Information Security Advisor

Human Rights Watch•Multiple Locations Considered, NC

1d•Hybrid

About The Position

The Information Security Program at Human Rights Watch (HRW) supports the organization in working safely and securely in an increasingly complex digital environment. Our primary focus is helping staff understand and manage security risks, incorporate security into everyday work, and confidently use technology in ways that support HRW's mission. The Information Security Program is seeking an Information Security Advisor to serve as a trusted security partner for staff across the organization. This is a highly collaborative, people-focused role centered on helping staff understand and manage security risks through practical guidance, training, awareness, and day-to-day support. Working closely with the Director of Information Security, IT Ops, and colleagues across HRW, the Information Security Advisor will support staff in making informed security decisions, provide guidance for higher-risk activities and travel, and lead the development of security training, learning resources, and awareness initiatives. The role also contributes to incident response, governance, and the secure adoption of new technologies, helping strengthen HRW's overall security posture while ensuring security remains practical, approachable, and aligned with the organization's mission. This position reports to the Director of Information Security, based in the US. This role will be based within commuting distance of the following HRW offices, and must be willing to work from the office on an as-needed basis: Brussels, London, Stockholm, Amsterdam, Beirut, or Johannesburg.

Requirements

A level of education that, when combined with professional experience, demonstrates the ability to contribute meaningfully to HRW's Information Security Program. Candidates with relevant academic qualifications or industry certifications are encouraged to apply, but these are not required.
A minimum of five years of professional experience in information security, IT security, or a related field.
Experience supporting users and helping non-technical audiences understand and manage security risks.
Excellent written and verbal communication skills, with the ability to explain technical concepts in clear, practical language.
Excellent interpersonal skills and the ability to build trusted relationships across technical and non-technical teams.
Experience designing or delivering security awareness, training, or educational programs.
Ability to evaluate technologies, workflows, and operational practices from a security perspective.
Understanding of information security principles, risk management, and common security frameworks.
Experience supporting or participating in the investigation and response to information security incidents.
Working knowledge of Microsoft 365 security and identity management.
Experience securing and supporting Microsoft Windows devices.
Ability to manage multiple priorities while working independently and collaboratively.
Ability to work respectfully and effectively with colleagues from diverse cultural and professional backgrounds.
Demonstrated curiosity, sound judgment, and a strong commitment to helping others work securely.

Nice To Haves

Experience supporting Apple devices is highly desirable.
Working knowledge of the risks associated with human rights, civil society, journalism, or similarly high-risk environments is highly desirable.
Experience supporting global or distributed organizations.
Experience administering or operating Microsoft Defender XDR, Microsoft Purview, Microsoft Sentinel, Microsoft Entra ID, Microsoft Intune, or related Microsoft security services.
Experience evaluating AI tools or advising on the secure and responsible use of AI technologies.
Experience contributing to information security governance, policy implementation, or risk management initiatives.
Fluency or proficiency in one or more languages in addition to English.
Demonstrated commitment to continuous learning and knowledge sharing through research, speaking, writing, community participation, or open source contributions.

Responsibilities

Serve as a trusted point of contact for staff seeking information security advice and support.
Provide practical security guidance that enables staff to carry out their work safely while supporting HRW's operational needs.
Support staff preparing for higher-risk travel, field work, and other sensitive activities.
Conduct security consultations for projects, workflows, technologies, and operational initiatives.
Assist staff in securely using Microsoft 365, AI tools, and other technologies adopted by HRW.
Build trusted working relationships across the organization and promote a collaborative approach to information security.
Lead HRW's information security awareness and education program.
Design, develop, and deliver engaging security training for staff globally.
Develop and maintain security learning content within HRW's Learning Management System.
Create practical guidance, playbooks, knowledge articles, FAQs, and self-service resources.
Plan and coordinate security awareness campaigns, phishing simulations, and educational initiatives.
Measure the effectiveness of awareness activities and continuously improve staff engagement and learning outcomes.
Support the implementation of HRW's information security policies, standards, and governance framework.
Help staff understand and apply information security policies in their day-to-day work.
Participate in security reviews of new technologies, platforms, and services, including AI tools.
Assist with information security risk assessments and provide practical recommendations to reduce risk.
Contribute to the development of guidance for the secure and responsible use of emerging technologies.
Support staff in responding to information security incidents, providing practical guidance to help contain issues, recover safely, and learn from incidents.
Use Microsoft 365 security tools and related systems to investigate issues, understand risks, and support resolution.
Maintain accurate documentation of incidents, investigations, and lessons learned.
Work closely with IT, Safety and Security, Legal, Human Resources, and other teams to strengthen HRW's security posture.
Contribute to improving security processes, procedures, and documentation.
Develop reports, metrics, and dashboards that measure security activities and program effectiveness.
Stay informed about emerging threats and recommend improvements to HRW's security capabilities.
Perform other duties as required.