Directorate Information Security
Department Governance and Risk
Reporting to Manager, Governance and Risk
Salary Grade N7

Job Purpose
This role is responsible for performing risk assessments to enable organisations improve their information security practices and posture.

Key Accountabilities
• Perform information security risk assessments to ensure appropriate information security and business controls exist in organizations including describing and estimating the risks
• Evaluate organizations criteria for previous handling of risks
• Provide technical support for organizational risk reporting in an appropriate manner across strategic, tactical and operational levels
• Providing support, education and training to staff to build capacity in risk awareness, analysis and management within organizations
• Suggest enhancements to organisational processes and policies to avoid operational risks.
• Undertake audits of organizational policies and compliance to National standards, legislations and frameworks.
• Analyse audit findings and assist in implementing audit recommendations.
• Assist organizations develop effective risk registers.
• Support in the development of policies/Standards/Guidelines/ Best Practices.
• Perform any other duties that may be assigned from time to time

Position Requirements
Education
• Bachelor’s degree in Computer Science, Information Technology, and Information Security or a related field from a recognized university is required (mandatory)
• Any industry certification from a reputable organisation such Computing Technology Industry Association, ISC(2), ISACA, EC-Council is required (mandatory)
Experience
• At least 1 year of active experience in ICT/ Information Security roles or in a field related to risk management.

Technical Expertise
• Working knowledge of global information security frameworks and standards
• Broad knowledge of Information Security
• Knowledge of Risk Management
• Basic Knowledge of IT Service Management

Nature and Scope
Interpersonal Skills
• Able to prioritize and co-ordinate work streams/projects to drive delivery of tasks
• Facilitates groups and individuals to create win-win solutions that delivery greater overall benefit
• A resilient team player with a ‘can do’ attitude, who is willing to take responsibility leading and working with others to create breakthrough solutions to complex problems
• Good Communication (written and oral) and interpersonal skills
• Flexibility, persistence and willingness to work a variety of activities/ tasks
• Analytical and problem solving skills

Interested applicants who meet the job requirements/specifications and with the right personal attributes are invited to complete and submit their application form (which can be downloaded from the NITA-U official website https://www.nita.go.ug/job%20application%20form ), with a cover letter, supported by curriculum vitae, copies of certificates and testimonials, and must specify day time telephone contact, postal and email addresses of both the applicant and three referees, to the address below.
The Executive Director,
National Information Technology
Authority – UGANDA (NITA-U),
Palm Courts, Plot 7A, Rotary Avenue (former lugogo bypass)
P.O. Box 33151, Kampala-Uganda
Tel: 0417 801 038
Or via email: [email protected]
The deadline for applications for the positions is 13th June 2022 (Not later than 1700 hrs. Local Time). No application will be accepted without a duly completed and signed standard application form (referred to above).

Only successful candidates will be contacted. Any form of solicitation, influence peddling and or any other “backdoor” attempt, of whatsoever nature, to influence the selection process in ones favour, will automatically lead to disqualification of a candidate without any recourse.