Information Security Lead

Location: Any MSF office within +/-3 hours CET

Contract: Fixed term at 100% position - The term of this assignment is intended to be for a period of two (2) years, nevertheless, the duration of the contract may be subject to the employment regulations and labor laws of the country where the selected candidate is based.

Starting date: 15th of November 2026

Deadline to apply: 18th of October 2026

Compensation and Benefits: MSF practice is to offer the compensation and benefits package in line with the MSF entity offering the contract.

I. MSF INTERNATIONAL

Médecins Sans Frontières (MSF) is an international, independent, medical humanitarian organisation that delivers emergency aid to people affected by armed conflict, epidemics, healthcare exclusion and natural disasters. MSF offers assistance to people based only on need and irrespective of origins, religion, gender or political affiliation. MSF International provides coordination, information and support to the MSF Movement, as well as implements international projects/programmes and initiatives as requested.

II. POSITION BACKGROUND

The Information Systems Management (ISM), one of the international platforms of MSF gathering all the Heads of IT/IS from key MSF entities, has been mandated by MSF’s executive governance body, the Full Excom, to lead the development of an international information systems management strategy seeking to optimise interoperability across MSF in priority areas. The ISM Platform is responsible for setting standards for IT/IS architecture and technology development and aims to promote targeted innovation in information technology/information systems (IT/IS).

Critical to this role, and in response to an increasingly complex cyber and global regulatory landscape, the ISM Platform spearheaded the development of a global information security policy framework back in 2020, which has continued to evolve.

In its strategic ambitions, the ISM Platform has committed to prioritising information security and incident resilience as a cross‑cutting theme across all its initiatives. The role of the Information Security Lead is to develop an effective execution strategy and a programme to improve MSF’s overall information security posture and governance of information security in the movement.

III. PLACE IN THE ORGANISATION

The Information Security Lead will:

• Report hierarchically to the International Information Systems Coordinator (who chairs the ISM Platform), with functional oversight provided by the ISM Platform

• Work closely with the members of the ISM Platform, InfoSec focal points in each section, ISM InfoSec WG, MSF SITS (Shared IT Services) and other MSF stakeholders to ensure the information security initiatives, working group(s) and/or task force(s) created/sponsored/guided by the ISM are all aligned to the evolving needs of the organisation and the ISM’s strategic vision

• Work in collaboration with the ISM Coordination team to ensure a consistent approach to programme and project management within the ISM portfolio and Working Group (WG) initiatives

IV. OBJECTIVES OF THE POSITION

The Information Security Lead will lead the development of the roadmap for information security governance, risk & compliance in MSF under the guidance of the ISM platform and in close collaboration with the Info Sec WG. The Information Security Lead will provide strategic guidance, operational support, and incident response expertise across headquarters and field missions, balancing security requirements with the realities of medical and humanitarian operations.

The Information Security Lead will establish the governance mechanisms necessary to ensure better identification, monitoring and mitigation of information security risks in MSF. This role will recommend planning and allocation of infosec resources, and develop the necessary processes/frameworks to do so.

Specific Objectives

1. An effective global information security framework, strategy, and roadmap are in place to guide MSF’s short-, medium-, and long-term security priorities.

2. Priority information security risks are proactively managed through a shared and structured organisational approach.

3. Security incidents requiring intersectional coordination are responded to effectively, limiting impact and supporting resilience.

4. Technical information security decisions across MSF are informed by reliable expert guidance.

5. Sensitive information is managed securely and in line with relevant governance requirements.

6. Organisational information security awareness and capability are strengthened on an ongoing basis.

7. Emerging threats and external developments relevant to MSF are monitored and reflecte