Job Title: IT Security and Controls Specialist
Organisation: National Social Security Fund (NSSF)
Duty Station: Kampala, Uganda
Reports to: Senior Manager IT Security Implementation
About US:
National Social Security Fund (NSSF) is positioning itself as the Social Security Provider of Choice in Uganda. With our shared purpose of being the Social Security Provider of choice, providing exceptional customer service and better operations with a well-motivated and skilled workforce, we are looking to recruit persons with high integrity and dedication to work with us.
Job Summary: The IT Security and Controls Specialist will be responsible for developing and driving controls within IT to support information technology security.
Key Duties and Responsibilities:
- Conduct compliance assessments by understanding business objectives, structure, policies and procedures, internal controls, and external regulations
- Document systems, processes and controls using narratives, flow charts, data flow diagrams, etc.
- Completes audit work papers by documenting audit tests and findings
- Perform risk assessment using various industry standard frameworks
- Assess the effectiveness of internal controls over key IT security risk
- Identify and recommend business process changes resulting in strengthened internal controls
- Collaborate with control owners to implement process changes and track to completion
- Advise and collaborate on projects by providing IT controls and risk expertise and considerations
- Understand and communicate the downstream impact on the business of control deficiencies
- Attend further trainings as deemed necessary by manager/HOD
- Balance controls/security with business needs
- Risk materiality determination
Qualifications, Skills and Experience:
- The applicant for the National Social Security Fund (NSSF) IT Security and Controls Specialist job placement must hold a bachelor’s degree in Computer Science, software engineering or Information Technology related field
- Professional certification including CISA, CISM, CISSP, CIA and CRISC
- Five years minimum general IT control experience
- Knowledge of and experience in utilizing various methodologies and frameworks, including, COBIT, COSO, ITIL,
- 27001/27002 and 27018, SOC 1 and SOC 2 Type 2
- Understanding of general privacy concepts and practices
- Experience in a multi-channel, multi-product environment
- Excels in a fast-paced and evolving environment
- Looks for new and creative ways to solve problems or improve processes
- Issue resolution skills
How to Apply:
All interested individuals should send copies of academic credentials, application letters and detailed CVs addressed to [email protected] for registration and onward transmission.
Please note that canvassing or lobbying will lead to the automatic disqualification of the candidate.
Deadline: Sunday 23rd January 2022
For more of the latest jobs, please visit https://www.theugandanjobline.com or find us on our facebook page https://www.facebook.com/UgandanJobline