Job Title: IT Security And Controls Specialist – (1 Position)
Reports To: Senior Manager It Security Implementation
Department: Information Technology
Duty Station: Kampala

Main Purpose:
The jobholder will be responsible for developing and driving controls within IT to support information technology security.

Duties And Responsibilities Include:
1. Conduct compliance assessments by understanding business objectives, structure, policies and procedures, internal controls, and external regulations
2. Document systems, processes and controls using narratives, flow charts, data flow diagrams, etc.
3. Completes audit work papers by documenting audit tests and findings
4. Perform risk assessment using various industry standard frameworks
5. Assess the effectiveness of internal controls over key IT security risk
6. Identify and recommend business process changes resulting in strengthened internal controls
7. Collaborate with control owners to implement process changes and track to completion
8. Advise and collaborate on projects by providing IT controls and risk expertise and considerations
9. Understand and communicate the downstream impact on the business of control deficiencies
10. Attend further trainings as deemed necessary by manager/HOD
11. Balance controls/security with business needs
12. Risk materiality determination

Education Requirements:
• A bachelor’s degree in Computer Science, software engineering or Information Technology related field
• Professional certification including CISA, CISM, CISSP, CIA and CRISC

Related Job Experience:
• 5 years minimum general IT control experience
• Knowledge of and experience in utilizing various methodologies and frameworks, including, COBIT, COSO, ITIL,
• 27001/27002 and 27018, SOC 1 and SOC 2 Type 2
• Understanding of general privacy concepts and practices
• Experience in a multi-channel, multi-product environment

Skills And Abilities:
• Excels in a fast-paced and evolving environment
• Looks for new and creative ways to solve problems or improve processes
• Issue resolution skills