Information Security and Systems Lead – Senior Manager

About IDinsight

We're a global data and evidence advisory, working with governments, philanthropies, and non-profits to improve lives at scale, using technology and AI where they can deliver the most impact.

IDinsight is a global nonprofit that equips leaders with the data, evidence and technology to improve lives at scale. We partner with governments, NGOs, multilaterals, and funders to support decisions at every stage of their impact journey – from bold pilots to nationwide scale-ups. Our teams bring rigorous evidence and practical insights so leaders can make informed decisions that truly change lives. With our partners, we are pioneering the next frontier of social impact, where data and technology accelerate progress for millions. We help leaders overcome the three main barriers to impact:

• Figuring out what works

• Learning and improving

• Reaching and operating at scale

We work in multiple countries across Asia and Africa. Our work spans a wide range of sectors, including agriculture, education, health, governance, sanitation, financial inclusion, and other areas.

We have expertise in a variety of rigorous approaches and methodologies, which we tailor to each client depending on their needs and constraints. To achieve a positive social impact we:

• Support our partners with the full 'data and evidence' value chain – from primary data collection to data systems, monitoring evaluation and learning tools, and data science

• Inform funding decisions – toward high-impact initiatives and away from less effective programs or approaches

• Create cutting-edge AI-for-good products that make the delivery of social interventions and learning tools more cost-effective and scalable

Our diverse, growing team of roughly 250 outstanding colleagues operate in nearly two dozen countries around the world. Learn more about our mission, values, and principles at www.IDinsight.org.

Joining IDinsight at this moment

IDinsight is entering an exciting new phase of growth. As demand for rigorous evidence and AI-enabled solutions accelerates across the sectors and geographies we work in, we are actively investing in our teams, deepening our regional footprint, and expanding the frontier of what data and technology can do for social impact. This is a moment of real momentum for IDinsight. We're looking for people who want to use data and evidence to improve lives at scale; who are energized by taking on problems without a playbook; and who want a hand in shaping what IDinsight becomes as we grow.

About the Information Security and Systems Lead Role (Senior Manager)

The Information Security and Systems team is the engine driving our uniquely dynamic, high-achieving, multicultural, multi-continental team at the cutting edge of how evidence is used to improve global development programs. This team's mandate is to build and maintain systems that enable IDinsight teams across 7+ countries to achieve social impact. We are looking for an Information Security and Enterprise Systems Leader to own that mandate end-to-end.

You will lead a small, capable team of security and systems specialists, fractional resources, and external implementation partners. You will report to and advise the executive team.

This role could be a fit if you have high-quality experience running both security and enterprise systems initiatives at a global organisation and you’re comfortable being the most senior technical voice in the room without being the only person who understands the decision.

Responsibilities

Enterprise Systems Management

• Define priorities for enterprise system improvement and optimization for a remote-first, globally distributed workplace.

• People management of full-time technology staff, fractional resources, and external support or implementation teams.

• Lead the identification and implementation of new enterprise systems (e.g., ERP) to support key organizational functions.

• Collaborate with leadership (functional and regional) & internal teams on requirements gathering and other systems-related initiatives.

• Lead annual budgeting and financial planning for organizational systems.

• Champion system improvement and change management efforts.

• Collaborate with leadership (functional & regional) to drive compliance behavior across the organization.

• Identify bottlenecks or inefficiencies in software systems and Implement solutions to optimize system performance.

• Streamline systems usage across the organization to minimize the risk of “shadow IT.”

• Ensure the operational efficiency of systems and system support initiatives.

Information Security Management

Information Security Program Management (Governance)

• Define an information security strategy in alignment with organizational strategy and leading information security frameworks.

• Monitor progress against the organization’s information security strategy roadmap.

• Lead the implementation of new information security and privacy controls as regulation requires.

• Supports external information security assessments such as penetration tests, vulnerability assessments, and audits.

• Lead Information security incident response and coordination efforts.

• Coordinates the Information Security Steering Committee.

• Contribute to Enterprise Risk Management (ERM) initiatives.

• Supports the Legal, Compliance, and Operations teams with investigating policy violations where digital evidence would be useful.

Information Security Operations

• Lead the design and implementation of a Security Education Training and Awareness (SETA) program.

• Lead the configuration and management of existing Information security controls.

• Lead Information security incident response planning and execution.

• Lead information security onboarding and training sessions for senior leadership.

• Conduct periodic information security risk assessment exercises and ongoing identification, mitigation, and monitoring of information security risk.

• Lead the review of data security protocols for client-facing engagements.

• Collaborate with the information systems Admin on the secure configuration of organizational systems.

• Lead the enforcement and operationalization of safe Data Handling, Retention, and Destruction best practices.

• Routine assessment and monitoring of information security control effectiveness and policy compliance.

• Cryptographic key management.

• Collaborate with Systems Admin on safe employee off-boarding.

Qualifications

We're looking for an entrepreneurial, “get stuff done” teammate with substantial leadership experience. Desired qualifications include:

• 8+ years of professional experience in technology roles, including at least 5 years of Information Security or Enterprise IT leadership experience (involving people management).

• Demonstrated ownership of an information security programme at organisational scale — strategy, control framework, governance forum, and incident response, not solely operations;

• Experience leading the selection and implementation of major enterprise systems such as ERP, CRM, including partner management and budget ownership;

• Hands-on depth across enterprise security controls — endpoint protection, network security, vulnerability management — sufficient to make architecture decisions and evaluate your team's work credibly;

• Strong command of identity and access management in enterprise environments, including SSO, MFA, LDAP, and federation protocols such as SAML;

• Experience with control configuration and security architecture in common cloud environments;

• Working knowledge of GDPR and of national data protection regimes in Africa or Asia, and of security frameworks such as NIST CSF, NIST SP 800-171, or ISO/IEC 27001;

• Experience administering enterprise systems for a globally distributed team, including workspace collaboration and human capital management platforms;

• Experience with enterprise systems architecture and data modelling;

• Information security leadership certification preferred — CISM, CISSP, CISA, or equivalent;

• Excellent collaboration, interpersonal, communication, and facilitation skills, with the ability to present to and influence audiences of varying technical fluency, including senior leadership;

• Strong internal and external stakeholder management skills, including with funders, government partners, and vendors;

• Experience managing change in a fast-moving, remote-first environment.

• Detail- and execution-oriented, able to take a task from high-level strategic idea to rapid execution with a large amount of autonomy and conscientiousness;

• Demonstrated track record as a self-starter and leader, including comfort with ambiguity and dynamic environments and work streams;

• Ability to handle sensitive information, data, and issues with mature and discreet professionalism;

• Ability to work with international, cross-cultural, and diverse teams across time zones.

Professional development

Skill and career development are core to IDinsight's values and long-term impact strategy, and have been noted highlights of teammates' experiences. IDinsighters receive significant mentorship from IDinsight leadership, support from talented peers, and are given considerable autonomy when ready. They maintain professional development plans and are given “stretch” opportunities designed to strengthen a variety of skills. Real-time feedback is embedded in our culture, and formal structure enables maximum professional growth. Additionally, teammates have access to an annual professional development stipend, which they are encouraged to use to explore their career interests and develop their skills.

Nuts & bolts

Start date

The start date for this position is as soon as possible, with preference given to candidates who can start immediately. We expect a minimum two-year commitment, with regular professional development conversations and the potential for a long-term career at IDinsight.

Work Authorization

IDinsight is able to sponsor employment visas for all nationalities in the locations listed above; however, we will prioritize candidates who do not require IDinsight to sponsor work authorization in the aforementioned countries. All candidates who are not currently located in our country offices listed above will be expected to relocate to their office locations at the onset of their employment.

Compensation

Compensation and benefits are commensurate with the qualifications and experiences IDinsight is hiring for, and competitive within the global development sector. We are especially proud of the people-focused benefits we offer, including comprehensive international health insurance with mental health coverage; paid vacation, sick, and parental leave; relocation benefits; a travel stipend; technology and work-from-home stipends; a professional development budget; and more.

Please note that, as a non-profit, we are unable to provide compensation similar to leading private sector organizations.

How to apply

Please click the “Apply for this job online” button at the top right. Applications will be reviewed on a rolling basis. The application asks various questions in order for us to get to know you, and requires a CV and answering a few screening questions.

Please ensure that your CV includes relevant professional and personal experience as well as details on academic qualifications. CVs can range from one to two pages. Please note that headshot photographs, parental details, birth dates, marital status, and other personal information not relevant to the application do not need to be included in your CV. More information, including details on IDinsight's hiring process and frequently asked questions, can be found online at IDinsight Careers. Any questions should be directed to [email protected].

IDinsight's commitment to reducing power asymmetries

IDinsight is committed to reducing power asymmetries in the social sector. Our commitment to diversity, equity, and inclusion reflects our understanding of the need for the sector to abandon unhealthy practices of the past. We wish to be part of a new generation of international NGOs who are honest about this history and transparent about our role in the present. Our commitment is also aligned with the impact of our work.

We seek a workforce that is inclusive of a variety of perspectives that will help us refine and improve our methods and relationships, and strengthen the services we provide our clients and their communities or constituencies. The following commitments represent our vision for the IDinsight team:

1. IDinsight will have greater representation from the populations with whom we work and clients we serve.

2. IDinsight will have greater representation from the countries in which we work.

3. Across all countries in which we recruit, we will seek greater representation from historically excluded communities.

4. IDinsight will foster an inclusive work culture that empowers a diverse team to do their best work.

IDinsight is committed to non-discrimination in our recruitment, employment practices, and organizational culture, regardless of people's age, disability, gender, gender identity, national origin, race, religion or belief, or sexual orientation, or any other status protected by applicable law.