IT Risk AnalystExpiring Soon!

• Conduct proactive systems reviews, assessments and data analysis to identify vulnerabilities for timely corrective action
• Carry out risk assessments before, during and after implementation of bank strategic and business initiatives, including tracking bank IT projects
• Scan the market and industry for cyber and system risk information and prepare monthly reports for management
• Track and monitor usage of risk tools (RCSAs, Risk Registers, KRIs) within the IT Department and conduct assurance reviews
• Drive, develop and maintain the bank's incident management process and system for cyber and technology incidents
• Participate in the implementation of the bank's Business Continuity Management Programme
• Participate in the development, review and monitoring of compliance with bank policies and procedures
• Review information systems audit reports and track implementation of recommendations
• Maintain relationships with key stakeholders and assurance providers including internal and external audit, compliance and Bank of Uganda examiners
• Provide risk training, awareness and education to staff on cyber and system-based risks

Qualifications & Experience:

• Bachelor's degree in Information Technology, Computer Science, Information Science, Information Systems, Information Security or a related discipline
• Minimum 3 years' experience in information risk, IT security and/or IT audits
• Experience in information risk reviews and vulnerability assessments
• Experience in red team exercises and/or penetration testing is required
• Professional qualifications such as CRISC, CISM, CISSP or CISA are an added advantage

Skills & Competencies:

• Strong report writing and stakeholder management skills
• Analytical and data analysis capability
• Sound knowledge of cyber and technology risk frameworks and tools
• Ability to train and create risk awareness across teams