IAM & ZeroTrust Security Specialist

Overview

Provides strategic guidance, governance, and oversight for the organization’s Identity and Access Management and Zero Trust security posture, ensuring alignment with enterprise risk management and global cybersecurity frameworks.

Tasks Summary

• Define and maintain the organization's Zero Trust Strategy aligned with industry standards (NIST, CISA)
• Develop IAM governance frameworks aligned with industry standards (ISO, NIST)
• Maintain IAM and Zero Trust policy documentation (e.g., Access Control Policy, Privileged Access Policy).
• Support incident response process.
• Participate in and advise management, risk committees and architectural review boards.
• Establish IAM control requirements for applications, infrastructure, and identity providers.
• Provide expert cybersecurity advisory to projects, ensuring identity and Zero Trust controls are integrated from design.
• Assess risks related to identity lifecycle, authentication, authorization, privileged access and third-party access.
• Evaluate identity-related exceptions and deviations from policy, advising mitigation strategies.
• Track progress of Zero Trust and IAM programs at organizational level.
• Define maturity metrics and KPIs for identity security and Zero Trust adoption.
• Ensure IAM practices adhere to least privilege, RBAC/PBAC, JIT/JEA and privileged access governance.
• Support internal and external audits by defining IAM control evidence and acceptable configurations.
• Prepare executive-level reporting on IAM and Zero Trust maturity, risks, and recommendations.
• Additional duties as requested.

Experience Requirements

• At least 6 years of relevant work experience
• Experience in multinational organizations

Qualification Requirements

Degree in the field of Computer Science/Engineering or related STEM disciplines or equivalent working experience

Other Details

Languages Required: Fluency in oral and written English is mandatory

Languages Preferred: intermediate knowledge of another official UN language (Arabic, Chinese, French, Russian and Spanish) or Portuguese (one of WFP’s working languages) is desirable. IT Security and IT Audit certifications, CCSP, CISSP, CISM, CRISC. ISO 27001 Lead Implementer/Auditor, or equivalent. IAM-specific credentials.

Contract Duration:

Work Modality: Remote working

Remuneration: