IT Security and Systems Developer

Role Overview

This dual-focused position combines hands-on application development leadership with organization-wide cybersecurity oversight at Plan International. You will spend your days both building and securing digital systems—coding new features and automations in the morning, then shifting to threat monitoring, patch management, and security governance in the afternoon. Your work matters because it directly protects sensitive data of children and communities across multiple country offices while enabling smooth, reliable IT operations for staff worldwide.

Key Responsibilities

• Architect, build, and maintain custom applications and digital tools, ensuring they meet business needs and follow secure coding standards.
• Manage the full lifecycle of software systems, from integration and deployment to upgrades and decommissioning, with minimal disruption to operations.
• Set the technical direction for development projects, reviewing code, mentoring developers, and championing best practices across the team.
• Identify opportunities for automation and digital process improvements, translating them into concrete technical roadmaps.
• Design and enforce the organization’s cybersecurity strategy, including risk assessments, security frameworks, and compliance controls aligned with ISO 27001 and NIST standards.
• Operate and refine security monitoring systems, vulnerability management processes, and incident response plans to detect and contain threats quickly.
• Implement secure access management, patching schedules, and data protection measures for all applications, networks, and user devices.
• Conduct internal security audits, track corrective actions, and maintain risk registers and audit documentation for regulator and donor requirements.
• Build security awareness across the organization by creating training materials, leading workshops, and guiding staff on safe system usage.
• Support disaster recovery and business continuity planning, ensuring critical systems can be restored if a breach or outage occurs.

Requirements & Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• At least five years of professional experience in software development, with significant exposure to security responsibilities.
• Deep expertise in one or more programming languages such as PHP (Laravel or vanilla), .NET, React, TypeScript, or Python.
• Solid understanding of full-stack development, including front-end frameworks, back-end logic, and database design using MySQL, SQL Server, or PostgreSQL.
• Hands-on experience integrating systems through RESTful APIs and web services.
• Working knowledge of security infrastructure, including firewalls, intrusion detection/prevention systems, antivirus tools, and encryption.
• Familiarity with security frameworks and standards like ISO/IEC 27001, NIST, and GDPR or similar data protection regulations.
• Proficiency with Git and collaborative development workflows like code review and CI/CD pipelines.
• Strong analytical thinking and problem-solving skills, with the ability to troubleshoot complex technical and security issues.
• Excellent communication skills in English, both written and verbal.
• Demonstrated integrity and discretion when handling sensitive organizational data.
• Certifications such as CISSP, CEH, Security+, or ISO 27001 are preferred but not mandatory.
• Prior experience in a non-profit or international development setting is an advantage.