Director of Information Security

As a prominent human rights and democracy organization, Freedom House employees, partners, beneficiaries, and systems face increasing cybersecurity threats. As such, Freedom House is seeking a vigilant and proactive Director of Information Security to ensure that Freedom House’s technology and information assets (data, applications, infrastructure, and processes)—and those of its partners—are appropriately secured and protected. The Director will be responsible for oversight of all aspects of Freedom House’s IT ecosystem and will coordinate information security efforts across the organization, including with Freedom House’s managed services provider and our project teams that support activists, journalists, civil society organizations, and human rights defenders around the world.

An important year 1 initiative, the Director will lead the development of organizational information security policies and implementation of an information security program in partnership with the IT services team, our cyber security consultants, the Digital Security Technical Advisor for Freedom House’s Emergency Assistance Program, and the physical security team . In standing up the information security program, the Director will consult with regional program teams and programmatic partners to design and implement a responsive support system that ensures Freedom House’s staff, global offices, programs, and partners—who include human rights defenders, activists, and civil society organizations (CSOs) under threat—have the highest safeguards for the protection of their cyber and digital security. Support will take various forms, including: developing standards, practices, and protocols relating to information security; direct training to staff and program partners; consulting on information security emergencies and communications in high-risk environments; conducting organizational security audits/risk assessments of local CSOs and providing recommendations to address gaps; developing new approaches to meet emerging threats; and monitoring the efficacy of digital security interventions.

This is a full-time position based in Washington DC with flexible telework options, reporting to the Chief Operating Officer. Remote US-based candidates will be considered on a limited basis.

PRINCIPAL DUTIES, RESPONSIBILITIES, AND EXPECTATIONS:

• Oversee Freedom House’s IT infrastructure, cyber security, digital security protocols, IT policies, and cyber governance; help to build a cyber security culture.
• Manage contracts/engagements with our IT services and cyber security providers.
• Improve Freedom House’s preventative and detective capabilities.
• Work with Freedom House’s managed services provider and outside consultants to develop and maintain information security policies, standards, and guidelines for the organization.
• Identify key cyber security concerns based on threat analysis, provide recommendations on threat prevention, and manage implementation of the solutions in partnership with our managed IT services provider and cyber security consultants.
• Lead training of Freedom House staff and partners on information security policies, protocols, and practices, working closely with the Digital Security Technical Advisor.
• Develop and implement organizational digital security program. Draw on threats/needs analysis, design and implement digital security protocols/strategies, taking into account the variable needs, capacities, and contexts of global staff, programmatic partners, and other stakeholders.
• Partner with management system “owners” to ensure applications are current with patches and security features. The Director will be consulted during the selection and implementation of any new management systems but is not expected the lead those implementations.
• Manage the IT Business Recovery Plan and oversee annual testing of major systems, networks, and applications. Act as a resource in the event of disaster or disruption.
• Build a strong security culture at FH. Regularly communicate with staff on the need to remain vigilant and the training tools available to them, implement campaigns to periodically test staff awareness (e.g., internal phishing simulation campaign) and ensure appropriate HDR (human detection and response).
• Other duties as needs evolve.

MINIMUM QUALIFICATIONS

• Bachelor’s degree in computer science or 4 years of equivalent experience in addition toa minimum of 7 years of experience in IT/Corporate Security/Information Security.
• Deeply committed to nonpartisanship, exhibiting a strong and sustained commitment to the mission of Freedom House.
• Ability to pivot between strategic leadership and hands-on work.
• Strong analytical, critical and process orientated thinking and problem-solving skills; strong project manager.
• A broad understanding of the cyber and digital security landscape and its impact on Freedom House in order to identify, mitigate, and remediate, as needed, threats and vulnerabilities to the organization.
• Advanced knowledge of network security infrastructure, risk analysis, data/voice communication systems, services, and system/network configurations as well as network operations, design, and systems management.
• Strong technical understanding of the digital threats faced by human rights defenders, including surveillance capabilities of international actors, and digital security tools and tactics for activists, including encryption, circumvention, and anonymizing technologies and mobile security.
• Exceptional written and verbal communication skills in English, including the ability to translate complex IT concepts into easily understandable language.
• Committed to a diverse, inclusive, and equitable workplace where all feel that they belong.
• Results-oriented, proactive, and adaptive IT leader able to build trusted relationships across the organization.

ADDITIONAL INFORMATION

• Diversity makes our work stronger. We actively seek a diverse applicant pool and encourage candidates of all backgrounds—particularly Black, Indigenous, and people of color, individuals from the LGBTI+ community, and people living with disabilities—to apply.
• Freedom House provides a competitive benefits package, including a 403(b) retirement account with generous matching, commuter benefits, flexible hours, floating holidays, high employer contributions to medical, dental, and vision programs, basic and voluntary life and AD&D insurance, short- and long-term disability, flexible spending account, and more.
• Salaries are commensurate with experience and based on pay grades that prioritize equity across the organization. The salary range for this position is $125,000 – $150,000/year and will be commensurate with experience.
• Candidates must possess authorization to work in the United States.
• As part of our standard hiring process for new employees, employment will be contingent upon successful completion of a background check.

Freedom House is an Equal Opportunity Employer and does not discriminate in its selection and employment practices. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, political affiliation, sexual orientation, gender identity, marital status, disability, or protected veteran status, genetic information, age, membership in an employee organization, or other non-merit factors.

WORKING CONDITIONS:

General Working Conditions:

• General working office environment or telecommuting.
• Some long hours including evenings and weekends to complete tasks or respond to emergencies that require immediate IT support.
• Potential travel to field offices less than 5% of the time

Work Environment and Physical Demands:
Essential functions are typically performed in an office setting or telecommuting. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.