Search for jobs
Published
Published
Profession
Profession
Industry
Industry
Seniority
Seniority
Information technology, software development, data Jobs for Entry and Basic-level in Uganda
1 jobs found
Get personalised job alerts directly to your inbox!
Agent Banking Company (ABC)
Graduate Trainee – Information Security
10 days left to apply
Posted: 15 Oct 2026
Top cities with open vacancies
Jobs in KampalaCompanies hiring now
Agent Banking Company (ABC)Profession (Financial Services, Entry and Basic-level)
Industry (Information technology, software development, data, Entry and Basic-level)
Seniority (Information technology, software development, data, Financial Services)
© Fuzu Ltd
Agent Banking Company (ABC)
Financial Services
Graduate Trainee – Information Security
Description
To support the implementation and continuous improvement of the organization's information security programme by assisting with security operations, application security testing, vulnerability management, IT controls validation, risk assessments, compliance activities, and staff security awareness. The role provides practical experience in protecting the confidentiality, integrity, and availability of the organization's information assets, digital financial services, and technology infrastructure.
Requirements
A. Security Operations and Monitoring
• Assist in monitoring security alerts from SIEM, endpoint detection and response (EDR), firewalls, and other security tools.
• Support the investigation, documentation, escalation, and tracking of security incidents.
• Review security logs and assist in identifying suspicious activities and potential threats.
• Support incident response exercises and follow-up on remediation actions.
B. Application Security and Vulnerability Management
• Assist in conducting Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA) and Interactive Application Security Testing (IAST).
• Support vulnerability assessments and authorized penetration testing of web applications, APIs, mobile applications, and supporting infrastructure.
• Document identified vulnerabilities, assess their severity, and track remediation with development and IT teams.
• Assist in validating security fixes and conducting regression security testing.
• Support secure coding reviews and the application of OWASP security guidelines.
C. Governance, Risk and Compliance (GRC)
• Assist in conducting information security risk assessments and third-party security due diligence.
• Support IT controls validation, audit evidence collection, and compliance reviews.
• Assist in maintaining IT risk registers, vulnerability trackers, audit findings, and remediation plans.
• Assist in reviewing information security policies, procedures, standards, and control documentation.
• Support compliance with applicable data protection, cybersecurity, and financial-sector regulatory requirements.
D. Security Awareness and Data Protection
• Support the development and delivery of staff security awareness initiatives.
• Assist in phishing simulation exercises and track staff participation and reporting rates.
• Promote secure handling, classification, storage, transmission, and disposal of sensitive information.
• Support privacy and data protection assessments.
E. Security Testing and Quality Assurance
• Assist in security testing of new systems, application releases, APIs, and technology changes.
• Document functional security defects and communicate findings to relevant technical teams.
• Support user acceptance testing (UAT) and release security readiness assessments.
• Track defects and verify that agreed security requirements have been implemented.
F. Documentation and Reporting
• Prepare periodic security activity reports, dashboards, and management summaries.
• Maintain accurate records of security incidents, assessments, vulnerabilities, and remediation activities.
• Assist in preparing evidence for internal audits, external audits, and regulatory reviews.
• Research emerging cybersecurity threats, vulnerabilities, and recommended security controls.
3. Minimum Qualifications
• Bachelor's degree in Computer Science, Information Technology, Information Systems, Cybersecurity, Software Engineering, or related discipline.
• Recent graduate or candidate with limited professional experience seeking practical information security exposure.
• Relevant cybersecurity certifications or training will be an added advantage.
4. Technical Skills and “Nice-to-Haves”
• Basic understanding of information security principles, networking, operating systems, and common cybersecurity threats.
• Familiarity with the OWASP Top 10 and web application security concepts.
• Basic knowledge of DevSecOps and security testing tools such as, Burp Suite, Black Duck, Corgea, Frida, MobSF, Snyk or equivalent.
• Familiarity with SIEM, EDR, NDR, SOAR and SOC concepts.
• Familiarity with QA tools such as Postman, Jmeter, Locust, Selenium, etc.
• Basic scripting or programming knowledge in Python, PowerShell, Bash, or a similar language is an advantage.
Start hiring with Fuzu
Recruit better talent faster - on your own or with our support.
Explore recruitment platformJob search tips from Fuzu
Selected articles on cover letters, CV structure, and interview preparation.