Overview

Contribute to improving the Organisation’s Digital Security Posture through vulnerability identification and management, recommending mitigation options and advising on best practice digital Security Controls.

Tasks Summary

• Lead Vulnerability Identification and Remediation across all OECD digital assets and systems.
• Coordinate and oversee remediation efforts with relevant technical teams.
• Plan and execute advanced security assessments, including annual Red Teaming exercises and penetration tests.
• Advise on control recommendations during risk reviews for digital solutions.
• Document remediation plans in line with OECD and industry standards.
• Issue mandatory notifications for vulnerability remediation.
• Oversee the implementation of patching and controls and monitor compliance.
• Contribute to the development, implementation, and continuous improvement of digital security policies.
• Establish and maintain regular performance monitoring and reporting mechanisms for vulnerability management activities.
• Develop and deliver communications and change management strategies to promote a culture of digital security and privacy.
• Draft guidance documentation and best practices.
• Organise, facilitate, and participate in workshops with stakeholders.
• Assist with stakeholder interaction.
• Support Directorates in understanding and fulfilling their digital security responsibilities.

Experience Requirements

• Minimum of 3 years of relevant Vulnerability Management experience.
• Experience in delivering practical Vulnerability Management strategies and practices in organisations in either the public or private sector.
• Experience in Vulnerability Management Methodologies and Frameworks, such as ISO 27001 & 27002 / NIST SP 800-40r4 / SANS/ OWASP/ CVSS.
• Demonstrated knowledge of the M365 technological environment.
• Experience in drafting Vulnerability Management and patching documentation and user guidance.
• Excellent communication skills with the ability to explain complex technical ideas in plain or easy to understand language.
• Experience with data protection-related matters and strategies would be an advantage.

Qualification Requirements

• Post-secondary education in Information Security, or a related field, or equivalent practical experience.
• Qualifications or education in Vulnerability Management would be an advantage.

Other Details

Languages Required: Fluency in one of the two OECD official languages (English and French) and a knowledge of, or a willingness to learn, the other.

Languages Preferred: Knowledge of other languages would be an asset.

Contract Duration: Fixed-term contract of 3 years.

Work Modality:

Remuneration: Depending on level of experience, monthly salary starts at 7 644.78 EUR, plus allowances based on eligibility, exempt of French income tax.