Job Description:
Title: Cybersecurity Specialist
Job Family/Level: Information Technology/Specialist
Reports To: VP, Corporate Information Security
PLEASE NOTE: Must be bilingual (Spanish & English) + submit Cover Letter and Resume in English
Major Function
The Cybersecurity Specialist is responsible for supporting cybersecurity initiatives, including monitoring, analyzing, and enhancing the security posture of WWF's information systems, endpoints, cloud services, and data environments. The role involves working closely with Cybersecurity, Information Technology, Compliance and Risk Management, and stakeholders to implement and maintain security policies, procedures, controls, and tools. A crucial part of the role is supporting and managing the Information Security Management System (ISMS), ensuring that security policies, procedures, controls, and supporting documentation are aligned with industry standards, organizational requirements, and best practices. The role also serves as a cybersecurity advisor to stakeholders by providing guidance on secure technology use, endpoint protection, security awareness, vulnerability management, and responsible use of data.
Key Responsibilities
Monitor and analyze security alerts, logs, and events across endpoints, cloud services, networks, applications, and enterprise platforms.
Support incident investigations, root cause analysis, evidence review, remediation tracking, and post-incident lessons learned.
Support in developing and revising documentation of security procedures, processes, standards, assessment results, incident response activities, and control implementation.
Advise on the Information Security Management System (ISMS), ensuring policies, controls, procedures, and supporting documentation remain aligned with industry standards and best practices.
Ensure compliance support for regulatory and framework requirements such as CIS, PCI, ISO, GDPR, and other applicable standards.
Participate in internal and external security audits, assessments, control reviews, and maturity evaluations, and track remediation activities as needed.
Serve as a cybersecurity advisor to country offices, business units, IT teams, and other stakeholders by providing practical guidance on security best practices, risk mitigation, secure technology use, and adherence to organizational policies.
Collaborate with WWF offices and teams to identify security vulnerabilities, assess risks, and support implementation of appropriate security controls.
Report on cybersecurity maturity, risk posture, control implementation, and alignment with applicable frameworks such as the CIS Critical Security Controls.
Stay up to date on cybersecurity trends, emerging threats, attacker tactics, security technologies, industry trends, and regulatory developments.
Coordinate and support security awareness training programs, campaigns, and communications that promote a culture of security and responsible use of data.
Create or contribute to awareness materials such as presentations, guidance documents, newsletters, videos, online learning content, and staff communications.
Collaborate with cross functional teams to ensure secure information systems.
Support in evaluating and implementing new security tools, technologies, controls, and mitigations.
Performs other duties as assigned.
Key Competencies
Inclusive Collaboration: Builds and strengthens a culture of inclusion within and across teams by valuing diverse perspectives, encouraging active participation, and collaborating effectively with technical and non-technical colleagues.
Growth Mindset and Adaptability: Demonstrates a proven ability to learn and adapt quickly to new technologies and opportunities, applying evolving knowledge in cloud, automation, and security to strengthen WWF’s technical capabilities.
Solution-Oriented Problem Solving: Demonstrates strong troubleshooting skills, taking a structured approach to identifying root causes, evaluating solutions, and resolving technical problems across and multi-cloud environments.
Qualifications:
Skills and Abilities
REQUIRED:
4+ years of experience in Cybersecurity or equivalent experience is required. (A Bachelor's degree in Computer Science or Information Technology HILGHY preferred)
Bilingual: Strong verbal and written communication skills, in ENGLISH and SPANISH.
Proven experience with cybersecurity technologies required.
Familiarity with regulatory and compliance requirements such as PCI, CCPA, GDPR.
Experience configuring, deploying and using multiple security solutions such as SIEM, SOAR, playbooks and Endpoint Detection and Response (EDR) tools.
In depth knowledge of cloud services, third party risk management, and application security.
Advanced understanding and proficiency with Windows and macOS operating systems.
Strong organizational, documentation, project management skills including development of detailed project plans.
PREFERRED:
Additional security certifications.
International travel is possible.
Identifies and aligns with WWF’s core values:
COURAGE – We demonstrate courage through our actions, we work for change where it’s needed, and we inspire people and institutions to tackle the greatest threats to nature and the future of the planet, which is our home.
INTEGRITY – We live by the principles we call on others to meet. We act with integrity, accountability, and transparency, and we rely on facts and science to guide us and to ensure that we learn and evolve.
RESPECT – We honor the voices and knowledge of people and communities that we serve, and we work to secure their rights to a sustainable future.
COLLABORATION – We deliver impact at the scale of the challenges we face through the power of collective action and innovation.
Please note: Candidates must be currently based and authorized to work in one of the following countries to be eligible for this position: Bolivia, Chile, Ecuador, Guatemala, Belize, Honduras, Mexico, Paraguay, Suriname, or Guyana.
Remuneration: Salary and benefits for this position will be paid in local currency.
Application instructions: Resumes and cover letters must be submitted in English to be considered for this position
Please note: Applicants must be legally authorized to work in the job's location. Position is not eligible for employment visa sponsorship.
World Wildlife Fund (WWF) promotes equal employment opportunities for all qualified individuals regardless of age, race, color, sex, religion, national origin, disability, or any other characteristic protected under applicable law.
Requires 4+ years of cybersecurity experience, English and Spanish fluency, security technology experience, cloud and application security knowledge, and Windows/macOS proficiency. Bachelor's degree and security certifications preferred.
Key Responsibilities
- monitoring security
- investigating incidents
- managing compliance
Skills & Tools
SIEM, SOAR, Endpoint Detection and Response (EDR), Windows, macOS, cloud services, CIS, PCI, ISO, GDPR, CCPA, CIS Critical Security Controls
Job Details
- Category: Information Technology
- Seniority: Senior Level
- Commitment: Full Time
- Workplace: Remote — Quito or Bolivia or Chile or Ecuador or Guatemala or Belize or Honduras or Mexico or Paraguay or Suriname or Guyana
- Languages: English, Spanish
About World Wildlife Fund
An environmental nonprofit dedicated to conserving nature and reducing threats to biodiversity. — Industry: Non-Profit Organizations and NGOs