E T Temporary

**E T Temporary**

Job #:
req31437
Organization:
World Bank
Sector:
Information Technology
Grade:
ET3
Term Duration:
1 year 0 months
Recruitment Type:
Local Recruitment

**Location**:
Chennai,India
Required Language(s):
English
Preferred Language(s):
Closing Date:
2/7/2025 (MM/DD/YYYY) at 11:59pm UTC

Description

ITS Vice Presidency Context:
The ITS Information Security and Risk Management (ITSSR) unit, headed by the Chief Information Security Officer (CISO), is responsible for providing leadership in managing the information security and risk functions and activities across the World Bank Group, enabling the achievement of WBG's business objectives. ITSSR supports and facilitates a risk aware culture, ensuring that WBG information assets are protected in an effective, efficient, and balanced manner and IT security and risk management efforts throughout the World Bank Group are coordinated and aligned to the Bank's business and IT strategy.

The Extended Term Temporary would be expected to work primarily in the following areas:

- Prepare risk-based test plans and perform the security testing (tool-based testing, manual penetration testing, source code review, etc.) on the different layers of those information systems in support of the Certification & Accreditation.

**Duties and Accountabilities**
The Extended Term Temporary will have responsibilities for specific individual tasks and for working as an integral part of the team in executing ITSRM's work program. The primary responsibilities will include, but are not limited to, a combination of the following:

- Review the security architecture evaluation of WBG new systems and create security test plans based on existing and planned controls and recommendations.
- Perform manual vulnerability assessment, produce reports, and walk development team through issues.
- Maintain detailed documentation of test procedures and findings in ITSRM ticketing system.
- Understanding of AI models and its security testing

Selection Criteria
- Proven level of understanding of security in various phases of a software, system, and data life cycle.
- In-depth knowledge of common security vulnerabilities of OWASP Top 10 (e.g., SQL injection, cross-site scripting) and common exploit techniques (e.g., character encoding, privilege escalation, directory traversal).
- Experience with AWS, Azure, BlackDuck, Rapid7, Veracode and ADAL SDKs for Python, and Selenium scripting is an added plus.
- Industry certifications highly preferred including, but not limited to, Certified Ethical Hacker (CEH), AWS Solutions Architect Associate, Azure Solutions Architect Associate, CSA Certificate of Cloud Security Knowledge (CCSK), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Global Information Assurance Certification (GIAC), and Information Systems Security Management Professional (ISSMP).
- Cloud certifications is a plus.
- Programming/scripting experience or certifications is a plus
- Ability to work well under pressure and meet tight deadlines. Demonstrate a high level of motivation, confidence, integrity and responsibility.
- Ability to be organized, responsive and to be able to effectively multi-task with a focus on driving results.
- Demonstrate excellent interpersonal skills, including the ability to work independently, effectively in a team/task force as a team member or leader, and with senior staff and managers in the unit and elsewhere in the WBG.

World Bank Group Core Competencies

We are proud to be an equal opportunity and inclusive employer with a dedicated and committed workforce, and do not discriminate based on gender, gender identity, religion, race, ethnicity, sexual orientation, or disability.

Learn more about working at the World Bank and IFC, including our values and inspiring stories.

Job ID req31437