Cloud, Ai, Iot Advisory Specialist

DEADLINE FOR APPLICATIONS

5 July 2025-23:59-GMT+01:00 Central European Time (Rome)

ABOUT WFP

The World Food Programme is the world’s largest humanitarian organization saving lives in emergencies and using food assistance to build a pathway to peace, stability and prosperity, for people recovering from conflict, disasters and the impact of climate change.

At WFP, people are at the heart of everything we do and the vision of the future WFP workforce is one of diverse, committed, skilled, and high performing teams, selected on merit, operating in a healthy and inclusive work environment, living WFP's values (Integrity, Collaboration, Commitment, Humanity, and Inclusion) and working with partners to save and change the lives of those WFP serves.

To learn more about WFP, visit our website:
WHY JOIN WFP?- WFP is a 2020 Nobel Peace Prize Laureate.- WFP offers a highly inclusive, diverse, and multicultural working environment.- WFP invests in the personal & professional development of its employees through a range of training, accreditation, coaching, mentorship, and other programs as well as through internal mobility opportunities.- A career path in WFP provides an exciting opportunity to work across the various country, regional and global offices around the world, and with passionate colleagues who work tirelessly to ensure that effective humanitarian assistance reaches millions of people across the globe.- We offer an attractive compensation package (please refer to the Terms and Conditions section of this vacancy announcement).

JOB TITLE: Cloud, AI, IoT Advisory Specialist

TYPE OF CONTRACT: CST2

UNIT/DIVISION: TECI (WFP TEC)

DUTY STATION (City, Country): Remote (Rome/Italy)

DURATION: 11 months

BACKGROUND AND PURPOSE OF THE ASSIGNMENT:
Under the general supervision of the Chief Information Security Officer and supervision of the Head of Cybersecurity Advisory Services the Cloud and AI Security Analyst will support the organisation’s cybersecurity posture by focusing on the secure design, deployment, and monitoring of cloud-native and AI-driven systems. This role is critical in ensuring that emerging technologies such as generative AI, machine learning pipelines, and multi-cloud environments are integrated securely and in compliance with corporate standards and international best practices. The services that the incumbent will provide include, but are not limited to, the following:

- Cloud architecture security assessments
- DevSecOps pipeline integration support
- Cloud compliance and risk reviews
- Cloud security posture optimization
- AI/ML pipeline threat analysis
- Vendor cloud and AI risk evaluation

ACCOUNTABILITIES/RESPONSIBILITIES:

- Continuously monitor and strengthen the security posture of multi-cloud environments (e.g., AWS, Azure, GCP).
- Design, implement, and manage cloud-native security controls including IAM policies, encryption, key management, and centralized logging.
- Collaborate with Development and Infrastructure teams to embed security into CI/CD pipelines and cloud-native workflows.
- Support cloud incident response process.
- Create and maintain comprehensive documentation of cloud security architectures, operational procedures, and configuration
- Provide cybersecurity advisory support to development and infrastructure teams, promoting secure-by-design principles across cloud platform.
- Conduct threat modeling and risk assessments for AI/ML systems, covering models, datasets, APIs, and associated infrastructure.
- Design and implement protections against AI-specific threats such as adversarial attacks, model extraction, and data poisoning.
- Ensure secure collection, handling, storage and governance of training and inference data in alignment with data security policies.
- Partner with AI/ML development teams to integrate security into the model lifecycle, from design through deployment.
- Monitor AI model behavior and explainability tools for signs of drift, bias, or tampering.
- Produce high quality reports and provide leadership and advice to more junior colleagues.
- Manage cybersecurity related projects.
- Additional duties as requested.

DELIVERABLES AT THE END OF THE CONTRACT:

- Documented Secure Cloud Architecture designs and threat models for secure cloud deployments.
- Detailed security assessment reports of cloud and AI systems, including risk mitigation recommendations
- Detailed design documents for the security architecture of new and existing cloud and ai functionalities, ensuring robust protection measures are in place.
- Well-researched proposals for technologies and strategies to improve the organization's cloud and AI cybersecurity posture.
- Updated security standards, procedures, and guidelines to raise the corporate security maturity level, including baseline and hardening reviews.
- High-quality reports on cybersecurity challenges, solutions, and advisory services provided to Country Offices and Regional Bureaus, including records of decisions t