOPs), and checklists as required.

Location: Palladium's Washington, DC office as required; telework

Reporting and Supervision:

The Cybersecurity Consultant will report to the Global Director, ICT
The Cybersecurityconsultant will support the Global ICT Team on the compliance andimplementation of Palladium's Information Security Policy over software,specifically for the Americas Partnership Supply Chain Management Project. Palladium's supply chain management technology platform aimsto provide visibility and operational oversight from procurement to last-miledelivery. The platform will integrate with existing third-party applicationsand in-country systems, allowing it to leverage functionalities of the third-partyapplications such as those for logistics planning, tracking, warehousing,quality assurance, and risk mitigation according to clients' needs.

Primary Roles and Responsibilities:

T heconsultant will provide support by conducting cybersecurity assessments for thecomponents of the system. Ensuring information securityin the system's design and implementation is vital given its integration andinteroperability with external systems. The consultant will collaboratewith the Global ICT's IT Security Manager to conduct the assessments anddevelop best practices, Standard Operating Procedures (SOPs), and checklists asrequired.

The consultantselected for this assignment will:

Conduct IT and IS security risk assessment and gap analysis for all technologies, products, services, departments, and vendors required by the project to ensure alignment with Palladium's Information Security Policies.
Conduct technical and nontechnical risk and vulnerability assessments of relevant technology.
Work in close consultation with Global ICT's cybersecurity team to review possible mitigating measures whenever technology compliance is not fully met, if feasible
Collaborate with cross-functional teams, including Global ICT, systems developers, and project managers, to integrate secure measures throughout systems implementation and integration
Develop SOPs, checklists, and templates for installation, use, and maintenance of approved software
Support testing of established security measures
Provide guidance and recommendations on security best practices and risk mitigation strategies

Deliverables

Approved Cybersecurity Assessments of applications to be used by the GHSC Project, based on Palladium's methodology and documentation, as per standards set by Global ICT
Deliverableswill be subject to review, revision, and final approval by Global Director, ICT

Key Competencies Required:

Bachelor's degree in Computer Science, Cybersecurity, or equivalent
Cybersecurity certification desirable
6 years of relevant ICT experience in the field of cybersecurity
Demonstrable experience in systems security development and management within complex IT environments.
In-depth knowledge of information security principles, with a clear understanding of cybersecurity policies, tools and best practices
Proven ability to conduct independent research on cyber security topics, analyze findings, and apply insights to enhance security practices
Analytical and problem-solving abilities to identify security gaps and risks in line with business and project needs
Good team working and collaboration skills to cooperate with other members of the Global ICT Information Security team
Ability to multitask, work under pressure, take initiative, meet deadlines, and acquire and apply technical skills, as necessary
Excellent communication and interpersonal skills
Systems delivery/project management skills

Equity, Diversity & Inclusion - Palladium is committed to embedding equity, diversity, and inclusion into everything we do. We welcome applications from all sections of society and actively encourage diversity to drive innovation, creativity, success and good practice. We positively welcome and seek to ensure we achieve diversity in our workforce; and that all job applicants and employees receive equal and fair treatment regardless of their background or personal characteristics. These include: (but are not limited to) socio-economic background, age, race, gender identity and expression, religion, ethnicity, sexual orientation, disability, nationality, veteran, marital or Indigenous status.

Should you require any adjustments or accommodations to be made due to a disability or you are a neurodivergent individual or for any other circumstance, please email our team at accessibility@thepalladiumgroup.com and we will be in touch to discuss.

Safeguarding - We define Safeguarding as "the preventative action taken by Palladium to protect our people, clients and the communities we work with from harm". We are committed to ensuring that all children and adults who come into contact with Palladium are treated with respect and are free from abuse. All successful candidates will be subject to an enhanced selection process including safeguarding-focused interviews and a rigorous due diligence process.

Back