Job Title: IT Risk Officer
Location: Kampala, Uganda
Job Type: Full-time
Application Deadline: 27th May 2024
Company Overview:
Company: Bank of Africa Uganda (BOA)
Bank of Africa Uganda is part of the Bank of Africa Group, a multinational banking conglomerate. BOA Uganda is committed to providing quality financial services and promoting economic growth in Uganda.
Job Description:
The IT Risk Officer at Bank of Africa Uganda is responsible for providing technical expertise in Information Security and overseeing the ongoing management of information security policies, procedures, and technical systems to ensure the confidentiality, integrity, and availability of the bank’s information systems.
Key Responsibilities:
- Policy Implementation and Review: Prepare, implement, and review ICT security policies, procedures, controls, and standards for both existing and new applications.
- System Assessments: Conduct regular reviews to ensure effective ICT security documentation, including risk assessments, security plans, self-assessments, contingency plans, and certifications.
- Business Continuity and Disaster Recovery: Conduct Business Impact Assessments, derive Business Continuity Plans, and establish a Disaster Recovery Plan for the bank.
- Self-Assessments and Compliance: Perform self-assessments of the ICT Security Program to ensure compliance with policies and best practices, and address any identified weaknesses.
- Monitoring and Incident Management: Monitor business systems through audit logging, scanning, and monitoring processes. Manage incident handling, escalation procedures, and ensure timely resolution of all incidents.
- Security Awareness: Implement processes for periodic ICT security awareness briefings, training, and communication of rules of behavior.
- Development and Acquisition: Ensure ICT security is addressed in the development and acquisition process of all information systems and related products/services.
- Policy Enforcement: Monitor and enforce internal risk policies related to ICT, report violations, and propose response measures.
- Risk Management: Assist business/support units in managing and implementing ICT risk management mechanisms. Monitor industry developments in ICT risk management and recommend improvements.
- Additional Duties: Perform any other duties as assigned by the Head of Risk.
Skills, Knowledge, and Experience:
- Experience: At least 3 years of working experience, with 2 years in a complex organization, preferably in the financial services industry.
- Education: Bachelor’s degree in ICT, Computer Science, or a related field. ICT-related qualifications (e.g., CISM, CISA, CRISC, CISSP, ISO/IEC 27001) are required.
- Skills:
- Keen interest in IT and financial sector developments.
- Attention to detail and analytical abilities.
- Creativity, patience, logic, and objectivity.
- Strong report writing skills.
- Proactive approach and decision-making confidence.
- Methodical and organized work approach.
- Ability to work under pressure and meet deadlines.
- Effective communication and interaction skills.
- Understanding of confidentiality issues and related laws.
- Experience in risk management processes, Oracle databases, networks, systems management, and ICT projects.
- Policy formulation and implementation experience.
- Project management skills in Quality Assurance and Risk Management.
- Competences:
- Business acumen.
- Planning and project management skills.
- ICT change management skills.
- Analytical skills and self-drive.
- Strong communication and presentation skills.
- Interpersonal and teamwork skills.
- Monitoring and follow-up skills.
- Ability to work in a fast-paced, results-oriented environment.
Application Instructions:
Interested candidates should apply via the Bank of Africa Uganda career portal: Apply Here by 27th May 2024.
About Bank of Africa Uganda:
Industry: Banking
Location: Kampala, Uganda