Cyber Security Officer

About the role

The Bank is looking for a Cyber Security Officer to provide continuous monitoring, detection and operational support across its security technologies, acting as the first line of defence against cyber threats. The role supports the implementation of the Bank's cyber security strategy, policies and controls to protect the confidentiality, integrity and availability of its data, systems and infrastructure, and helps maintain compliance with the Bank of Uganda Cyber and Technology Risk Management Guidelines, 2024 and other regulatory requirements. The position reports to the Cyber Security Manager.

Key responsibilities

• Monitor security platforms (SIEM, network and endpoint detection and response, firewalls, web application firewall, network access control), triage alerts and escalate confirmed threats
• Support the incident response team in containment, investigation, evidence preservation, root-cause analysis and reporting
• Run vulnerability scans, prioritise findings and track remediation with system owners
• Validate hardening baselines and review security aspects of change requests and new systems
• Review user access, privileged accounts and enforce multi-factor authentication and least privilege
• Support encryption, data loss prevention and cryptographic key management
• Support compliance audits and regulatory findings tracking
• Assess critical vendors and review new digital products and integrations
• Support business continuity and disaster recovery drills and maintain runbooks

Required profile

• Bachelor's degree in Cyber Security, Computer Science, Information Technology or a related field
• 1-3 years of practical experience in cyber security, SOC monitoring or IT operations, preferably in banking or a regulated environment
• Hands-on experience with security tools such as SIEM, EDR/XDR, NDR, IDS/IPS and vulnerability management
• Strong understanding of network security, Windows and Linux, Active Directory and core network protocols
• Familiarity with frameworks such as MITRE ATT&CK, NIST CSF, ISO 27001 and CIS Controls
• Knowledge of the Bank of Uganda Cyber and Technology Risk Management Guidelines, 2024, SWIFT CSCF, PCI DSS and the Data Protection and Privacy Act, Cap 97

Required skills

• Analytical, problem-solving and root-cause analysis skills
• Ability to interpret security alerts and logs under pressure
• Basic scripting and automation (e.g. Python or PowerShell)
• Good communication, teamwork and discretion with confidential information

Candidates apply by sending a cover letter and CV to the Head of Human Resources by 5pm on Monday 23 November 2026.