Description

FINCA Uganda is hirng an Infrastructure Remediation Administrator responsible for the proactive remediation and verification of IT security risks and incidents reported by the Information Security Team within the Risk Department.Computer Security

Key Duties and Responsibilities

• Ensure compliance of corporate IT assets and services with requirements established by Information Security, Business Continuity, and Risk Management policies.
• Remediate vulnerabilities in IT infrastructure (software and hardware).
• Administer endpoint protection systems and respond to reported threats.
• Administer patch management systems and coordinate with Systems Administrators to update applications automatically or during scheduled maintenance.
• Review logs from Log Management systems and respond appropriately to mitigate identified threats.Risk Management
• Provide technical support to the Information Security & Resilience team in responding to IT security incidents.
• Maintain the IT Risk Register and coordinate Risk Forums.
• Ensure security features of selected technology solutions and deployment architecture are evaluated by the Information Security Team.
• Verify and test regular backup routines for the technology environment and data.
• Coordinate resolution of IT Audit Findings and Internal Control Findings within the IT Department.
• Coordinate with the Information Security & Business Continuity Officer in preparing the IT Disaster Recovery Plan and conducting Disaster Recovery tests.

Competencies

• Excellent IT Risk Management skills
• Strong vulnerability scanning, assessment, and remediation capabilities
• Knowledge of Ethical Hacking and Penetration Testing
• Strong Windows Administration / Linux Administration & Scripting skills
• Network and Firewall Administration expertise
• Strong structured Root Cause Analysis and problem management skills
• Good report writing, communication, and presentation skillsCommunications & Media Studies

Qualifications and Experience

• Bachelor’s Degree in Information Technology, Computer Science, or related field
• Professional Security Certification such as: SANS, CISSP, CISM, Security+, CEH, CNSSP, CFFP, or NSE
• Network Administration Certification such as CCNA (or Professional level)
• Minimum of 5 years’ experience in an enterprise IT environment as an IT Security, Network, or Infrastructure professional/specialist
• Proven experience supporting IT security and implementing IT security technologiesComputer Hardware

• Ensure compliance of corporate IT assets and services with requirements established by Information Security, Business Continuity, and Risk Management policies.
• Remediate vulnerabilities in IT infrastructure (software and hardware).
• Administer endpoint protection systems and respond to reported threats.
• Administer patch management systems and coordinate with Systems Administrators to update applications automatically or during scheduled maintenance.
• Review logs from Log Management systems and respond appropriately to mitigate identified threats.
• Provide technical support to the Information Security & Resilience team in responding to IT security incidents.
• Maintain the IT Risk Register and coordinate Risk Forums.
• Ensure security features of selected technology solutions and deployment architecture are evaluated by the Information Security Team.
• Verify and test regular backup routines for the technology environment and data.
• Coordinate resolution of IT Audit Findings and Internal Control Findings within the IT Department.
• Coordinate with the Information Security & Business Continuity Officer in preparing the IT Disaster Recovery Plan and conducting Disaster Recovery tests.

• Excellent IT Risk Management skills
• Strong vulnerability scanning, assessment, and remediation capabilities
• Knowledge of Ethical Hacking and Penetration Testing
• Strong Windows Administration / Linux Administration & Scripting skills
• Network and Firewall Administration expertise
• Strong structured Root Cause Analysis and problem management skills
• Good report writing, communication, and presentation skills

• Bachelor’s Degree in Information Technology, Computer Science, or related field
• Professional Security Certification such as: SANS, CISSP, CISM, Security+, CEH, CNSSP, CFFP, or NSE
• Network Administration Certification such as CCNA (or Professional level)