Manager – IT Security Governance Jobs in Uganda – DFCU Bank

About DFCU Bank

Job Summary

Key Responsibilities

• Develop, implement, and maintain information security policies, standards, and guidelines.
• Ensure security policies align with business objectives, regulatory requirements, and industry standards.
• Review and update security policies to address emerging cybersecurity risks and technologies.
• Establish and maintain an Information Security Management System (ISMS).
• Develop long-term information security strategies aligned with organizational goals.
• Participate in security governance committees and support enterprise security objectives.

• Lead information security risk assessment processes in line with ISO 27001 standards.
• Conduct technology risk assessments and identify cybersecurity vulnerabilities.
• Develop and monitor risk treatment plans to address security weaknesses.
• Track resolution of high-priority security risks.
• Assess security controls and implement improvements.
• Support risk-based decision-making across the organization.

• Ensure compliance with cybersecurity laws, regulations, and contractual obligations.
• Support regulatory reporting requirements including Bank of Uganda cybersecurity guidelines.
• Monitor changes in cybersecurity regulations and update governance practices.
• Ensure compliance with frameworks including:
  • ISO 27001
  • NIST Cybersecurity Framework
  • COBIT
  • PCI DSS

• Act as a key contact during cybersecurity audits and assessments.
• Coordinate responses to audit findings.
• Ensure timely remediation of identified security gaps.
• Work with internal teams to prevent repeat audit issues.

• Automate information security reporting dashboards.
• Provide regular cybersecurity reports to executive management and the board.
• Report on security posture, compliance status, and technology risks.
• Support security decision-making through accurate security metrics.

• Develop and enforce third-party security agreements.
• Ensure vendor security practices align with organizational risk tolerance.
• Provide governance support during cybersecurity incidents.
• Ensure incident response processes comply with security policies.
• Incorporate lessons learned from incidents into security improvements.

• Develop cybersecurity awareness programs for employees and customers.
• Promote information security best practices across the organization.
• Monitor emerging threats and cybersecurity trends.
• Benchmark security programs against global industry standards.

Qualifications

• Bachelor’s Degree in Computer Science, Information Technology, Cybersecurity, or related numerical sciences field.
• Master’s Degree specializing in Digital Security is an added advantage.
• Professional cybersecurity certification such as:
  • CISSP
  • CISM
  • CEH
  • CISA
  • CRISC
  • GIAC certifications or equivalent.
• Minimum 6 years of experience in Information Technology or Cybersecurity.
• At least 3 years of experience reviewing and advancing information security within banking or financial services environments.

Required Technical Skills and Knowledge

• Information security governance frameworks.
• ISO 27001 Information Security Management System (ISMS).
• NIST Cybersecurity Framework.
• COBIT governance framework.
• PCI DSS compliance.
• Cybersecurity risk assessment and mitigation.
• Technology risk management.
• Authentication, authorization, and access controls.
• Identity and access management.
• Vulnerability assessment and cyber-defense tools.
• Cryptography and encryption key management.
• Security controls implementation.
• Cybersecurity incident management.
• Data protection and privacy requirements.

Required Professional Skills

• Advanced IT security architecture skills.
• Strong analytical and critical thinking abilities.
• Strategic planning and organizational skills.
• Problem-solving and decision-making abilities.
• Excellent written and verbal communication skills.
• Ability to present cybersecurity issues to senior management.
• Strong leadership and team development skills.
• Ability to influence stakeholders and drive security improvements.
• Commitment to continuous professional development.

Why Join DFCU Bank?

• Lead cybersecurity governance initiatives within a major financial institution.
• Work on enterprise-level security programs.
• Strengthen Uganda’s banking cybersecurity landscape.
• Develop expertise in information security leadership.
• Work with advanced security frameworks and technologies.
• Build a career in cybersecurity management.

Career Growth Opportunities

• Chief Information Security Officer (CISO)
• Head of Cybersecurity
• Information Security Director
• Cybersecurity Risk Manager
• IT Governance Director
• Technology Risk Manager

What Should Be Included in Your CV

• Professional summary highlighting cybersecurity governance and banking security experience.
• Bachelor’s Degree in IT, Computer Science, Cybersecurity, or related field.
• Cybersecurity certifications such as CISSP, CISM, CISA, CRISC, CEH, or GIAC.
• Minimum 6 years of cybersecurity or IT security experience.
• Experience working in banking or financial services environments.
• Experience developing and implementing security policies.
• Experience managing ISO 27001, NIST, COBIT, or PCI DSS frameworks.
• Cybersecurity risk assessment and mitigation experience.
• Audit management and regulatory compliance experience.
• Experience with vulnerability management and security controls.
• Incident response governance experience.
• Security reporting and dashboard development experience.

• Implemented ISO 27001 security controls.
• Reduced cybersecurity risks through improved controls.
• Led successful security audits.
• Developed cybersecurity policies and procedures.
• Improved regulatory compliance scores.
• Managed security awareness programs.
• Reduced vulnerabilities through risk treatment plans.

Cover Letter Tips

• Start by highlighting your cybersecurity leadership experience.
• Mention your experience working in banking or financial services security environments.
• Explain your expertise in security governance frameworks such as ISO 27001, NIST, COBIT, and PCI DSS.
• Highlight achievements in risk reduction, compliance, and security improvement.
• Demonstrate your ability to communicate cybersecurity risks to senior executives.
• Explain how your skills can help DFCU Bank strengthen information security.
• Mention relevant cybersecurity certifications.
• Keep the letter focused on business impact, not only technical skills.

Interview Questions and Tips

• ISO 27001 – Information Security Management System standard.
• NIST – Cybersecurity risk management framework.
• COBIT – IT governance and management framework.

How to Apply

Related Jobs in Uganda

• Cybersecurity Manager Jobs
• Information Security Officer Jobs
• IT Risk Manager Jobs
• Security Governance Specialist Jobs
• Cybersecurity Analyst Jobs
• IT Audit Manager Jobs
• Information Security Architect Jobs
• SOC Manager Jobs
• Technology Risk Officer Jobs
• CISO Jobs