ICT Risk Officer

The IT Risk Officer will assume a pivotal role in safeguarding Brac Uganda Banks’s digital assets, emphasizing the preservation of confidentiality, integrity, and availability of information. This role encompasses the evaluation, analysis, and mitigation of ICT-related risks, along with the formulation and execution of robust risk management strategies and policies.

Required Qualifications & Skills:

• Bachelor’s degree in computer science, Software Engineering, Information Technology, Cybersecurity and Digital Forensics or Information Systems.
  

• At least 1 year experience in ICT in a banking environment with ICT security.
  

• Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), or Certified in Risk and Information Systems Control (CRISC).
  

• Assess and analyse the bank’s ICT systems, applications, and processes to identify vulnerabilities and potential risks.
  

• Regularly review bank’s systems and banking application user rights and develop/update user right matrices.
  

• Maintain criteria for assessing applications and systems to measure compliance with company policies, procedures, standards, security training programs, technical infrastructure, and development efforts against internal compliance baselines.
  

• Analyse existing ICT risk management processes and recommend improvements to ensure a clear separation of operational and compliance responsibilities.
  

• Collaborate with IT teams to assess and evaluate new technologies, systems, ICT projects, IT vendors and applications for potential risks and vulnerabilities.
  

• Analyse database activities and user actions to detect and investigate any unauthorized or suspicious activities.