🇳🇱 Information Security Officer (P-3) 🔐 OPCW Job in The Hague, Netherlands 🛡️ (~$8,728/month)

An organisation that safeguards the world's most sensitive information about chemical weapons cannot afford a security gap — and the OPCW is hiring the specialist who helps keep that shut. The Organisation for the Prohibition of Chemical Weapons (OPCW), winner of the 2013 Nobel Peace Prize, is recruiting an Information Security Officer at the P-3 level in The Hague. At Youth Works Hub we surface international careers alongside youth opportunities, and this is a hands-on cybersecurity and confidentiality role at a unique disarmament body, with total estimated monthly remuneration of around USD 8,728.

About the Office

The OPCW's mission is to implement the Chemical Weapons Convention (CWC) to achieve a world free of chemical weapons. The Office of Confidentiality and Security (OCS) sets the framework and implements the provisions that guarantee the OPCW's stringent confidentiality regime, the operational security of the Secretariat's assets, the security of all its electronic systems, and the safeguarding of all classified material. Under the direct supervision of the Head, Confidentiality and Information Security (H/CIS), the Information Security Officer contributes to the implementation, monitoring and assurance of the OPCW information security programme.

Main Responsibilities

Information Security Governance and Programme Support

🔐 Coordinate all aspects of the OPCW information security programme and the implementation of information and ICT security measures preserving the confidentiality, integrity and availability of OPCW's information; serve as focal point for information-security programmes and projects; contribute to governance, policy, compliance and management reporting; develop, review and enforce policies, procedures, standards and guidelines; monitor and report on control implementation and effectiveness; conduct security audits of ICT providers and the supply chain; and serve as Acting H/CIS when required.

Risk, Vulnerability and Control Assessments

🛡️ Perform security risk, vulnerability and control assessments across ICT and data systems and information assets; recommend and coordinate mitigation measures; run regular infrastructure assessments to identify and prioritise vulnerabilities; review the security management and performance of ICT assets; monitor emerging threats, standards and technologies; and support security reviews of new or changed applications prior to procurement or deployment.

Security Monitoring, Incident Response and Investigations

🔍 Conduct security monitoring, incident response, preliminary enquiries, investigations and digital-evidence handling for security incidents and confidentiality breaches; monitor networks and user access; lead incident-response, digital-forensic and investigation activities; prepare briefings for senior management; maintain the integrity, custody and traceability of digital evidence; and report and advise on potential breaches of the Confidentiality Regime.

Information Security Resilience and Security Testing

🧪 Support information-security resilience and provide input to Business Continuity and Disaster Recovery; plan and perform security testing — including penetration testing, compliance audits and table-top exercises — and track and follow up on findings.

Qualifications and Experience

🎓 Education: An advanced university degree in information security, cybersecurity, computer science or a related field; a first-level degree with a minimum of 7 years' qualifying experience may be accepted in lieu. At least one relevant industry certification (e.g. GCIH, GCIA, SSCP) is required; further certifications (e.g. GCFA, GNFA, CCSP) are desirable.

💼 Experience: A minimum of 5 years of relevant experience in information security, with significant practical experience in security operations, incident response, investigations, assurance and control implementation — including PKI and certificate lifecycle management; Microsoft 365 and cloud security, digital forensics and monitoring tools; advising on ICT security solutions; risk assessments; security testing; and network/firewall security. Experience with the CWC and Member States, and work experience in the UN Common System, are desirable.

🧠 Skills: Strong knowledge of information-security principles and of frameworks such as NIST and ISO 27001/27002/27005; policy drafting; discreet handling of investigations and digital evidence with chain-of-custody awareness; and excellent analytical and communication skills.

🇳🇱 Also based in the Netherlands? Take a look at this ESC Volunteering — Live the Ecovillage Life in 🇳🇱 the Netherlands → https://youthworkshub.org/19329

Languages

Fluency in English is essential; a good working knowledge of another official language (Arabic, Chinese, French, Russian or Spanish) is desirable.

Good to Know

📄 This fixed-term appointment is for two years with a six-month probationary period. The OPCW is a non-career organisation with limited staff tenure — total service for Professional staff shall not exceed 7 years — and the mandatory age of separation is 65. Several vacancies may be filled, and the Director-General may appoint at a lower grade or with a modified job description. The OPCW does not charge fees at any stage.

🥽 Prefer a hands-on tech placement? Take a look at this Development Intern at an XR and AI studio in 🇨🇿 Czechia → https://youthworkshub.org/21375

Frequently Asked Questions

❓ What level and pay? A P-3 fixed-term (two-year) appointment with total estimated monthly remuneration of around USD 8,728 (depending on post adjustment and family status).

❓ How much experience do I need? At least 5 years in information security, plus at least one industry certification (e.g. GCIH, GCIA, SSCP).

❓ Which languages? English fluency is essential; another official language is desirable.

❓ How long can I stay? OPCW has limited tenure — total Professional service cannot exceed 7 years.

Deadline

⏳ 24 September 2026 (vacancies close at 22:00 Netherlands local time). Youth Works Hub keeps time-sensitive international roles like this in one place so you can apply before they close.