Print / save as PDF
We will continue to consider applications until the position has been filled.
Full-time (40 hours per week)
Full-time (40 hours per week)

IT (Cyber) Security Officer

Information and communication technologies department (ICT)

Vacancy 19/2020 -  Reporting to the Head of ICT, the IT (Cyber) Security Officer will be responsible for guiding the institute’s IT security efforts by designing and enforcing policies and procedures that protect the IIASA computing infrastructure and data from all forms of security breaches.


IIASA is an independent, international research institute conducting policy-oriented research into issues that are too large or complex to be solved by a single country or academic discipline. The Information Technologies and Communications (ICT) department provides significant computing, data storage and software resources needed by these scientific endeavors, and additionally supports the day-to-day operations of a 400+ person institute.

Main duties and responsibilities

  • Develop a comprehensive IT security policy appropriate for the institute
  • Establish a proactive risk assessment program for all new and existing systems
  • Ensure vulnerabilities are managed by directing periodic vulnerability scans of on-premise and cloud-based servers and networking systems
  • Develop information security awareness training and education programs
  • Evaluate security incidents and determine what response, if any, is needed; coordinate the institute’s responses, including technical incident response teams, when sensitive information is breached
  • Propose solutions to security vulnerabilities and incidents which facilitate the operational needs and requirements of the institute
  • Communicate risks and recommendations to mitigate risks to the senior administration by communicating in non-technical, cost/benefit terms, and in a format relevant to senior management enabling decisions to be made that ensure the security of information systems and information entrusted to the institute
  • Support the network administration staff in managing the IT security related systems and networking devices
  • Other duties as required in support of the technical administration functions of other team members
  • In line with the team spirit that prevails at IIASA, the incumbent will occasionally work on other tasks assigned by their superiors, that may not be directly related to this appointment but where the post holder has relevant experience and skills, and/or a shortage of immediate personnel capabilities requires such.

required SKILLS 

  • Degree in Computer Science, Informatics or a related field with relevant experience
  • Professional IT or information security certification (CISSP, GIAC, CISA, CISM, etc.)
  • Minimum  of eight years' experience in an IT security role
  • Knowledge of monitoring and managing network and host-based intrusion prevention systems actively in-line, Full Packet Capture (with analytics), data loss prevention, malware prevention systems, vulnerability scanning solutions, DDOS protection, security event/information management, host-based integrity checking, end-point security and AV
  • Knowledge of cyber security threats, risks, vulnerabilities, and attacks, to include threat actor motives, capabilities, and techniques, with the ability to analyze intelligence data and provide indicators and warnings to healthcare and financial services business functions
  • Experience within multiple OS environments (e.g. Unix/ Linux, Windows); preferably with systems administration experience
  • Knowledge of scripting languages, including Python, Perl, PHP, Ruby, and JavaScript
  • Ability to educate a non-technical audience about various security measures
  • Excellent problem solving and analytical skills
  • Full fluency in English with effective verbal and written communication skills 
  • Excellent organizational and time management skills
  • Accuracy and attention to detail
  • German language skills advantageous.

Appointment terms

The successful candidate should be available to take up the position as soon as possible, and will initially be offered a full time (40 hours per week), fixed-term employment contract for one year, with the possibility for extension to an open-ended contract thereafter. Applicants wishing to work part-time hours will be considered. Duties will be carried out at the IIASA premises in Laxenburg, near Vienna, Austria.

This position is classified as a ''Professional level'' post.

We offer:

The minimum annual gross salary for this position is € 44,472 which is exempt from income tax in Austria (subject to the principle of income aggregation – “Progressionsvorbehalt”)

The advertised salary is:

  • Negotiable, based on the qualifications, skills and experience of the selected individual
  • Subject to deductions for health insurance and/or social security
  • Not directly comparable with other employers in Austria, due to the unique legal status and privileges granted to IIASA

Additional Benefits:

  • Educational subsidies for children of school age enrolled in private schools in Austria
  • A generous annual leave allowance
  • Tax free shopping privileges
  • Moving and settlement allowances and paid home leave for employees in scientific and professional categories hired from international locations.

For further information please visit working at IIASA.



IIASA is committed to a working environment that promotes equality, diversity, tolerance and inclusion within its workforce. This is reflected in our Core Values. We encourage qualified candidates, irrespective of gender, from all religious, ethnic, and social backgrounds to apply. In the case that candidates are equally qualified, preference will be given to applicants from countries where IIASA has a National Member Organization (NMO).

Further Information

For further information about this opportunity please contact:

Name: Alia Harrison
Function: Recruitment Coordinator