Role Context

To provide continuous monitoring, detection and operational support across the Bank’s security technologies, acting as the first line of defence against cyber threats. The role supports the implementation of the Bank’s cyber security strategy, policies and controls to protect the confidentiality, integrity and availability of the Bank’s data, systems and infrastructure, and to sustain compliance with the Bank of Uganda Cyber and Technology Risk Management Guidelines, 2024 and other applicable regulatory and industry requirements.

Responsibilities

• Security monitoring and threat detection: Continuously monitor the Bank’s security platforms, including SIEM, network and endpoint detection and response, firewalls, web application firewall and network access control; triage alerts, separate false positives from genuine threats and escalate confirmed events promptly.
• Incident response: Support the Cyber Incident Response Team in containing, investigating and documenting security incidents, preserving digital evidence, conducting root-cause analysis and supporting timely internal and regulatory incident reporting.
• Vulnerability and patch management: Conduct regular vulnerability scans, prioritise findings by risk, track remediation with system owners against agreed timelines and drive patch compliance across servers and endpoints.
• Secure configuration and change control: Validate system hardening and minimum configuration baselines, and review the security aspects of change requests and new systems before deployment to production.
• Identity and access management: Conduct periodic user access reviews, monitor privileged account activity and enforce multi-factor authentication and least-privilege principles on critical systems.
• Data protection: Support encryption, data loss prevention and cryptographic key management controls that protect customer and Bank information, in line with the Data Protection and Privacy Act, Cap 97.
• Regulatory compliance and audit: Support compliance with the Bank of Uganda Cyber and Technology Risk Management Guidelines, 2024, SWIFT CSCF, ISO 27001 and PCI DSS; maintain audit evidence and track the timely closure of audit and regulatory findings.
• Third-party and product security: Carry out cyber security risk assessments of critical vendors and pre-launch security reviews of new digital products, applications and integrations.
• Business continuity and resilience: Support cyber scenarios in BCP and Disaster Recovery drills, verify that backups of critical systems are protected and recoverable, and maintain up-to-date runbooks and operating procedures.

Qualifications and Experience

• Bachelor’s Degree in Cyber Security, Computer Science, Information Technology or a closely related field.
• 1–3 years’ practical experience in cyber security, SOC monitoring or IT operations, preferably in banking, financial services or another regulated environment.
• Industry certifications such as CompTIA Security+, CySA+, CEH, CCNA, ISO/IEC 27001 Lead Implementer/Auditor, or vendor certifications in SIEM, EDR or vulnerability management are an added advantage.
• Hands-on experience with security tools such as SIEM, EDR/XDR, NDR, IDS/IPS and vulnerability management systems.
• Strong understanding of network security, Windows and Linux operating systems, Active Directory and core network protocols.
• Knowledge of incident response, threat hunting and frameworks such as MITRE ATT&CK, NIST CSF, ISO 27001 and CIS Controls.
• Familiarity with the Bank of Uganda Cyber and Technology Risk Management Guidelines, 2024, SWIFT CSCF, PCI DSS and the Data Protection and Privacy Act, Cap 97.

Skills and Competencies

• Strong analytical, problem-solving and root-cause analysis skills, with close attention to detail.
• Ability to interpret complex security alerts and logs, and to exercise sound judgement under pressure during incidents.
• Basic scripting and automation skills (e.g. Python or PowerShell).
• Good written and oral communication, teamwork and interpersonal skills.
• High integrity and discretion in handling confidential information.
• Proactive, adaptable and willing to learn.

• Security monitoring and threat detection: Continuously monitor the Bank’s security platforms, including SIEM, network and endpoint detection and response, firewalls, web application firewall and network access control; triage alerts, separate false positives from genuine threats and escalate confirmed events promptly.
• Incident response: Support the Cyber Incident Response Team in containing, investigating and documenting security incidents, preserving digital evidence, conducting root-cause analysis and supporting timely internal and regulatory incident reporting.
• Vulnerability and patch management: Conduct regular vulnerability scans, prioritise findings by risk, track remediation with system owners against agreed timelines and drive patch compliance across servers and endpoints.
• Secure configuration and change control: Validate system hardening and minimum configuration baselines, and review the security aspects of change requests and new systems before deployment to production.
• Identity and access management: Conduct periodic user access reviews, monitor privileged account activity and enforce multi-factor authentication and least-privilege principles on critical systems.
• Data protection: Support encryption, data loss prevention and cryptographic key management controls that protect customer and Bank information, in line with the Data Protection and Privacy Act, Cap 97.
• Regulatory compliance and audit: Support compliance with the Bank of Uganda Cyber and Technology Risk Management Guidelines, 2024, SWIFT CSCF, ISO 27001 and PCI DSS; maintain audit evidence and track the timely closure of audit and regulatory findings.
• Third-party and product security: Carry out cyber security risk assessments of critical vendors and pre-launch security reviews of new digital products, applications and integrations.
• Business continuity and resilience: Support cyber scenarios in BCP and Disaster Recovery drills, verify that backups of critical systems are protected and recoverable, and maintain up-to-date runbooks and operating procedures.

• Strong analytical, problem-solving and root-cause analysis skills, with close attention to detail.
• Ability to interpret complex security alerts and logs, and to exercise sound judgement under pressure during incidents.
• Basic scripting and automation skills (e.g. Python or PowerShell).
• Good written and oral communication, teamwork and interpersonal skills.
• High integrity and discretion in handling confidential information.
• Proactive, adaptable and willing to learn.

• Bachelor’s Degree in Cyber Security, Computer Science, Information Technology or a closely related field.
• 1–3 years’ practical experience in cyber security, SOC monitoring or IT operations, preferably in banking, financial services or another regulated environment.
• Industry certifications such as CompTIA Security+, CySA+, CEH, CCNA, ISO/IEC 27001 Lead Implementer/Auditor, or vendor certifications in SIEM, EDR or vulnerability management are an added advantage.
• Hands-on experience with security tools such as SIEM, EDR/XDR, NDR, IDS/IPS and vulnerability management systems.
• Strong understanding of network security, Windows and Linux operating systems, Active Directory and core network protocols.
• Knowledge of incident response, threat hunting and frameworks such as MITRE ATT&CK, NIST CSF, ISO 27001 and CIS Controls.
• Familiarity with the Bank of Uganda Cyber and Technology Risk Management Guidelines, 2024, SWIFT CSCF, PCI DSS and the Data Protection and Privacy Act, Cap 97.