Responsibilities:

• Working with the IT personnel to address compliance, information security, and operational risks in key systems such as SAP.
• Assessing the MPL’s current state of Information System controls, identify technology and security risks and develop remediation recommendations.
• Working with the IT personnel to analyse, evaluate and enhance information security controls, and performing information security audits.
• Take part in new technology implementation projects.
• Perform general and application control reviews for computer information systems.
• Perform information control reviews to include system development standards, operating procedures, system security, programming controls, communication controls, backup and disaster recovery, and system maintenance.
• Direct and/or perform reviews of internal control procedures and security for systems under development and/or enhancements to current systems.
• Follows up on audit findings to ensure that management has taken corrective action(s).
• Conduct operational, compliance, financial and investigative audits, as assigned.
• Prepare and present written and oral reports and other technical information in a pertinent, concise, and accurate manner for distribution to Head of Compliance and Management.

Minimum Requirements:

1. Bachelor’s or master’s degree in information technology disciplines
2. 7+years of experience working within a technology of which 3 years in systems risk management
3. Certified as CISA, CISSP, CISM or other comparable professional certification
4. Awareness of ISO 27001, ISO 22301, SOC Report, IT General Controls, Information Security Risk Assessment will be considered an advantage

OPEN TO UGANDA NATIONALS ONLY