Introduction

Established in 1951, IOM is a Related Organization of the United Nations and the leading UN agency in the field of migration. Working closely with governmental, intergovernmental and non-governmental partners, IOM promotes humane and orderly migration for the benefit of all. It saves lives and protects people on the move, drives solutions to displacement, and facilitates pathways for regular migration, while providing services and advice to governments and migrants.

Job Description

IOM is committed to fostering a respectful, inclusive and supportive workplace where all employees can thrive professionally and feel valued. By creating such an environment, IOM aims to better harness the full potential of migration and strengthen its support to people on the move.

IOM invites candidates from diverse backgrounds to apply and provides reasonable accommodation throughout the recruitment process when required. Learn more about IOM’s workplace culture at IOM workplace culture | International Organization for Migration.

Internal and external candidates will be considered for this vacancy.

For the purposes of this vacancy, internal candidates are defined as staff members holding a regular, fixed-term or short-term graded or ungraded contract, including Junior Professional Officers (JPOs), UN Volunteers with at least twelve (12) months of continuous service in IOM, staff on Special Leave Without Pay (SLWOP), and staff members on secondment/loan released by the Organization, unless otherwise specified in their contract. Staff members holding a regular, fixed-term or short-term graded contract will not retain their contract type if appointed to an ungraded position.

Organizational Context and Scope





The ICT Officer (Cloud SecOps Engineer) will lead own and evolve the cloud security architecture and operations for IOM. The role ensures the security, integrity, and compliance of IOM’s cloud infrastructure (primarily Azure, with multi-cloud awareness). This role focuses on threat detection, incident response, security automation, and hardening of cloud environments supporting IOM integral offices.

The ICT Officer (Cloud SecOps Engineer) will collaborate closely with development, operations, and information security teams to identify and analyse vulnerabilities, support the DevOps colleagues in the resolution or mitigation of these vulnerabilities, enforce compliance, and foster a culture of security awareness within the organization.

Under the overall supervision of the Chief Technology Officer and the direct supervision of Senior ICT Officer (Cloud Services), the ICT Officer (Cloud SecOps Engineer) will be responsible for the cloud infrastructure operations.

Responsibilities

SECURITY MONITORING & INCIDENT MANAGEMENT

- Implement 24/7 monitoring using Microsoft Sentinel, Defender for Cloud, and Azure Monitor.
- Implement, monitor, and maintain data loss prevention (DLP) strategies and controls across cloud environments to safeguard sensitive data against unauthorized access, leakage, and exfiltration.




- Investigate AND remediate security incidents (breaches, malware, DDoS) with root-cause analysis.
- Define incident detection and incident management workflows and playbooks for cloud environments and collaborate with CSIRT teams.

IDENTITY & ACCESS MANAGEMENT (IAM)

- In coordination with the Identity and Access management team, enforce Zero Trust via Azure AD Conditional Access, PIM, and RBAC.
- Audit service principals, role assignments, and privileged access.

COMPLIANCE & VULNERABILITY MANAGEMENT

- Ensure compliance with relevant security regulations and standards such as GDPR, ISO 27001, NIST, CIS Benchmarks in cloud environments and attain baseline with Azure Security Benchmark.
- Conduct vulnerability scans (Defender for Cloud, Tenable) and patch management.
- Automate compliance checks using Azure Policy and Blueprints.
- Implement security checks into CI/CD pipelines, ensuring compliance with industry standards.

DEVSECOPS INTEGRATION

- Embed security into CI/CD pipelines (Azure DevOps, GitHub Actions).
- Scan IaC templates (Terraform, Bicep, ARM) for misconfigurations.

THREAT HUNTING & AUTOMATION

- Proactively identify and investigate potential threats within the cloud environment.
- Develop KQL queries in Sentinel for proactive threat detection.
- Automate responses using Azure Logic Apps and Functions.

COLLABORATION & SUPPORT

- Work with other teams (e.g., cloud operations, development, information security) to implement and maintain cloud security.
- Train teams on cloud security best practices.
- Coordinate with infosec to ensure completeness of security policies, procedures, and incident reports.
- Provide technical expertise and guida

📌 Information and Communications Technology (Valencia)
🏢 IOM - UN Migration
📍 Valencia