The post is located in the Internal Audit Section of the Internal Oversight Division (IOD) in the Sector of the Director General. IOD serves as an independent and objective reviewer of WIPO operations and activities based on risk and relevance to WIPO management and constituencies, with a view to promoting the economy, efficiency, effectiveness, and impact of the Secretariat's work. The Audit Section evaluates the adequacy and effectiveness of governance arrangements, internal controls, and risk management frameworks, and provides assurance, analysis, and recommendations to strengthen accountability, sound management practices, and organizational performance.

IOD reports functionally to the Independent Advisory and Oversight Committee (IAOC) and administratively to the Director General. The office is independent of the organization's operational, management, and decision-making functions and is impartial, objective, and free from undue influence.

1. Organizational Context

a.    Organizational Setting

The post is located in the Internal Audit Section of the Internal Oversight Division (IOD) in the Sector of the Director General. IOD serves as an independent and objective reviewer of WIPO operations and activities based on risk and relevance to WIPO management and constituencies, with a view to promoting the economy, efficiency, effectiveness, and impact of the Secretariat's work. The Audit Section evaluates the adequacy and effectiveness of governance arrangements, internal controls, and risk management frameworks, and provides assurance, analysis, and recommendations to strengthen accountability, sound management practices, and organizational performance.

IOD reports functionally to the Independent Advisory and Oversight Committee (IAOC) and administratively to the Director General. The office is independent of the organization's operational, management, and decision-making functions and is impartial, objective, and free from undue influence.

b.    Purpose Statement

The Head of the Internal Audit Section provides strategic leadership, oversight, and quality assurance for WIPO’s internal audit function in line with the Internal Oversight Charter and in conformance with the Global Internal Audit Standards. The role leads the development and implementation of risk-based audit strategies, methodologies, and frameworks; ensures that audit activities are prioritized according to organizational risk and relevance; and supports consistent, high-quality delivery of audit work. The position also contributes to the broader strategic management of the Internal Oversight Division through planning, budgeting, reporting, stakeholder engagement, and collaboration with UN inter-agency oversight networks to strengthen audit practices and organizational accountability.

c.    Reporting Lines

The incumbent works under the supervision of the Director IOD, in accordance with the provisions of WIPO’s Internal Oversight Charter (rev 2024), and in cooperation and coordination with the Organization's Program Managers, as appropriate.

2. Duties and Responsibilities

The incumbent will perform the following principal duties:

a.Leads the development, prioritization, and implementation of the Section’s risk-based internal audit plans under the overall direction of the Director, IOD, ensuring that audit resources are aligned with areas of highest organizational risk, relevance, and strategic importance.

b.Provides senior-level oversight of highly complex, sensitive, and high-risk internal audits; approves engagement scopes and methodologies; ensures rigorous quality assurance of audit planning, fieldwork, evidence, analysis, and deliverables; and pre-approves all outputs before final review and approval by the Director, IOD.

c.Engages with senior management and key stakeholders on the adequacy and effectiveness of governance, risk management frameworks, and internal controls; identifies systemic and emerging risks; and recommends actionable preventive or corrective measures to strengthen organizational performance and accountability.

d.Directs the monitoring and follow-up framework for internal audit recommendations, ensuring effective tracking of implementation status, assessment of management action plans, and reporting on unresolved high-risk issues.

e.Manages and supervises the work of professional and support staff within the Section, including assignment of responsibilities, establishment of performance objectives, coaching and professional development, quality control of outputs, and performance management in accordance with organizational standards and policies.

f.Leads the preparation and delivery of high-level audit reporting, presentations, and updates for the Senior Management Team, the IAOC, and Member State Representatives; provides expert analysis and recommendations on oversight matters requiring executive attention; and promotes constructive engagement with stakeholders while safeguarding the independence and objectivity of the audit function.

g.Represents the Section at internal committees and at inter-agency oversight networks (such as UN-RIAS) to harmonize UN audit methodologies.

h.Contributes to the strategic direction, planning, budgeting, performance reporting, and continuous improvement of IOD; supports the Director, IOD, in special assignments; and serves as Officer-in-Charge for the Division as required.

i.Perform such other related duties as assigned.

3. Requirements

Education (Essential)

Advanced university degree (master’s degree or equivalent) in business administration, public administration, audit, finance, accounting, or a related discipline.  A first-level university degree (Bachelor's) plus two years of relevant professional experience in addition to the experience requested below, may be accepted in lieu of an advanced university degree.

Education (Desirable)

Certification as a Certified Public Accountant (CPA), Chartered Accountant (CA), Certified Internal Auditor (CIA), Certified Fraud Examiner (CFE), Certified Information Systems Auditor (CISA) or equivalent.

Experience (Essential)

At least ten (10) years of relevant, progressive professional experience in conducting internal audits and managing audit teams in an international environment or in the private sector.

Proven experience in risk-based auditing methodologies and managing complex audit portfolios.

Experience in supervising multidisciplinary teams.

Language (Essential)

Excellent written and spoken knowledge of English.

Language (Desirable)

Good working knowledge of French or another official United Nations language.

Job Related Competencies (Essential)

Demonstrated ability to lead, set, and assure the quality of modern internal audit methodologies, risk-based planning approaches, and professional practices in conformance with applicable internal audit standards.

Strong leadership skills, with demonstrated ability to direct multidisciplinary audit teams, set priorities, manage performance, develop staff capability, and foster an enabling, accountable, and results-oriented work environment.

Excellent executive communication, presentation, negotiation, and stakeholder-management skills, including the ability to engage constructively with senior management, oversight bodies, Member State representatives, and diverse stakeholders while maintaining independence, objectivity, tact, and respect for diversity.

High level of digital fluency, including the ability to lead the effective use of advanced digital tools, data analytics, audit management systems, automation, and emerging technologies, including Artificial Intelligence to strengthen risk assessment, audit planning, testing efficiency, evidence analysis, reporting, and oversight workflows.

Demonstrated ability to integrate technology-related risks, digital insights, data-driven analysis, and IT control considerations into the audit universe, risk assessment, engagement planning, execution, reporting, and follow-up.

Strong IT audit expertise, including the ability to oversee assurance over IT governance, cybersecurity, information systems controls, data protection, digital transformation risks, and technology-enabled audit approaches, and challenge management constructively on significant technology-related risks and controls.

Demonstrated ability to translate complex audit evidence and findings into clear, concise, evidence-based, and strategically relevant reports, briefings, and recommendations that support executive decision-making and governance oversight.

Ability to exercise sound strategic judgment, professional skepticism, independence, initiative, and discretion when addressing complex, sensitive, high-risk, or confidential matters. 

Demonstrated ability to lead a portfolio of concurrent and high-priority assignments, make defensible risk-based decisions under pressure, and balance timeliness, quality, stakeholder expectations, and institutional sensitivity.

 

Job Related Competencies (Desirable)

Familiarity with international public sector governance and intellectual property administration.

4. Organizational Competencies

1.    Communicating effectively.

2.    Showing team spirit.

3.    Demonstrating integrity.

4.    Valuing diversity.

5.    Producing results.

6.    Showing service orientation.

7.    Seeing the big picture.

8.    Seeking change and innovation.

9.    Developing yourself and others.

As Engagement Director, you will operate at the pinnacle of Capgemini’s Public Business Unit—a trusted leader shaping the future of data led public sector transformation.

You will lead major client engagements, accountable for large scale programmes where data, analytics, and AI are central to improving decision making, operational efficiency, and citizen outcomes across critical national services. 

This is a senior leadership role with real national impact. You will partner directly with executive stakeholders, acting as a trusted advisor on data strategy, analytics transformation, and the responsible use of data and AI at scale.

If you are ready to make a lasting mark—delivering transformation at scale, growing the business, and building trusted relationships at the highest levels—this is your opportunity. Join us and help define what excellence looks like for the UK public sector.

Hybrid working: The places that you work from day to day will vary according to your role, your needs, and those of the business; it will be a blend of Company offices, client sites, and your home; noting that you will be unable to work at home 100% of the time.  For this role it is expected that you will work from the Worthing, London, Telford office 3 days per week.

If you are successfully offered this position, you will go through a series of pre-employment checks, including: identity, nationality (single or dual) or immigration status, employment history going back 3 continuous years, and unspent criminal record check (known as Disclosure and Barring Service)

Your role

Client Engagement & Relationship Management: Act as the primary point of contact for senior stakeholders, building trusted advisor relationships focussed on data led outcomes, insight driven decision making, and long term capability development.  ensuring satisfaction across all touchpoints. This senior leadership role is responsible for driving company-wide impact by leading multiple teams and strategic initiatives, aligning strategies with organisational priorities and client value creation. 

Programme Delivery: Lead the delivery of complex, data centric transformation programmes, ensuring they meet client objectives, are delivered on time and within budget, and are aligned with Capgemini’s quality standards.

Data and Analytics Strategy: Provide senior leadership on data strategy, analytics roadmaps, and governance, translating complex data challenges into actionable, value driven solutions aligned to priorities.

Strategic Growth: Drive business development activities, across the practice and the wider public sector identifying and leading opportunities focused on data, analytics, AI, and insight led transformation. leading proposals and bids, and growing consulting revenues through both existing and new client relationships 

Governance & Risk: Oversee engagement governance, proactively manage delivery, commercial, and data related risks. Champion ethical, responsible, and compliant use of data and AI, aligned to public sector expectations and regulatory requirementsand ensure compliance with all regulatory and contractual obligations, particularly those relevant to public sector delivery.

Leadership / People Management: The role requires a distinguished leader with a proven reputation for demonstrating advanced leadership dimensions and behaviours. The successful candidate will lead large, complex, cross-functional teams or major business functions, typically managing senior leaders and directors. 

You can bring your whole self to work. At Capgemini building an inclusive future is part of everyday life and will be part of your working reality. We have built a representative and welcoming environment, for everyone.

Your skills and experience

• Delivery Excellence - Your track record in leading complex, high-value engagements (£15m–£30m+ transformation programmes) underpinned by sound commercial judgement and proactive risk management. You are accountable for delivery outcomes, financial performance, and client confidence across multi year programmes.
• Data & Analytics Transformation Leadership - You have senior level leadership experience delivering large scale data and analytics transformation programmes, ideally within complex or regulated environments. This includes experience across data platforms, analytics, reporting, and insight, and may extend to advanced analytics, AI, and automation.
  You understand data not simply as a technology capability, but as a strategic asset—enabling better policy decisions, operational effectiveness, fraud detection, compliance, and citizen services at scale.
• Programme, Service & Operating Model Leadership - You will have significant experience in programme, service and/or transition management, leading complex, multi supplier environments where data platforms and analytics capabilities are core to business transformation. You are comfortable managing interdependencies between data, technology, policy, and operational change.
• Digital & Technology Acumen - You are a digital transformation leader with strong understanding of modern data architectures and analytics ecosystems, including data platforms, integration, cloud, governance, and insight delivery. You are fluent in both agile and waterfall delivery approaches and know how to balance pace, risk, and regulatory compliance in large public sector programmes.
• Sector Knowledge - You’re a true public sector insider, with deep expertise in operating models, regulatory landscapes, and the unique demands of organisations like HMRC. You anticipate change, navigate complexity, and bring insight that shapes strategy at the highest level.

Essential

• Senior leadership experience delivering large scale data, analytics, or insight led transformation programmes
• Strong commercial and P&L accountability at programme or account level
• Experience leading complex engagements in public sector or highly regulated environments
• Ability to engage credibly with executive and senior civil service stakeholders on data driven strategy

At the Tony Blair Institute for Global Change, we work with political leaders around the world to drive change. We help governments turn bold ideas into reality so they can deliver for their people. We do it by advising on strategy, policy and delivery, unlocking the power of technology across all three. And by sharing what we learn on the ground, so everyone can benefit. We do it to build more open, inclusive and prosperous countries for people everywhere.

We are a global team of over 800 changemakers, operating in more than 40 countries, across five continents. We are political strategists, policy experts, delivery practitioners, technology specialists and more. We speak more than 45 languages. We are working on over 100 projects, tackling some of the world’s biggest challenges. We’re all here at TBI to make a difference.

In a world of ever more complex challenges, we believe diversity of background and perspective is a strength. We pride ourselves on a culture that values and nurtures difference. We are dedicated to unlocking potential, not only for the countries we work in but also for each of our team members. No matter where you’re from or who you are, if you’re passionate about the transformative power of progressive politics, we invite you to build a better future with us.

Role Summary

TBI operates globally in politically sensitive environments, handling sensitive policy, advisory and donor information across multiple jurisdictions. Following the establishment of Cyber Essentials+ certification, a live outsourced SOC and a 24/7 monitoring posture, Digital is now entering a phase of security and compliance maturity that includes ISO 27001 ambition, AI security and governance across a rapidly expanding AI estate, and a deepened compliance posture across the regulatory regimes in which TBI operates.

The Director of Security & Compliance is a new, senior role accountable for the security, governance, risk, compliance, continuity and data protection posture of TBI. Reporting to the CTO, this role leads the Security & Compliance function - the IT Security Engineer and the outsourced SOC - and provides authoritative leadership on cyber, AI and information security across the Institute. It is the named accountable owner for our certifications, our risk register, our continuity arrangements and the security and governance of our AI estate.

You will be an experienced security and compliance leader with deep expertise in modern cyber operations, governance frameworks (ISO 27001 in particular), risk management and the security and governance of AI in an enterprise context. You will work closely with Legal & Risk, the Director of Applications, the Enterprise Architect and the CTO to ensure our security posture enables rather than constrains TBI's mission.

Key Responsibilities

Security Operations

• Accountable for security monitoring, incident response, remediation and security tooling / platform management across TBI (both internal and external)
• Own the relationship with the outsourced SOC and line manage the IT Security Engineer
• Own the firm-wide security awareness programme - phishing simulation, user training and security culture (delivered through a vCISO arrangement where appropriate)
• Own the design of identity, access (RBAC) and authentication (MFA / SSO) standards, partnering with the Global Service Desk Manager who owns day-to-day operation

Governance, Risk & Compliance

• Own TBI's IT governance framework adoption and maintenance, including the supporting RAPID and accountability mapping
• Own the regulatory and standards compliance posture - GDPR, ISO 27001, Cyber Essentials+, and others - including certification maintenance, control evidence, audit readiness and statutory reporting
• Lead TBI's path to ISO 27001 certification as a strategic programme, including the definition of certification scope across emerging functions and capabilities
• Own the central Digital & Data Security risk register - identification, assessment, mitigation and ongoing maintenance - in partnership with Legal & Risk

Data Protection & Privacy

• Own the data classification framework (design and operation), data retention policies and the GDPR / data subject rights operating model
• Partner with Legal on the firm-wide data protection programme and breach notification process

Continuity

• Own disaster recovery and business continuity planning, testing and recovery - including RTO / RPO definition for critical systems and the incident communications plan

AI Security & Governance

• Own the security posture of TBI's AI estate - access and authentication for AI platforms, prompt and output data protection, prompt injection and jailbreak defence, and third-party AI vendor risk assessment (Anthropic, OpenAI, Salesforce Einstein, and others)
• Own TBI's Responsible Use Policy for AI tools across the firm
• Partner with the Director of Applications, the Enterprise Architect and the CTO to ensure all AI initiatives across TBI - including AI capability developed outside of Digital - sit within an appropriate security and governance envelope

DevSecOps

• Own DevSecOps practice: secret management, vulnerability scanning (SAST / DAST / dependency scanning), pipeline security gates, container and workload security and code-level vulnerability management
• Partner with the Director of Applications to embed security controls into the engineering practice without becoming a delivery blocker

Third-Party Risk

• Own third-party security risk assessment and ongoing vendor security monitoring, in partnership with the Head of Digital Transformation & Performance, who owns the vendor relationship and performance lifecycle

Person Specification

• Significant senior leadership experience in security and compliance roles within a mid-to-large global organisation
• Deep, demonstrable expertise in ISO 27001 - ideally as named lead on a successful certification programme - together with working knowledge of SOC 2, NIST CSF and other relevant frameworks
• Strong technical credibility across modern security operations: SIEM, EDR, IAM, vulnerability management and DevSecOps tooling
• Demonstrable expertise in GDPR and data protection in a global, multi-jurisdiction context
• Demonstrable understanding of AI security and AI governance - prompt injection, model risk, third-party AI vendor risk and the operational realities of running an AI estate at scale
• Experience designing and running risk registers and risk processes at organisational level
• Strong stakeholder credibility at executive level; able to articulate security posture in business terms and influence non-technical audiences
• Pragmatic, proportionate and able to balance security rigour with delivery velocity
• Experience managing technical security staff and outsourced security partners
• Comfortable operating in politically sensitive contexts and exercising judgement on disclosure, escalation and risk acceptance