Information and Communication Technology Security Specialist

Responsabilités

The ICT Security Officer is tasked with safeguarding an organization’s digital assets through the implementation and oversight of robust security measures. This role involves conducting regular risk assessments, developing and enforcing security policies, and ensuring compliance with relevant regulations and standards. Responsibilities include monitoring network traffic for potential threats, responding to security incidents, and conducting forensic investigations when necessary. Additionally, the officer will collaborate with various departments to raise awareness about cybersecurity best practices and provide training to employees on security protocols. Strong analytical skills, attention to detail, and a deep understanding of information security principles are essential for success in this position. UGANDA Microfinance Limited (MDI) seeks a dynamic and experienced professional to serve as its Chief Executive Officer (CEO), tasked with steering the institution toward sustainable growth and expanded financial inclusion. The ideal candidate must possess a minimum of 15 years of progressive leadership experience within the microfinance sector, complemented by a strong academic background—preferably holding a Master’s degree in Business Administration, Finance, Economics, or a related field. Demonstrated expertise in strategic planning, financial management, and digital transformation is essential, along with a proven ability to cultivate stakeholder relationships and drive innovation. The role requires oversight of all operational, financial, and regulatory functions while ensuring compliance with industry standards and fostering a culture of accountability and excellence. The CEO will play a pivotal role in shaping the organization’s vision, executing long-term strategies, and positioning UGAFODE as a leader in inclusive financial services across Uganda and beyond. We are seeking a highly motivated professional to lead our head office operations, ensuring seamless coordination and administrative efficiency across all departments. The ideal candidate will possess strong leadership skills, exceptional organizational abilities, and extensive experience in office management, with a proven track record of optimizing workflows and fostering a productive work environment. Responsibilities include overseeing daily administrative functions, managing staff performance, implementing office policies, and serving as a liaison between senior management and employees. Additionally, the role demands proficiency in strategic planning, budget oversight, and compliance with company regulations. A bachelor’s degree in business administration or a related field is required, along with at least five years of relevant experience in a supervisory capacity. Exceptional communication, problem-solving, and multitasking capabilities are essential to thrive in this dynamic role. We seek a seasoned professional to join our Financial Services team, overseeing key financial operations and ensuring compliance with regulatory standards. The ideal candidate will possess a bachelor’s degree in finance, accounting, or a related field, alongside a minimum of five years of progressive experience in financial services, preferably within banking, investment, or corporate finance. Strong analytical skills, proficiency in financial modeling and risk assessment, and a deep understanding of financial instruments are essential. Additionally, exceptional communication abilities and a commitment to ethical practices are required to effectively collaborate with stakeholders and maintain regulatory adherence. We are seeking a skilled professional to oversee our Computer & IT, Science & Engineering, and Business Operations divisions. The successful candidate will manage technical infrastructure, drive innovation in engineering projects, and optimize business processes for efficiency. Responsibilities include leading IT teams, developing strategic plans for scientific advancements, and ensuring seamless operational workflows. Applicants should hold a degree in a relevant field, possess at least five years of experience in a leadership role, and demonstrate expertise in cross-functional collaboration. Strong analytical, problem-solving, and communication skills are essential for this multifaceted position. Background information about the job or company (e.g., role context, company overview) The successful candidate will enforce full compliance with computer security measures across UGANDA MDI, with a primary focus on implementing the Cybersecurity Strategy, Policies, Standards, Procedures, Methods, best practices, architecture, and systems designed to safeguard the bank’s data and ICT infrastructure against cyber threats. Additionally, they will assess the MDI’s ICT environment and data processing activities to verify adherence to relevant standards, legal requirements, and current industry security norms. The role encompasses a comprehensive set of responsibilities designed to ensure operational excellence and organizational success. Key duties include managing cross-functional teams, overseeing project timelines, and maintaining strict adherence to quality standards. Additionally, the position requires conducting thorough performance evaluations, implementing strategic initiatives, and fostering a collaborative work environment. Strong leadership, analytical skills, and the ability to drive results are essential for achieving departmental and company-wide objectives. KEY ACCOUNTABILITIES: Implement, maintain, and oversee UGANDA’s cybersecurity infrastructure while actively contributing to the development and enforcement of current IT standards, policies, guidelines, and architectural principles to guarantee the continuous fulfillment of UGANDA’s IT security objectives. Manage UGANDA’s IT security infrastructure and tools—such as firewalls, data protection measures, log analyzers, endpoint security solutions, patch management, encryption protocols, vulnerability scanning, and penetration testing—to ensure optimal functionality. Additionally, oversee the continuous monitoring of these systems while enforcing stringent security access controls across UGANDA’s IT networks and infrastructure. Conduct thorough research, assessments, and strategic planning to identify, evaluate, and implement technological upgrades and significant modifications to the IT Security framework. Analyze the potential impact of these changes on the current infrastructure and ensure their seamless deployment, meticulous configuration, and optimal functionality. Delivering IT Security Awareness training sessions to UGANDA employees, in accordance with established IT security training protocols, to foster strong security practices and safeguard organizational assets. As the department’s liaison, you will facilitate IT security and operational audits conducted by UGANDA’s internal assurance teams or external third parties, ensuring the organization upholds a robust security posture. This role involves verifying compliance with service-level agreements established with outsourced ICT security service providers. Enforce UGANDA’s ICT Change and Incident Management procedures in strict accordance with the organization’s approved IT policies. Collaborate closely with ICT personnel to ensure that all Audit, Risk, Vulnerability, and Compliance findings are thoroughly addressed and resolved in a timely manner. Enforce routine threat and vulnerability management operations, establish risk tolerance levels, and propose and facilitate the implementation of mitigation strategies. Offer expert support during security incidents and investigations, conducting thorough root-cause analyses and recommending strategic actions to address lessons learned.

• Maintain systems and their data in full compliance with Uganda’s Data Protection and Privacy Act of 2019, as well as any other applicable legal and regulatory standards. Work collaboratively with the IT team to integrate security considerations throughout the assessment, selection, installation, and configuration of hardware, applications, software, and third-party connections prior to their introduction into the ICT environment, ensuring strict adherence to current security policies. Maintain a comprehensive knowledge base that includes a technical reference library, security advisories and alerts, insights into emerging security trends and best practices, as well as relevant laws and regulations.

Assist the Head of Information Security in formulating and executing the IT Security department’s annual budgets and strategic work plans. Undertake additional responsibilities related to information systems technology as directed by supervisors, including ad hoc tasks and special projects, as needed. Bachelor’s degree in a related field or equivalent experience is required, along with proficiency in relevant software and tools. Strong analytical and problem-solving skills are essential, as is the ability to work effectively in a team environment. Excellent communication and organizational abilities are also necessary. Prior experience in a similar role is preferred but not mandatory for consideration. Proficiency in relevant technical disciplines, specialized expertise, and hands-on experience in pertinent industry practices are essential prerequisites for this position. Candidates must demonstrate a minimum of [X] years of professional experience in [specific field], along with a comprehensive understanding of [key skills or tools]. Strong analytical capabilities, problem-solving aptitude, and the ability to perform under pressure are mandatory. Familiarity with industry standards, regulatory compliance, and best practices in [specific area] is also required. Excellent communication skills, both written and verbal, are necessary to collaborate effectively within cross-functional teams. A bachelor’s degree in Computer Science, Information Technology, or a closely related field from an accredited university is required, along with a relevant certification in systems, databases, or networks.

• Expertise in UNIX Operating Systems, Microsoft Server Operating Systems, virtualization technologies, intrusion prevention and detection systems, and advanced enterprise network infrastructures, including LAN’s and WAN’s. Well-developed IT skills and practical experience in various IT-related roles are required, including positions such as network engineer/administrator, database administrator, systems analyst, applications developer, IT auditing, and IT risk analyst. Proven ability to communicate effectively and build strong interpersonal relationships is essential, enabling you to collaborate seamlessly and inspire teams. Demonstrates comprehensive knowledge of the Data Protection and Privacy Act, 2019 (Uganda), along with applicable regulatory frameworks to ensure compliance with data governance standards.

Demonstrated expertise in designing, implementing, and formally documenting robust security architectures and strategic plans, Proficiency in information security principles and industry-recognized frameworks, including ISO27001/2, CUBIT, NIST, PCI, and the ISF Standards of Good Practice for Information Security, is required. Possesses strong analytical and problem-solving skills to accurately assess security requirements and determine suitable security controls. Experienced candidates are required, with prior relevant background in the field being essential for consideration. With a minimum of three years of professional experience, preferably within a financial institution, government agency, telecommunications company, or consulting firm, the ideal candidate will have worked in a comparable organizational setting. Professionally skilled in conducting risk, business impact, control, and vulnerability assessments, as well as in developing and implementing effective treatment strategies. Additional information, such as benefits, workplace environment, team dynamics, or supplementary details, may be shared as applicable. Professional IT Security Certifications or relevant training, such as CISSP, CEA, CCSP, MSCE, CISA, or CASM, along with Network certifications like CCNA or CCNP, would be considered advantageous. Ladies are strongly encouraged to submit their applications for consideration.

---

**

[Click the Apply button below to apply, and Create my CV to build a CV tailored to this offer, professionally]