Location: Quito, Ecuador
The Cybersecurity Specialist supports WWF's cybersecurity initiatives, including monitoring, analyzing and enhancing the security posture of WWF's information systems, endpoints, cloud services and data environments. The role works closely with Cybersecurity, IT, Compliance and Risk Management teams and other stakeholders to implement and maintain security policies, procedures, controls and tools, and supports and manages the Information Security Management System (ISMS). The specialist also acts as a cybersecurity advisor on secure technology use, endpoint protection, security awareness, vulnerability management and responsible use of data. Reports to the VP, Corporate Information Security.
Key responsibilities:
- Monitor and analyze security alerts, logs and events across endpoints, cloud services, networks, applications and enterprise platforms.
- Support incident investigations, root cause analysis, remediation tracking and post-incident lessons learned.
- Develop and revise documentation of security procedures, standards, assessment results and control implementation.
- Advise on the ISMS and support compliance with frameworks and regulations such as CIS, PCI, ISO and GDPR.
- Participate in internal and external security audits, assessments and control reviews, and track remediation.
- Advise country offices, business units and IT teams on security best practices and risk mitigation.
- Report on cybersecurity maturity, risk posture and alignment with the CIS Critical Security Controls.
- Coordinate security awareness training programs and create awareness materials.
- Support evaluation and implementation of new security tools and technologies.
Requirements:
- 4+ years of experience in cybersecurity or equivalent (Bachelor's degree in Computer Science or IT highly preferred).
- Bilingual: strong written and verbal English and Spanish.
- Proven experience with cybersecurity technologies, including SIEM, SOAR, playbooks and EDR tools.
- Knowledge of cloud services, third-party risk management and application security.
- Familiarity with PCI, CCPA and GDPR requirements.
- Advanced proficiency with Windows and macOS.
- Strong organizational, documentation and project management skills.
- Preferred: additional security certifications. International travel is possible.
Salary and benefits are paid in local currency.
HOW TO APPLY:
Apply via the SmartRecruiters link. Resume and cover letter must be submitted in English. Candidates must be currently based and authorized to work in one of: Bolivia, Chile, Ecuador, Guatemala, Belize, Honduras, Mexico, Paraguay, Suriname, or Guyana. Position is not eligible for visa sponsorship.
https://jobs.smartrecruiters.com/WorldWildlifeFundInc1/744000153753919