Principal, Global Event Security and Risk Management

PRINCIPAL, GLOBAL EVENT SECURITY AND RISK MANAGEMENT Summary The Wikimedia Foundation is looking for a Principal, Global Event Security and Risk Management, to join our team. Our aim is to ensure everyone, everywhere can securely participate in free knowledge. As an organization, we are committed to proactively identifying and mitigating risks that impact both the Foundation and the Wikimedia movement. This includes enabling secure physical convenings and spaces for the robust global communities of volunteers we serve and often support through grants, and effectively addressing other physical security and enterprise risks our ecosystem faces. The Principal will report to the Deputy General Counsel in the Legal Department, and will lead the Foundation’s efforts in proactively preparing for and addressing critical risks to the physical security of staff, community members, and other participants engaging in Wikimedia movement activities. The Principal will coordinate with staff in the Foundation’s internal Enterprise Risk Management working group to broadly identify and track risks to the Foundation and Wikimedia movement. In their focused work of identifying and leading the response to physical security threats, the Principal will partner with internal teams such as legal, grantmaking, external and movement communications, human rights, product security, and trust & safety; and groups outside of the Foundation, such as Wikimedia volunteer organizers, external partners, and security experts. As the point person for the mitigation of physical security risks, the Principal must remain informed on global geopolitical developments, in order to identify emerging and shifting threats to Wikimedia users around the world, and synthesize information from a variety of sources, including Foundation risk reports and consultations with internal teams. The Principal’s goal is to support the organization, the Wikimedia movement and its communities in their efforts to reduce vulnerability and minimize harm when threats materialize. The successful candidate will possess a wide range of experience and a deep understanding of best practices in risk coordination and response, security, and crisis management. They will have experience working in global contexts, particularly the global south, and will bring curiosity, an ability to work across different cultures, and vision. They will have strong people skills, with the ability to empathetically motivate and inspire both staff and volunteers, while understanding the needs and capacities of disparate stakeholder groups. Their experience and good judgment will enable them to achieve impact on a wide variety of high-stakes, emergent risk issues facing the Foundation and the communities it supports. You are responsible for: Working closely with Wikimedia movement organizers to develop and maintain an understanding of the environments and challenges facing Wikimedia volunteers around the world, mitigate those risks, and define best practices for physical security in movement activities. Strengthening the Foundation’s overall enterprise risk management approach and execution, including policy development and implementation. Leading the process to create risk and gap assessments, to identify, document, and track high risks for the Foundation, consulting with subject matter experts in technology, brand, operational, legal, and strategic risk. Improving the organization’s expertise in identifying, mitigating against, and addressing emerging physical security threats to Wikimedia’s staff, communities, and affiliated organizations. Leading risk assessments for community conferences and other events funded by the Foundation, including consolidating input from multiple teams, and communicating the findings to various stakeholders, including community organisers. Creating emergency response plans for physical security threats, bringing together stakeholders and experts as necessary from the organization, law enforcement agencies, or external consultants where appropriate, and managing the implementation of those plans once approved. Being on-call as required to review emergency alerts to ensure proper escalation of and response to physical security threats, including leading emergency response working groups during an emergent situation, designating an on-site incident coordinator as needed, and providing risk management expertise. Remaining current on emerging geopolitical trends and best practices in physical security. Briefing the Deputy General Counsel and senior leadership on a regular basis, with recommendations about what works, what doesn’t, and financial and staff resource management, focused on ongoing systems improvement. Providing crisis support to other internal teams who work directly with at-risk communities. Skills and Experience: Substantial professional experience in corporate and physical security work in a variety of geographic and political contexts. It is particularly valuable to have experience working in the global south. Substantial risk management experience, particularly experience in a leadership role that involved risk management. Substantial experience developing, communicating, and executing emergency response plans. Strong networking and analytical skills, with the ability to process and synthesize large amounts of information on geopolitical trends and elucidate their specific impact on the organization and its stakeholders. Strong communication skills, with the ability to summarize essentials for an executive audience, detail precise response plans and debriefing documents, and to communicate with compassion and clarity. Ability to remain calm and focused in ambiguous situations and to plan and act in circumstances where individuals may be at risk of physical harm. (Note that this role may include exposure to troubling images and media, or direct contact with individuals in crisis.) Demonstrated experience collaborating with subject-matter experts and leadership in threat modeling and contingency planning exercises. Good people skills, with the ability to lead, motivate, and focus lateral teams and working groups, even in high intensity work situations. (Note that this role is not currently a people manager; however, in future the Principal may manage support staff dedicated to this function.) Resilience in dealing with difficult subject matter and ability to exercise appropriate self-care in balance to periods of high intensity work. Experience using digital security tools to maintain secure and private communication at on-site events. Adaptability around online communities and technology, with the ability to master new protocols and practices and to remain open to considering unfamiliar tools. Flexibility in working hours as necessary to respond to unanticipated situations—which may include working nights, weekends, or holidays—and an ability to meet with colleagues, community members, and stakeholders across a range of time zones, particularly from UTC-8 to UTC+1. Qualities that are important to us: An interest in the role of technology in contributing to culture and civic society. Readiness to assess and respond to risks with a strong consideration of cultural context, including the people and history involved. Experience with internet technologies and their impact on human rights. Proactive problem solving and comfort with ambiguity. Willingness to undertake moderate international travel (perhaps four to six trips per year) to coordinate with volunteers and affiliate organizations, as well as international organizations who may be partners in this work. Written and oral fluency in English. Ability to correspond in other languages, especially Arabic, French, or Spanish, is a plus. About the Wikimedia Foundation The Wikimedia Foundation is the nonprofit organization that operates Wikipedia and the other Wikimedia free knowledge projects. Our vision is a world in which every single human can freely share in the sum of all knowledge. We believe that everyone has the potential to contribute something to our shared knowledge, and that everyone should be able to access that knowledge freely. We host Wikipedia and the Wikimedia projects, build software experiences for reading, contributing, and sharing Wikimedia content, support the volunteer communities and partners who make Wikimedia possible, and advocate for policies that enable Wikimedia and free knowledge to thrive. The Wikimedia Foundation is a charitable, not-for-profit organization that relies on donations. We receive donations from millions of individuals around the world, with an average donation of about $15. We also receive donations through institutional grants and gifts. The Wikimedia Foundation is a United States 501(c)(3) tax-exempt organization with offices in San Francisco, California, USA. As an equal opportunity employer, the Wikimedia Foundation values having a diverse workforce and continuously strives to maintain an inclusive and equitable workplace. We encourage people with a diverse range of backgrounds to apply. We do not discriminate against any person based upon their race, traits historically associated with race, religion, color, national origin, sex, pregnancy or related medical conditions, parental status, sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, or any other legally protected characteristics. The Wikimedia Foundation is a remote-first organization with staff members including contractors based 40+ countries*. Salaries at the Wikimedia Foundation are set in a way that is competitive, equitable, and consistent with our values and culture. The anticipated annual pay range of this position for applicants based within the United States is US$145,429 to US$223,286 with multiple individualized factors, including cost of living in the location, being the determinants of the offered pay. For applicants located outside of the US, the pay range will be adjusted to the country of hire. We neither ask for nor take into consideration the salary history of applicants. The compensation for a successful applicant will be based on their skills, experience and location. *Please note that we are currently able to hire in the following: US States: Arizona, California, Colorado, Connecticut, District of Columbia*, Florida, Georgia, Idaho, Illinois, Indiana, Iowa, Maryland, Massachusetts, Michigan, Minnesota, Missouri, New Jersey, New Mexico, New York, North Carolina, Ohio, Oklahoma, Oregon, Pennsylvania, Puerto Rico*, Rhode Island, Tennessee, Texas, Utah, Vermont, Virginia, Washington, West Virginia, Wisconsin and Wyoming (*US Territory or Federal District) Countries: Brazil, Canada, Colombia, France, Germany, Ghana, India, Indonesia, Italy, Kenya*, Mexico, Morocco, Netherlands, Poland, Singapore*, South Africa, Spain, Switzerland and the United Kingdom. Our non-US employees are hired through a local third party Employer of Record (EOR) and must have current work authorization in their location. (*citizens/permanent residents only) We periodically review this list to streamline to ensure alignment with our hiring requirements. All applicants can reach out to their recruiter to understand more about the specific pay range for their location during the interview process. If you are a qualified applicant requiring assistance or an accommodation to complete any step of the application process due to a disability, you may contact us at recruiting@wikimedia.org or +1 (415) 839-6885. More information U.S. Benefits & Perks Applicant Privacy Policy Wikimedia Foundation What does the Wikimedia Foundation do? What makes Wikipedia different from social media platforms? Our Projects Our Tech Stack News from across the Wikimedia movement Wikimedia Blog Wikimedia 2030