Job Title: Information Security Manager & Data Protection Officer
Organisation: National Social Security Fund (NSSF)
Duty Station: Kampala, Uganda
Reports to: Chief Risk Officer
About US:
National Social Security Fund (NSSF) is positioning itself as the Social Security Provider of Choice in Uganda. With our shared purpose of being the Social Security Provider of choice, providing exceptional customer service and better operations with a well-motivated and skilled workforce, we are looking to recruit persons with high integrity and dedication to work with us.
Job Summary: The Information Security Manager & Data Protection Officer will mainly ensure the integrity and confidentiality of the Fund’s data, to safeguard the members’ interests and protect the Fund’s image.
Key Duties and Responsibilities:
- Develop and implement the Fund’s information security risk strategy to safeguard the Fund’s IT infrastructure, and systems and protect the Fund’s data.
- Establish and maintain information security policies, processes, procedures, and system security baselines.
- Monitor the Fund’s information technology architecture and advise management on emerging cyber threats that may affect the Fund’s information assets and operations.
- Promote and conduct security awareness by developing and implementing a security awareness and training programme across the Fund.
- Conduct periodic information technology risk assessments, penetration tests and vulnerability assessments and advise management on remediation measures.
- Conduct risk assessment and testing of new technologies to enhance the Fund’s information security infrastructure.
- Coordinate disaster recovery tests to ensure that the Fund can return swiftly to normal operations in case of a disaster.
- Investigate information security incidents in accordance with the security incident management standard, produce reports with recommendations and ensure any remedial action is taken.
- Develop, implement, and maintain policies and procedures that enforce compliance with DPPA (Data Protection and Privacy Act) and regulations.
- Train staff on their responsibilities concerning data privacy and protection
- Act as a contact point for the Data Protection Office and data subjects regarding the processing of their personal data and the exercise of their rights
- Conduct data protection compliance audits and provide updates on the compliance of the Fund.
- Monitor the Fund’s compliance with the Data Protection and Privacy Act (DPPA), and other applicable data protection legislation and regulations.
Qualifications, Skills and Experience:
- The applicant for the NSSF job must hold a Bachelor’s degree in information technology, Information Systems or Computer Science, or a related field.
- Professional qualifications CISSP or CRISC or CISM
- At least seven years of experience in information security management, 3 at the managerial level.
How to Apply:
All Interested individuals should Click Here to fill out the application form and also send copies of their application letter, curriculum vitae and academic qualifications, addressed to the Chief of People and Culture to recruitment@nssfug.org
NB: Women are encouraged to apply. Please note that canvassing or lobbying will lead to automatic disqualification of the candidate and that providing minimal information or not attaching the required documentation may lead to the disposition of your candidature due to insufficient information provided.
Deadline: 18tth March 2024