Job title: Junior Information Security Officer
Location: Nepal 
Reports to: Systems Engineer
Duration: 12 months fixed term, with possible extension subject to funding
Closing date: 16 March 2025

BBC Media Action:

BBC Media Action is the BBC’s international development organisation, and we believe in the power of media and communication for good. We work in more than 30 countries around the world, supporting the independent media essential to democracy and development. Each year our projects and programmes reach over 100 million people facing poverty, inequality and insecurity with information they can trust, helping to improve health, bridge divides, challenge prejudice, and save and change lives. We follow the editorial standards and values of the BBC, but we rely on funding from donors and partners to carry out our work.

Job purpose:

Working within the cross-country IT Projects team, the junior information security officer will undertake routine monitoring of information systems across BBC Media Action’s global footprint to help protect them against attacks, as well as working with country office colleagues to ensure end user devices meet the security requirements.

Main duties and responsibilities:

• Operate monitoring systems focused on cyber security, following agreed processes to respond to incidents.
• Support the reporting of cyber security incidents by compiling logs, preparing written reports and operating alert and escalation procedures.
• Follow agreed processes to respond to incidents.
• Produce and transmit reports regarding cyber security incidents to internal and external authorities.
• Monitor client audit tools, working to update and remediate end user devices.
• Document and update system documentation and records.

Ideal candidate:  

You’ll bring a genuine enthusiasm for information systems (IS) and technology; and an understanding of IS principles and best practices. You’ll have experience working within a Microsoft Windows environment, ideally with experience of log aggregation tools or centralised management consoles. Understanding and experience working in a cyber security role, and experience using relevant toolsets, will be an advantage. 

You’ll also be able to prioritise workloads and know when to seek guidance. A fair standard of communication and presentation skills in English, both oral and written, is essential.

Safeguarding

This role may involve working with groups of vulnerable children, youth, and adults. For the successful candidate, mandatory training will be provided on BBC Media Action’s safeguarding policy and staff code of conduct. BBC Media Action operates a zero-tolerance policy concerning all forms of abuse and exploitation of vulnerable people. A police background check may form part of the recruitment process.