The Ugandan Jobline

• Providing support in the implementation of
  the MTN group risk management strategy and framework as it relates to
  technology/information     risk
• Develop, manage and implement the
  information security risk assurance plans
• Manage and conduct formal information security
  risk analyses, reviews, tests, audits and/or self-assessments
• Design appropriate remedial actions for
  identified risks, drive remediation of findings and management of risks
  and exemptions
• Provide technical advice on products and
  information security controls
• Ensure that risks envisaged in planned new
  systems, products & services, projects and, data migrations are
  flagged early, escalated as appropriate and resolved quickly.
• Evaluate and/or test solutions/systems and
  ensure appropriate information security requirements and controls have
  been considered and incorporated into these, where necessary support the
  remediation of findings;
• Report information security risks in an
  appropriate way for different audiences;
• Manage information security investigations
  and incident management;
•  Support for digital forensic

• The ideal candidate for the MTN
  Uganda Senior Information Risk Officer job opportunity placement
  should hold a Bachelor’s Degree in information technology/ systems,
  computer science,   computer/
  electronic engineering or related field with at least five years’   information technology experience
• Professional risk qualification with   preferably two years post-qualification
  experience in a complex technology  
  and/or financial services organization e.g. CISM, CISA, CISSP
• Membership/Affiliation with Risk   Management bodies e.g. ISACA
• Postgraduate qualification/ Certification
  in Data Science, Advanced  
  Analytics, Machine Learning, Statistical   Inference or Deep Learning will be an
  added advantage
• Two years in information   security governance, risk and
  compliance;
• Experience in interpreting and
  understanding an organization’s technical and   business environment;
• Previous experience in developing the
  appropriate information   security
  governance and compliance measures;
• Experience in information security
  risk   and incident management,
  business continuity, disaster recovery, information   security incident management, auditing
  and conducting assessments;
• Experience in assessments against
  international information security  
  standards and/or best practice such as the ISO 27000 series, NIST
  800 series,   COBIT;
• Able to analyze large volumes of data   using data analytical tools e.g. ACL or
  SQL
• Excellent written and verbal
  communication   skills
• Corporate Governance frameworks e.g.
  ISO   27001, NIST, COBIT, Sarbanes
  Oxley, King IV, etc.
• Decisive
• Collaborative
• Conflict handling & Resolution
• Inquisitive skewed to research
• Integrity
• Persuasiveness

Related Jobs