BRIEF ROLE SUMMARY

Role: Chief Information Security Officer (CISO)

Department: Information Security / Risk & Compliance

Reports to: Executive Director

Location: Bank Headquarters- Kampala

Status: Open role

JOB PURPOSE

To plan, develop, implement, and oversee a robust information and cybersecurity strategy that ensures the confidentiality, integrity, and availability of the bank's information assets. The CISO leads and implements the design of security policies, risk management programs, and regulatory compliance efforts, ensuring that technology and business operations align securely with the bank's strategic objectives.

QUALIFICATIONS & EXPERIENCE

Bachelor's degree in Information Technology, Computer Science, or related field;

Minimum 8 years of practical experience in information security, with at least 3 years in a leadership role, preferably in banking or a regulated environment.

Professional certifications such as CISM, CISSP, CISA, CRISC, ISO/IEC 27001 Lead Implementer/Auditor, or CEH added advantage

Strong knowledge of cybersecurity frameworks (ISO 27001, NIST, COBIT, ITIL) and regulatory requirements (BoU, NISF, Data Protection Act).

Experience in managing security operations, incident response, and risk management.

• Plan, develop, implement, and oversee a robust information and cybersecurity strategy
• Ensure the confidentiality, integrity, and availability of the bank's information assets
• Lead and implement the design of security policies
• Manage risk management programs
• Oversee regulatory compliance efforts
• Ensure that technology and business operations align securely with the bank's strategic objectives

• Strong knowledge of cybersecurity frameworks (ISO 27001, NIST, COBIT, ITIL)
• Knowledge of regulatory requirements (BoU, NISF, Data Protection Act)
• Experience in managing security operations
• Incident response skills
• Risk management skills
• Leadership skills

• Bachelor's degree in Information Technology, Computer Science, or related field
• Professional certifications such as CISM, CISSP, CISA, CRISC, ISO/IEC 27001 Lead Implementer/Auditor, or CEH added advantage