DEADLINE FOR APPLICATIONS 4 August 2025-23:59-GMT+01:00 Central European Time (Rome) ABOUT WFP The World Food Programme is the world’s largest humanitarian organization saving lives in emergencies and using food assistance to build a pathway to peace, stability and prosperity, for people recovering from conflict, disasters and the impact of climate change. At WFP, people are at the heart of everything we do and the vision of the future WFP workforce is one of diverse, committed, skilled, and high performing teams, selected on merit, operating in a healthy and inclusive work environment, living WFP's values (Integrity, Collaboration, Commitment, Humanity, and Inclusion) and working with partners to save and change the lives of those WFP serves. To learn more about WFP, visit our website: WHY JOIN WFP?- WFP is a 2020 Nobel Peace Prize Laureate.- WFP offers a highly inclusive, diverse, and multicultural working environment.- WFP invests in the personal & professional development of its employees through a range of training, accreditation, coaching, mentorship, and other programs as well as through internal mobility opportunities.- A career path in WFP provides an exciting opportunity to work across the various country, regional and global offices around the world, and with passionate colleagues who work tirelessly to ensure that effective humanitarian assistance reaches millions of people across the globe.- We offer an attractive compensation package (please refer to the Terms and Conditions section of this vacancy announcement). ORGANIZATIONAL CONTEXT The position is based in Rome, Italy and reports to the Chief Information Security Officer (CISO), as part of the broader Technology Division. The information security landscape is rapidly evolving, making cybersecurity a top priority for WFP.



With a global presence and a decentralized decision-making structure, WFP is committed to fostering proactive IT operations to minimize risk exposure, detect and respond to advanced threats, ensure ongoing compliance, and optimize security operations costs. The incumbent will provide Subject Matter Expert (SME) expertise in cybersecurity, offering specialized knowledge and support to ensure the effective delivery of cyber advisory services. The SME will contribute technical insights, develop solutions, and collaborate with cybersecurity professionals to address complex security challenges. This role is instrumental in supporting the business through expert advisory activities, including but not limited to risk management, compliance, and the development of secure IT practices. JOB PURPOSE KEY ACCOUNTABILITIES
- Provide expertise in the daily operations of Cybersecurity Advisory and Protection Services team, ensuring effective security measures and alignment with organizational needs. Deliver detailed reporting on critical activities, incidents, and progress to the Chief Information Security Officer (CISO).
- Act as a liaison between cybersecurity functions, technical branches, and business units, offering expert-level guidance to integrate cybersecurity into organizational processes and strategic initiatives.




- Provide expert support and advisory services to County Offices and Regional Bureaus to address cybersecurity challenges and maintain compliance with corporate security standards.
- Lead comprehensive reviews of proposed network architectures, IT solution configurations, and system integrations to identify and mitigate potential security risks, ensuring adherence to risk management best practices and policies.
- Develop, implement, and maintain cybersecurity standards, frameworks, policies, and guidelines to elevate the organization's overall security maturity, with particular focus on emerging technologies such as cloud services and IoT environments.
- Oversee the end-to-end lifecycle of cybersecurity policies, including their drafting, stakeholder approvals, corporate dissemination, implementation, adoption monitoring, and enforcement mechanisms.
- Represent Information Security branch (TECI) in all interactions with the Office of Inspector General (OIG), ensuring compliance and proactive engagement in audit and investigation activities.
- Manage the Third-Party Cybersecurity Assessment Program to evaluate and mitigate supply chain risks, ensuring vendor compliance with organizational security requirements and standards.
- Partner with organizational leadership and other teams to identify current and emerging security risks, design robust security strategies, and implement solutions to reduce exposure and enhance resilience.
- Build and sustain effective relationships with key stakeholders, including Legal, Compliance, Risk Management, the Global Privacy Office, and other oversight functions, to conduct joint reviews, ensure audit readiness, and address policy violations.
- Provide expertise in cybersecurity awareness and training activities to promote a culture of security.
- Lead consulting engagement

📌 Cybersecurity Advisory & Protection Services OfficerRome, Italy (Roma)
🏢 World Food Programme
📍 Roma