Cybersecurity Specialist

About the role

The Cybersecurity Specialist supports cybersecurity initiatives at WWF by monitoring, analyzing and improving the security of its information systems, endpoints, cloud services and data environments. The role works closely with Cybersecurity, Information Technology, Compliance and Risk Management, implements and maintains security policies, procedures, controls and tools, and manages the Information Security Management System (ISMS). It reports to the VP, Corporate Information Security and requires Spanish and English fluency.

Key responsibilities

• Monitor and analyze security alerts, logs and events across endpoints, cloud services, networks, applications and enterprise platforms.
• Support incident investigations, root cause analysis, evidence review, remediation tracking and post-incident lessons learned.
• Help develop and revise security documentation, procedures, standards, assessment results and incident response activities.
• Advise on the ISMS and ensure policies and controls follow industry standards and best practices.
• Ensure compliance support for CIS, PCI, ISO, GDPR and other applicable standards.
• Take part in internal and external audits, assessments, control reviews and maturity evaluations, and track remediation.
• Act as a cybersecurity advisor to country offices, business units and IT teams, and help identify vulnerabilities and implement controls.
• Report on cybersecurity maturity, risk posture and control implementation.
• Stay current on threats, technologies and regulations, and coordinate security awareness training and materials.
• Collaborate on secure systems, evaluate new security tools and perform other duties as assigned.

Required profile

• 4+ years of cybersecurity experience; a Bachelor's degree in Computer Science or Information Technology highly preferred.
• Bilingual in English and Spanish, with strong written and spoken communication.
• Proven experience with cybersecurity technologies and familiarity with PCI, CCPA and GDPR.
• Experience configuring, deploying and using SIEM, SOAR, playbooks and EDR tools.
• In-depth knowledge of cloud services, third-party risk management and application security.
• Advanced proficiency with Windows and macOS.
• Strong organizational, documentation and project management skills.
• Must be based in and authorized to work in Bolivia, Chile, Ecuador, Guatemala, Belize, Honduras, Mexico, Paraguay, Suriname or Guyana; no visa sponsorship available.

Required skills

• SIEM, SOAR, playbooks and EDR tools
• Cloud services, third-party risk management, application security
• Windows and macOS

Preferred: additional security certifications. International travel is possible. Remuneration is paid in local currency.