Senior Manager- Cyber Security Assurance

Requirements

• Bachelor’s Degree in Information Technology, Computer Science, or related field (Master’s preferred).
  
• Professional Certifications such as CISSP, CISM, CISA, or ISO 27001 Lead Auditor/Implementer.
  
• 5+ years of experience in cybersecurity, with at least 3 years in a leadership role.
  
• Strong knowledge of ISO27001 ISMS, PCI DSS, and regulatory compliance requirements.
  
• Experience in DevSecOps, vulnerability management, and penetration testing.
  
• Strong leadership and people management skills.
  
• Excellent understanding of cybersecurity frameworks and risk management.
  

• Develop, implement, and enforce baseline security standards across all systems.
  
• Integrate security into the software development lifecycle and product design.
  
• Establish secure coding practices and ensure continuous security testing within CI/CD pipelines.
  
• Oversee vulnerability assessments, penetration testing, and red team simulations.
  
• Ensure timely remediation of identified risks and communicate critical findings to stakeholders.
  
• Lead vulnerability identification, prioritization, and recommendation on resolution.
  
• Report on key metrics and ensure compliance with risk appetite thresholds.
  
• Ensure effective lifecycle management of user identities, including provisioning, access reviews, and deprovisioning.
  
• Drive organization-wide awareness programs to strengthen security culture and reduce human risk.
  
• Lead third party security assessments and ongoing monitoring of vendors and partners in line with the security baseline standard.
  
• Maintain compliance with the ISMS (ISO 27001), PCI DSS, and all relevant regulatory requirements.
  
• Manage Bank of Uganda (BOU) quarterly reporting.
  
• Exercise oversight of enterprise technology governance, including cybersecurity and IT project governance—through the establishment of policies and standards, ongoing monitoring of compliance across technology initiatives, and management of governance issues to prevent control failures and recurrence.