Information Security & IT Infrastructure Assessment (Volunteer)

Information Security & IT Infrastructure Assessment (Volunteer)

Volunteer | Remote | 5 hours per week

Who We Are

At Creshendo, we believe everyone deserves the chance to belong, rebuild, and rise. In partnership with displaced communities, we co-create solutions by listening deeply, collaborating intentionally, and centering lived experience.

Fueled by integrity, empathy, and curiosity, we design bold, inclusive programs that reimagine what's possible for displaced people everywhere. If you're passionate about challenging the status quo and driving meaningful change, you'll feel right at home here.

Why This Role Matters

Creshendo is a young, volunteer-led nonprofit working across multiple countries. As we have grown, our technology environment has expanded across tools including Google Workspace, Slack, Asana, Fireflies, AI tools, and other platforms and integrations.

Responsibility for IT administration and information security is currently distributed across team members rather than assigned to a single technical owner. We want to proactively strengthen this infrastructure, particularly because some of our work may involve sensitive migrant and refugee information and our volunteers primarily work remotely using personal devices.

As our Information Security & IT Infrastructure Consultant, you'll help us identify the highest-priority risks and controls appropriate for an organization of our size and stage, and guide what ongoing IT/security ownership should look like so that we build a sustainable system without creating unnecessary administrative burden for a volunteer-led organization.

What You'll Be Doing

The consultant will conduct a practical assessment of Creshendo's current IT and information-security environment and provide a prioritized roadmap for strengthening it.

We would ideally like the project to include:

• Inventory of major systems, accounts, integrations, and relevant data flows
• Review of access permissions and privileged accounts
• Review of onboarding and offboarding practices
• Identification of outdated or unnecessary accounts/integrations that should be removed
• Assessment of risks associated with volunteers using personal devices
• Review of security considerations related to sensitive data and AI tools
• Recommendations for role-based access controls and periodic access reviews
• Prioritized recommendations distinguishing immediate risks from longer-term improvements
• Recommended ongoing ownership model for IT/security, including the type and level of expertise Creshendo needs
• A lightweight recurring review/audit process appropriate for a volunteer-led nonprofit

Success would mean Creshendo understands its most significant technology and information-security risks, has addressed any urgent vulnerabilities, and has a clear, proportionate model for ongoing technical ownership and oversight. We are not seeking enterprise-level infrastructure. Recommendations should be proportionate to Creshendo's current size, risk profile, resources, and volunteer operating model.

What You Bring

• A mindset for creative problem-solving. You enjoy trying new things.
• Openness to diverse perspectives. You know the best ideas come from collaboration.
• Experience in Cybersecurity, Information Technology, Information Security, or IT Governance

What You'll Gain

• Impact: Contribute to protecting sensitive migrant and refugee information and strengthening Creshendo's technology foundation.
• Skill Development: Practical experience assessing IT infrastructure and security for a mission-driven nonprofit.
• Advisory Role: Help shape Creshendo's long-term approach to IT and security ownership.
• Networking: Connect with a growing global nonprofit and mission-aligned team.
• Flexibility: Work remotely on a schedule that suits you.
• Recognition: Certificate of completion and recommendation letter upon commitment.

How We Work

We operate with a G.Y.S.T. mindset: clarity over chaos, consistency over perfection, action over ego. If you're someone who follows through, communicates clearly, and cares about doing things well, you'll feel at home here.

How to Apply

Send a short email to hr@creshendo.org with your resume and a few lines about why this role speaks to you. No formal cover letter needed. We care more about what moves you and how you think.