Cybersecurity Specialist - R4645

• Monitor and analyze security alerts, logs, and events across endpoints, cloud services, networks, applications, and enterprise platforms. • Support incident investigations, root cause analysis, evidence review, remediation tracking, and post-incident lessons learned. • Support in developing and revising documentation of security procedures, processes, standards, assessment results, incident response activities, and control implementation. • Advise on the Information Security Management System (ISMS), ensuring policies, controls, procedures, and supporting documentation remain aligned with industry standards and best practices. • Ensure compliance support for regulatory and framework requirements such as CIS, PCI, ISO, GDPR, and other applicable standards. • Participate in internal and external security audits, assessments, control reviews, and maturity evaluations, and track remediation activities as needed. • Serve as a cybersecurity advisor to country offices, business units, IT teams, and other stakeholders by providing practical guidance on security best practices, risk mitigation, secure technology use, and adherence to organizational policies. • Collaborate with WWF offices and teams to identify security vulnerabilities, assess risks, and support implementation of appropriate security controls. • Report on cybersecurity maturity, risk posture, control implementation, and alignment with applicable frameworks such as the CIS Critical Security Controls. • Stay up to date on cybersecurity trends, emerging threats, attacker tactics, security technologies, industry trends, and regulatory developments. • Coordinate and support security awareness training programs, campaigns, and communications that promote a culture of security and responsible use of data. • Create or contribute to awareness materials such as presentations, guidance documents, newsletters, videos, online learning content, and staff communications. • Collaborate with cross functional teams to ensure secure information systems. • Support in evaluating and implementing new security tools, technologies, controls, and mitigations. • Performs other duties as assigned.

•

Title: Cybersecurity Specialist Job Family/Level: Information Technology/Specialist Reports To: VP, Corporate Information Security PLEASE NOTE: Must be bilingual (Spanish & English) + submit Cover Letter and Resume in English Major Function The Cybersecurity Specialist is responsible for supporting cybersecurity initiatives, including monitoring, analyzing, and enhancing the security posture of WWF's information systems, endpoints, cloud services, and data environments. The role involves working closely with Cybersecurity, Information Technology, Compliance and Risk Management, and stakeholders to implement and maintain security policies, procedures, controls, and tools. A crucial part of the role is supporting and managing the Information Security Management System (ISMS), ensuring that security policies, procedures, controls, and supporting documentation are aligned with industry standards, organizational requirements, and best practices. The role also serves as a cybersecurity advisor to stakeholders by providing guidance on secure technology use, endpoint protection, security awareness, vulnerability management, and responsible use of data. Key Responsibilities • Monitor and analyze security alerts, logs, and events across endpoints, cloud services, networks, applications, and enterprise platforms. • Support incident investigations, root cause analysis, evidence review, remediation tracking, and post-incident lessons learned. • Support in developing and revising documentation of security procedures, processes, standards, assessment results, incident response activities, and control implementation. • Advise on the Information Security Management System (ISMS), ensuring policies, controls, procedures, and supporting documentation remain aligned with industry standards and best practices. • Ensure compliance support for regulatory and framework requirements such as CIS, PCI, ISO, GDPR, and other applicable standards. • Participate in internal and external security audits, assessments, control reviews, and maturity evaluations, and track remediation activities as needed. • Serve as a cybersecurity advisor to country offices, business units, IT teams, and other stakeholders by providing practical guidance on security best practices, risk mitigation, secure technology use, and adherence to organizational policies. • Collaborate with WWF offices and teams to identify security vulnerabilities, assess risks, and support implementation of appropriate security controls. • Report on cybersecurity maturity, risk posture, control implementation, and alignment with applicable frameworks such as the CIS Critical Security Controls. • Stay up to date on cybersecurity trends, emerging threats, attacker tactics, security technologies, industry trends, and regulatory developments. • Coordinate and support security awareness training programs, campaigns, and communications that promote a culture of security and responsible use of data. • Create or contribute to awareness materials such as presentations, guidance documents, newsletters, videos, online learning content, and staff communications. • Collaborate with cross functional teams to ensure secure information systems. • Support in evaluating and implementing new security tools, technologies, controls, and mitigations. • Performs other duties as assigned. Key Competencies • Inclusive Collaboration: Builds and strengthens a culture of inclusion within and across teams by valuing diverse perspectives, encouraging active participation, and collaborating effectively with technical and non-technical colleagues. • Growth Mindset and Adaptability: Demonstrates a proven ability to learn and adapt quickly to new technologies and opportunities, applying evolving knowledge in cloud, automation, and security to strengthen WWF’s technical capabilities. • Solution-Oriented Problem Solving: Demonstrates strong troubleshooting skills, taking a structured approach to identifying root causes, evaluating solutions, and resolving technical problems across and multi-cloud environments. Skills and Abilities • REQUIRED: • 4+ years of experience in Cybersecurity or equivalent experience is required. (A Bachelor's degree in Computer Science or Information Technology HILGHY preferred) • Bilingual: Strong verbal and written communication skills, in ENGLISH and SPANISH. • Proven experience with cybersecurity technologies required. • Familiarity with regulatory and compliance requirements such as PCI, CCPA, GDPR. • Experience configuring, deploying and using multiple security solutions such as SIEM, SOAR, playbooks and Endpoint Detection and Response (EDR) tools. • In depth knowledge of cloud services, third party risk management, and application security. • Advanced understanding and proficiency with Windows and macOS operating systems. • Strong organizational, documentation, project management skills including development of detailed project plans. • PREFERRED: • Additional security certifications. • International travel is possible. Identifies and aligns with WWF’s core values: • COURAGE – We demonstrate courage through our actions, we work for change where it’s needed, and we inspire people and institutions to tackle the greatest threats to nature and the future of the planet, which is our home. • INTEGRITY – We live by the principles we call on others to meet. We act with integrity, accountability, and transparency, and we rely on facts and science to guide us and to ensure that we learn and evolve. • RESPECT – We honor the voices and knowledge of people and communities that we serve, and we work to secure their rights to a sustainable future. • COLLABORATION – We deliver impact at the scale of the challenges we face through the power of collective action and innovation. Please note: Candidates must be currently based and authorized to work in one of the following countries to be eligible for this position: Bolivia, Chile, Ecuado