Organizational context: Established in 1951, the International Organization for Migration (IOM) is a UN-related agency promoting humane and orderly migration. The Security Operating Center (SOC) Analyst role operates within the Information Security & Risk Management Unit, reporting to the Information Security Officer, and contributes to ensuring cybersecurity threats are monitored, detected, analyzed, escalated, and responded to effectively. Job purpose: The Security Operating Center (SOC) Analyst is responsible for ensuring the timely and effective monitoring, detection, analysis, escalation, and response to cybersecurity threats. This role involves continuous security monitoring using various tools, alert triage, incident detection and response, threat hunting, log management, and documentation. The analyst will collaborate with internal teams to maintain security requirements throughout system lifecycles and contribute to the overall security posture of the organization, supporting IOM's mission to promote humane and orderly migration. Responsibilities: The SOC Analyst will review and handle cybersecurity alerts, responding to incidents via the ticketing system and providing 24x7 incident response coverage. Responsibilities include collaborating with diverse IOM staff for coordinated response, maintaining the Integral CSIRT website, and preparing comprehensive incident reports. The role involves conducting internal log analysis, creating dashboards using Microsoft Sentinel and Power BI, and managing/optimizing cybersecurity tools. Additionally, the analyst will collect inventory information,



support project initiatives like DLP and AI applications, assist with audits, review security policies against standards, conduct vulnerability assessments, and organize training sessions to enhance incident preparedness. Education: A Master’s degree in Computer Science, Information Technology, Cybersecurity, or a related field with four years of relevant experience, or a University degree with six years of relevant experience. Essential certifications include CompTIA Security+, CISSP, CISM, or CISA. Desirable certifications include NIST Cybersecurity Framework Practitioner, ISO 27001 Lead, or CIS Controls. Work experience: Experience is required with security technologies such as SIEM, Email Security Gateway, DLP, IAM, endpoint protection, and cloud security controls (Azure, AWS). The role also requires experience collaborating with business and technical teams to develop secure solutions and experience working within humanitarian, development, or United Nations organizations. Skills: Advanced experience with Microsoft Sentinel and Microsoft Defender for Vulnerability Management. Proficiency in Power BI for dashboard creation and reporting. Proven cybersecurity incident response team (CSIRT) experience, including incident handling and playbook development. Knowledge of NIST 800-61 and ISO-27035 frameworks. Strong analytical, problem-solving, and communication skills, with the ability to articulate technical concepts to non-technical audiences. Experience in risk assessments, security audits, and developing security policies. Required languages: Arabic, English, French, Russian, Spanish Desired languages: #J-18808-Ljbffr

📌 Information and Communications Technology (ICT) Officer (Security Operating Center Analyst) (C)
🏢 IOM
📍 Valencia