Information Security Officer - Event Information Management (Content)

The World Bank Group (WBG) Office of Information Security (OIS) provides information security services to the WBG. OIS’s mission is to protect the WBG’s information assets in a manner that supports the WBG's mission to free the world of poverty. The office develops strategy, standards and processes to protect the confidentiality, integrity and availability of WBG information assets in a manner that is commensurate with their value and risk. OIS maintains an information security program in way that respects the rights and dignity of those it serves and addresses the needs of the WBG’s business units. OIS is responsible for managing security strategy, operations and compliance

activities for the WBG’s five member institutions and protecting assets that total more than $628 billion of annual investments in poor and developing countries. In addition, OIS manages security across remote sites in over 180 countries throughout globe.

The Office of Information Security is seeking a suitably qualified candidate to fill a position within the Event Information Management (EIM) Team located in Washington DC. This team is responsible for maintaining and supporting the Event Information Management system across the entire WBG (World Bank Group). The WBG selected ArcSight as the software platform for this function and has been operating this infrastructure for approximately 8 years.

Note: If the selected candidate is a current Bank Group staff member with a Regular or Open-Ended appointment, s/he will retain his/her Regular or Open-Ended appointment. All others will be offered a 3 year renewable term appointment.

• Monitor and ensure the ArcSight Infrastructure is functioning correctly.

• Develop ArcSight Content including rules, reports and dashboards

• Debug and tune content

• Review and interpret events generated by various components including firewalls, switches, application software, databases and operating systems.

• Review configurations for potential security weaknesses.

• Perform QA (Quality Assurance) function on content developed by other parties

• Develop new custom connectors to integrate site specific data

• Test and integrate ArcSight provided connectors

• Integrate ArcSight event actions into other WBG systems

• Liaise with vendors

• Provide support to the WBG EIM Clients

• Produce documentation on designs and content developed

• Provide expert technical support

• MS/MA degree in a technical discipline (Computer Science or Engineering preferred), with a minimum of 5 years of relevant experience. (BS/BA is minimum education requirement with 7 years of relevant experience).

• Minimum 5 years of Information Security experience and code development

• Proven experience in programming or scripting and code debugging.

• Detailed knowledge of at least one operating system (prefer Windows and/or Linux)

• Experience in the development of ArcSight Content

• Knowledge of firewalling and networking devices is desirable

• Ability to work independently with minimum supervision

• Ability to openly share/discuss ideas and suggestions with team members

• Ability to explore and investigate new products and solutions

• High level of attention to detail and accuracy

• High ethical standard

Information Security Officer - Event Information Management (Content)