[Hiring] Information Security and Systems Lead @IDinsight

Role Description

The Information Security and Systems team is the engine driving our uniquely dynamic, high-achieving, multicultural, multi-continental team at the cutting edge of how evidence is used to improve global development programs. This team's mandate is to build and maintain systems that enable IDinsight teams across 7+ countries to achieve social impact. We are looking for an Information Security and Enterprise Systems Leader to own that mandate end-to-end. You will lead a small, capable team of security and systems specialists, fractional resources, and external implementation partners. You will report to and advise the executive team. This role could be a fit if you have high-quality experience running both security and enterprise systems initiatives at a global organisation and you’re comfortable being the most senior technical voice in the room without being the only person who understands the decision.

Qualifications

• 8+ years of professional experience in technology roles, including at least 5 years of Information Security or Enterprise IT leadership experience (involving people management).
• Demonstrated ownership of an information security programme at organisational scale — strategy, control framework, governance forum, and incident response, not solely operations.
• Experience leading the selection and implementation of major enterprise systems such as ERP, CRM, including partner management and budget ownership.
• Hands-on depth across enterprise security controls — endpoint protection, network security, vulnerability management — sufficient to make architecture decisions and evaluate your team's work credibly.
• Strong command of identity and access management in enterprise environments, including SSO, MFA, LDAP, and federation protocols such as SAML.
• Experience with control configuration and security architecture in common cloud environments.
• Working knowledge of GDPR and of national data protection regimes in Africa or Asia, and of security frameworks such as NIST CSF, NIST SP 800-171, or ISO/IEC 27001.
• Experience administering enterprise systems for a globally distributed team, including workspace collaboration and human capital management platforms.
• Experience with enterprise systems architecture and data modelling.
• Information security leadership certification preferred — CISM, CISSP, CISA, or equivalent.
• Excellent collaboration, interpersonal, communication, and facilitation skills, with the ability to present to and influence audiences of varying technical fluency, including senior leadership.
• Strong internal and external stakeholder management skills, including with funders, government partners, and vendors.
• Experience managing change in a fast-moving, remote-first environment.
• Detail- and execution-oriented, able to take a task from high-level strategic idea to rapid execution with a large amount of autonomy and conscientiousness.
• Demonstrated track record as a self-starter and leader, including comfort with ambiguity and dynamic environments and work streams.
• Ability to handle sensitive information, data, and issues with mature and discreet professionalism.
• Ability to work with international, cross-cultural, and diverse teams across time zones.

Requirements

• Define and own the multi-year enterprise systems strategy for a remote-first, globally distributed organisation, and the priorities that follow from it.
• Lead identification, selection, and implementation of new enterprise systems such as CRMs, ERPs, etc. Own architecture and integration decisions and the master data model that holds them together.
• Select, contract, and manage external implementation and support partners, including scope, commercial terms, and delivery accountability.
• Lead annual budgeting and financial planning for organisational systems, and make the trade-offs that a non-profit budget requires.
• Champion adoption across regions and functions, so that systems investments produce behaviour change.
• Identify bottlenecks and inefficiencies across the estate, streamline usage to reduce shadow IT, and ensure systems and support functions operate reliably across time zones.
• Work with functional and regional leadership on requirements, prioritisation, and the systems implications of organisational strategy.
• Define and own the information security strategy in alignment with organisational strategy and recognised frameworks, and monitor delivery against the roadmap.
• Lead implementation of security and privacy controls as regulation, client obligations, and risk require.
• Coordinate the Information Security Steering Committee and contribute to Enterprise Risk Management.
• Own incident response planning, lead coordination during incidents, and drive the changes that follow.
• Commission and support penetration tests, vulnerability assessments, audits, and own remediation.
• Lead periodic risk assessment exercises and the ongoing identification, mitigation, and monitoring of information security risk.
• Serve as senior point of contact for funder, client, and government partner security and data protection due diligence.
• Support Legal, Compliance, and Operations where digital evidence is relevant to policy violations.
• Own compliance with GDPR and the national data protection regimes in the countries where we operate, including data mapping, retention, subject rights, and impact assessments.
• Define how IDinsight governs AI use on project and organisational data: tool assessment, acceptable use, and the controls that make responsible use the default.
• Own the information security and data protection policy set, and keep it usable enough that colleagues consult it rather than route around it.
• Manage, develop, and grow full-time technology staff and fractional resources, including hiring and performance management.
• Build depth and redundancy in the team so that critical knowledge is not concentrated in one person.
• Contribute to cross-functional leadership initiatives and to IDinsight's institutional practice on data ethics and responsible technology use.

Benefits

• Comprehensive international health insurance with mental health coverage.
• Paid vacation, sick, and parental leave.
• Relocation benefits.
• A travel stipend.
• Technology and work-from-home stipends.
• A professional development budget.
• Competitive compensation within the global development sector.