The Ugandan Jobline

• Interpret
  and translate ICT security strategic directions, policy and standards
  requirements into the actionable security plans.
• Understand,
  assess and manage local security risks and specific security requirements;
  report findings and provide recommendations on how to effectively minimize
  ICT security risks to acceptable levels; assist formulating mitigation
  plans.
• Formulate
  local security procedures and guidelines to facilitate the achievement of
  ICT security objectives and coordinate their implementation with local ICT
  operational groups.
• Liaise
  with local UN agencies, funds and programmes, as well as other parties and
  ensure that all operational agreements include documented security
  requirements.
• Plan
  and coordinate integration of security standards, processes and tools into
  day-to-day ICT operational activities including software development
  life-cycle, change management, and technical monitoring.
• Improve
  and maintain secure development standards.
• Coordinate/perform
  application vulnerability assessments, code reviews, and assessment of
  SDLC processes.
• Incorporate
  lessons learned into security awareness material and coordinate local
  security awareness activities.
• Ensure
  that new ICT resources are risk assessed and that risk mitigation plans
  are documented and implemented before the ICT resource is put in
  production.
• Consolidate
  and report key security performance indicators obtained from local
  operational groups.
• Perform/participate
  in security risk assessments and formulation of risk mitigation plans of
  Umoja underlying infrastructure.
• Consolidate
  and report key security performance indicators obtained from local ICT
  operational groups.
• Keep
  abreast of developments in the field of ICT security and participate in
  the evaluation of new security solutions and methodologies.
• Formulate
  security awareness material, and deliver training on ICT security topics.
• Perform
  other duties as required.

• The
  IT professional should hold an advanced University degree (Master’s degree
  or equivalent) in computer or information systems, mathematics,
  statistics, engineering or other related field.
• A
  university degree with a relevant combination of academic qualifications
  and experience may be accepted in lieu of the advanced university degree.
• Professional
  Certifications such as the CISSP, SSCP, CSSLP, CISM, ITIL or GIAC are
  desirable.
• At
  least five years professional experience in an ICT environment is
  required, with at least 2 years of demonstrated cumulative experience in
  performing risk assessments, vulnerability testing, developing mitigation
  strategies, and incident response activities.
• At
  least a year’s experience in application security.
• Professional
  experience at the international level in the public/private sector is
  desirable.
• Experience
  with ISO 27000 series of security standards and best-practices is
  desirable.
• Experience
  with ITIL, OWASP and NIST frameworks is desirable.
• Experience
  with infrastructure and web-application vulnerability scanning tools is
  desirable.
• Language: Fluency in spoken and written
  English; knowledge of a second UN language is an advantage and sometimes a
  requirement. Fluency in the local language may be essential.

Related Jobs