The Ugandan Jobline

Job Title:  IT Security Specialist (2 Job Placements)

Organisation: DFCU Bank

Duty Station:  Kampala, Uganda

Reports to: IT Security, Standards and Architecture Manager

About US:

DFCU Bank is a fast growing commercial bank offering a variety of innovative products and services. DFCU Limited was started by the Commonwealth Development Corporation (CDC) of the United Kingdom and the Government of Uganda through the Uganda Development Corporation (UDC) under the name of Development Finance Company of Uganda Limited. Later restructuring brought in DEG (of Germany) and International Finance Corporation (IFC) as equal partners with CDC and UDC, each having a 25% stake in the company. Its objective was to support long-term development projects whose financing needs and risk did not appeal to the then existing financial commercial lending institutions.

Job Summary: Reporting to the IT Security, Standards and Architecture Manager, the IT Security Specialist will be responsible for providing technical support in the Business Technology (BT) unit to enhance systems, applications and networks security, focusing on the security administration of the network infrastructure, servers, network equipment, and software applications in the data centers for the on-premises systems as well as the cloud environment for cloud-based systems.

The IT Security Specialist shall have the ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation). They shall work with technical teams and service providers to assess, identify, and put in place the appropriate security measures and solutions to be integrated into the bank’s systems operations.

Key Duties and Responsibilities:

• Provide IT security technical support during the development, implementation, and maintenance of IT projects.
• Implement and enforce security requirements for all mission critical applications in accordance with the cyber security and resilience framework.
• Coordinate with the Technology team to manage and administer the updating of rules and signatures e.g., intrusion detection/protection systems, antivirus, and content blacklists.
• Assist in identifying, prioritizing, and coordinating the protection of mission critical infrastructure and key resources.
• Identify potential conflicts with implementation of any cyber defense tools (e.g., tool and signature testing and optimization).
• Implement Risk Management Framework (RMF)/Security Assessment and Authorization (SA&A) requirements for dedicated cyber defense systems within the enterprise, and document and maintain records for them.
• To spearhead development and enhancement of a security information and event management (SIEM) framework for the bank to facilitate proactive responses to security concerns.
• To monitor and ensure that IT security management controls are correctly implemented and are continuously updated to meet emerging threats.
• Contribute to the development and implementation of a robust IT Service Continuity and Disaster Recovery Plan for all critical IT services.
• Support the IT management in developing and implementing appropriate IT policies, procedures, and guidelines such as SLA management, IT Security, Change management.
• Provide technical support and guidance in the configuration of security tools such as firewalls, anti-virus software, patch management systems, etc.
• Respond immediately to security incidents and provide post-incident analysis.
• Work with CCIO team to ensure systems and applications are developed per security standards.
• Threat modelling and security application reviews for all organisational applications.
• Support audit initiatives (Both Internal and external audits).

(adsbygoogle = window.adsbygoogle || []).push({});

Qualifications, Skills and Experience:

• A minimum qualification of a Bachelor’s Degree in Computer Science, Information Technology, or a related numerical Sciences Degree.
• A Master’s Degree specializing in Digital Security.
• Professional security certifications such as CISM, CEH and CISSP.
• Certifications in relevant technologies such as Cisco, Microsoft Azure, Unix / Linux will be an added advantage.
• Five years of experience in systems / network administration role.
• Work experience in a banking industry will be an added advantage.
• Experience and qualifications in Ethical Hacking.
• Working Knowledge of systems architecture and systems development.
• Knowledge and experience in Applications penetrations testing.
• Skills and training in internet applications design and security.
• Experience with Web Application Firewalls.
• Knowledge and Experience in Cyber Defense techniques and technologies.
• Experience in UNIX and Windows server administration is an added advantage.
• Technical skills in Unix and Windows and Python scripting skills.
• A demonstrated experience in writing technical reports and management reports for stakeholders is a must.
• Must possess above average problem-solving skills, organization skills, excellent and communication skills.
• Considered an out of the box thinker and displays a willingness to learn.
• Ability to maintain robust stakeholder engagements, a strong work ethic, and is a team player with the ability to work well independently.
• Advanced Business Architectural & IT Security skills.
• Analytical Thinking & Inductive Reasoning.
• Planning and Organization.
• Strategic Perspective – Establish priorities, challenging goals, and measurements consistent with these goals and organizational vision.
• Critical Judgement and Decision-Making – Define issues and focus on achieving workable solutions to obstacles.
• Good Communicator – Presents ideas effectively, clearly, and concisely both orally and in writing.
• Leadership and Interpersonal Skills – Create a culture of continuous development and ownership with self and the team.
• Inspire Commitment –Actions and behaviors are consistent with words.
• Self-Development – Pursues positive change in self and organization. Drives own personal development plan.

How to Apply:

If you believe you meet the requirements as noted above, please forward your application with a detailed CV including present position and copies of relevant professional/academic certificates (University Transcript, O & A level), to the email address indicated below.

Vacanciesbank@dfcugroup.com

Deadline: 12^th January 2023

For more of the latest jobs, please visit https://www.theugandanjobline.com or find us on our facebook page https://www.facebook.com/UgandanJobline

Related Jobs