Consultancy: Information Protection & Compliance Consultant, ICTD Information Security Section (12 months, remote)

Tags: English language Environment
  • Added Date: Friday, 22 August 2025
  • Deadline Date: Sunday, 07 September 2025
5 Steps to get a job in the United Nations

UNICEF works in over 190 countries and territories to save childrenโ€™s lives, defend their rights, and help them fulfill their potential, from early childhood through adolescence.

At UNICEF, we are committed, passionate, and proud of what we do for as long as we are needed. Promoting the rights of every child is not just a job โ€“ it is a calling.

UNICEF is a place where careers are built. We offer our staff diverse opportunities for professional and personal development that will help them reinforce a sense of purpose while serving children and communities across the world. We welcome everyone who wants to belong and grow in a diverse and passionate culture., coupled with an attractive compensation and benefits package.

Visit our website to learn more about what we do at UNICEF.

For every child, a digital future

The overarching strategic goal of UNICEFโ€™s Information and Communication Technology Division (ICTD) is to transform and build partnerships with our stakeholders to successfully implement UNICEF programmes globally through the use of innovative technology-enabled solutions.ย 

The implementation of Microsoft Purview directly supports this mandate by strengthening UNICEFโ€™s digital governance and compliance framework. With its capabilities in data discovery, classification, protection, and lifecycle management, Purview provides the foundation for advancing UNICEFโ€™s digital guardrails and safeguarding information assets.ย ย 

How can you make a difference?ย 

ICTD seeks a consultant to provide specialized expertise in advancing the implementation of Microsoft Purview across UNICEFโ€™s global environment. Working in close collaboration with internal teams, the consultant will ensure the platform is effectively designed, deployed, and sustained, bringing deep knowledge of Microsoft Purview and Microsoft 365 technologies to strengthen UNICEFโ€™s digital guardrails and support long-term organizational needs.ย 

Scope of Work: ย 

The consultant will work under the direction of the Information Governance manager and collaborate closely with technical teams and business stakeholders. The scope of work includes the following responsibilities:ย 

Configuration and Deploymentย  Configure and deploy core Microsoft Purview services, including but not limited to:ย  Information Protection (Sensitivity Labels, Label Policies)ย  Data Loss Prevention (Endpoint, Exchange, SharePoint, Teams)ย  Insider Risk Managementย  Communication Complianceย  Data Lifecycle Management (Retention and Records Management)ย  Data map and catalogย  Perform test deployments for each service, iteratively validating configuration prior to enterprise rollout.ย  Document service configuration, dependencies, and rollout checklists for each implemented component as needed.ย  Operationalization and Governanceย  Develop and deliver an Operationalization Framework covering:ย  Compliance and Data Governance runbooksย  Service ownership and escalation pathsย  Signal response workflowsย  Role-based access and segregation of dutiesย  Define governance controls with accompanying policy templates (e.g., label lifecycle, retention review, access controls).ย  Build reusable policy templates and configuration baselines to support scaling and decentralization of governance efforts, where applicable.ย  Signal Analysis and Response Designย  Analyze and triage signals across DLP, Insider Risk, and Compliance portals for a period.ย  Support the development of at least 12 response workflows tied to real or simulated policy match events.ย  Provide guidance on integrating signals into SIEM/SOAR platforms (e.g., Microsoft Sentinel, Defender) where applicable.ย  Business Engagement and Feedback Loopย  Conduct up to 10 structured engagements with business units to:ย  Validate policy impact and usabilityย  Refine alerting thresholds and rule logicย  Align Purview configurations to operational needs and risk toleranceย  Capture business feedback using standardized templates and incorporate findings into final policy recommendations.ย  Knowledge Transfer and Documentationย  Deliver a minimum of 6 targeted briefing sessions for internal stakeholders (e.g., Digital Core administrators, SEC team, other roles as defined).ย  Strategic Alignment and Roadmapย  Draft a strategic roadmap for Purview operational maturity, including:ย  Short-, medium-, and long-term goalsย  Integration opportunitiesย  Resource planning and capacity considerationsย  Implement MPARR, and success indicators for ongoing monitoring and assessment..ย 

Work Assignments Overviewย 

Deliverables/Outputsย 

Deliveryย  deadlineย 

Foundational Planning and Environment Readinessย 

- Confirmed implementation scope and priorities across Microsoft Purview services.ย 

- Initial baseline configuration of core compliance center settings and permissions.ย 

- Installation, configuration, and validation of the Microsoft Purview Advanced Rich Reports (MPARR) Collector, including setup of data pipelines and report delivery mechanisms.ย 

- Planning in DevOps outlining engagement model, resource dependencies, and rollout scheduleย 

- Draft Operationalization Framework and runbooks.ย 

Months 1-2ย 

Service Deployment and Technical Validationย 

- Deployment and testing of all selected Microsoft Purview modules (e.g., Sensitivity Labels, DLP, Insider Risk, eDiscovery, Retention, Audit, Communication Compliance, Compliance Manager, Data Catalogs).ย 

- Test iterations per service completed.ย 

- Documentation and validation reports for each module, as required.ย 

- Integration readiness assessmentsย 

Months 2-9ย 

Signal Analysis and Response Developmentย 

- Analysis and triage of alerts and telemetry from DLP, Insider Risk modules.ย 

- Development and testing of 12 response playbooks.ย 

- Draft integration plan with SIEM/SOAR tools such as Microsoft Sentinel, Defender.ย 

- Support for alert tuning and policy refinement.ย 

Months 2-6ย 

Business Engagement and Use Case Refinementย 

- Up to 10 structured engagements with business units to validate use cases, refine policies, and gather feedback.ย 

- Documentation of findings and alignment of governance configurations to operational risk and business needs.ย 

- Recommendations for iterative policy improvement.ย 

Months 2-8ย 

๐Ÿ“š ๐——๐—ถ๐˜€๐—ฐ๐—ผ๐˜ƒ๐—ฒ๐—ฟ ๐—›๐—ผ๐˜„ ๐˜๐—ผ ๐—š๐—ฒ๐˜ ๐—ฎ ๐—๐—ผ๐—ฏ ๐—ถ๐—ป ๐˜๐—ต๐—ฒ ๐—จ๐—ก ๐—ถ๐—ป ๐Ÿฎ๐Ÿฌ๐Ÿฎ๐Ÿฏ! ๐ŸŒ๐Ÿค ๐—ฅ๐—ฒ๐—ฎ๐—ฑ ๐—ผ๐˜‚๐—ฟ ๐—ก๐—˜๐—ช ๐—ฅ๐—ฒ๐—ฐ๐—ฟ๐˜‚๐—ถ๐˜๐—บ๐—ฒ๐—ป๐˜ ๐—š๐˜‚๐—ถ๐—ฑ๐—ฒ ๐˜๐—ผ ๐˜๐—ต๐—ฒ ๐—จ๐—ก ๐Ÿฎ๐Ÿฌ๐Ÿฎ๐Ÿฏ ๐˜„๐—ถ๐˜๐—ต ๐˜๐—ฒ๐˜€๐˜ ๐˜€๐—ฎ๐—บ๐—ฝ๐—น๐—ฒ๐˜€ ๐—ณ๐—ผ๐—ฟ ๐—จ๐—ก๐—›๐—–๐—ฅ, ๐—ช๐—™๐—ฃ, ๐—จ๐—ก๐—œ๐—–๐—˜๐—™, ๐—จ๐—ก๐——๐—ฆ๐—ฆ, ๐—จ๐—ก๐—™๐—ฃ๐—”, ๐—œ๐—ข๐—  ๐—ฎ๐—ป๐—ฑ ๐—ผ๐˜๐—ต๐—ฒ๐—ฟ๐˜€! ๐ŸŒ

โš ๏ธ ๐‚๐ก๐š๐ง๐ ๐ž ๐˜๐จ๐ฎ๐ซ ๐‹๐ข๐Ÿ๐ž ๐๐จ๐ฐ: ๐๐จ๐ฐ๐ž๐ซ๐Ÿ๐ฎ๐ฅ ๐“๐ž๐œ๐ก๐ง๐ข๐ช๐ฎ๐ž๐ฌ ๐ก๐จ๐ฐ ๐ญ๐จ ๐ ๐ž๐ญ ๐š ๐ฃ๐จ๐› ๐ข๐ง ๐ญ๐ก๐ž ๐”๐ง๐ข๐ญ๐ž๐ ๐๐š๐ญ๐ข๐จ๐ง๐ฌ ๐๐Ž๐–!

Knowledge Transfer and Documentationย 

Delivery of at least 6 briefingย 

sessions for technical and businessย 

stakeholders.ย 

Months 6-12ย 

Governance Enablement and Strategic Planningย 

- Finalization of reusable policy templates and governance controls.ย 

- Definition of operational roles, ownership, and escalation paths.ย 

- Delivery of a strategic roadmap with success metrics and risk mitigation strategies.ย 

- Engagement closeout report with sustainability recommendations.ย 

Months 1-12ย 

To qualify as an advocate for every child you will haveโ€ฆย 

Minimum requirements:

Work Experience:ย 

Demonstrated expertise in Microsoft Purview, including configuration of Information Protection, DLP, Insider Risk, Data Catalog, and Data Lifecycle Management. Practical experience installing and using MPARR (Microsoft Purview Advanced Rich Reports) Collector. Strong understanding of compliance signal analysis and development of response workflows. Ability to engage with business stakeholders to refine policies and operationalize compliance controls. Experience creating reusable templates, SOPs, and operational governance models. Proven ability to deliver briefings and documentation to technical and non-technical audiences. Microsoft Certified: Information Protection Administrator Associate (SC-400) certification desired (or equivalent demonstrable experience). Strong communication and cross-functional collaboration skills.

Language Requirement:ย Fluency in English (verbal and written) is required.

For every Child, you demonstrate...

UNICEFโ€™s Core Values of Care, Respect, Integrity, Trust and Accountability and Sustainability (CRITAS) underpin everything we do and how we do it. Get acquainted with Our Values Charter: UNICEF Values

The UNICEF competencies required for this post areโ€ฆ

(1) Builds and maintains partnerships

(2) Demonstrates self-awareness and ethical awareness

(3) Drive to achieve results for impact

(4) Innovates and embraces change

(5) Manages ambiguity and complexity

(6) Thinks and acts strategically

(7) Works collaboratively with othersย 

Familiarize yourself with our competency framework and its different levels.

UNICEF promotes and advocates for the protection of the rights of every child, everywhere, in everything it does and is mandated to support the realization of the rights of every child, including those most disadvantaged, and our global workforce must reflect the diversity of those children.ย The UNICEF family is committed to include everyone, irrespective of their race/ethnicity, disability, gender identity, sexual orientation, religion, nationality, socio-economic background, minority, or any other status.

UNICEF encourages applications from all qualified candidates, regardless of gender, nationality, religious or ethnic backgrounds, and from people with disabilities, including neurodivergence. We offer aย wide range of benefits to our staff, including paid parental leave, breastfeeding breaks andย reasonable accommodation for persons with disabilities. UNICEF provides reasonable accommodation throughout the recruitment process. If you require any accommodation, please submit your request through the accessibility email button on the UNICEF Careers webpage Accessibility | UNICEF. Should you be shortlisted, please get in touch with the recruiter directly to share further details, enabling us to make the necessary arrangements in advance.

UNICEF does not hire candidates who are married to children (persons under 18). UNICEF has a zero-tolerance policy on conduct that is incompatible with the aims and objectives of the United Nations and UNICEF, including sexual exploitation and abuse, sexual harassment, abuse of authority and discrimination based on gender, nationality, age, race, sexual orientation, religious or ethnic background or disabilities. UNICEF is committed to promote the protection and safeguarding of all children. All selected candidates will, therefore, undergo rigorous reference and background checks, and will be expected to adhere to these standards and principles. Background checks will include the verification of academic credential(s) and employment history. Selected candidates may be required to provide additional information to conduct a background check, and selected candidates with disabilities may be requested to submit supporting documentation in relation to their disability confidentially.

UNICEF appointments are subject to medical clearance. Issuance of a visa by the host country of the duty station is required for IP positions and will be facilitated by UNICEF. Appointments may also be subject to inoculation (vaccination) requirements, including against SARS-CoV-2 (Covid). Should you be selected for a position with UNICEF, you either must be inoculated as required or receive a medical exemption from the relevant department of the UN. Otherwise, the selection will be canceled.

Remarks:ย ย 

As per Article 101, paragraph 3, of the Charter of the United Nations, the paramount consideration in the employment of the staff is the necessity of securing the highest standards of efficiency, competence, and integrity.

UNICEF is committed to fostering an inclusive, representative, and welcoming workforce. For this position, eligible and suitable female applicantsย are encouraged to apply.

Government employees who are considered for employment with UNICEF are normally requiredย to resign from their government positions before taking up an assignment with UNICEF. UNICEF reserves the right to withdraw an offer of appointment, without compensation, if a visa or medical clearance is not obtained, or necessary inoculation requirements are not met, within a reasonable period for any reason.ย 

UNICEF does not charge a processing fee at any stage of its recruitment, selection, and hiring processes (i.e., application stage, interview stage, validation stage, or appointment and training). UNICEF will not ask for applicantsโ€™ bank account information.

All UNICEF positions are advertised, and only shortlisted candidates will be contacted and advance to the next stage of the selection process. An internal candidate performing at the level of the post in the relevant functional area, or an internal/external candidate in the corresponding Talent Group, may be selected, if suitable for the post, without assessment of other candidates.

Additional information about working for UNICEF can be found here.

Recommended for you