Related Jobs
%20(1).jpg)
.jpg)
.jpeg)
Related Jobs
_jfif.jpg)
%20LOGO.png)
Related Jobs
Share this Job
About the Organisation
IT Security Specialist – Applications job at DFCU Bank | Apply Now
Kampala, Uganda
DFCU Bank is a leading financial institution in Uganda dedicated to transforming lives and businesses through innovative financial solutions that drive economic growth and financial inclusion. Established in 1964 as the Development Finance Company of Uganda, the bank has grown from a development finance institution into a full-fledged commercial bank, with a significant milestone being its acquisition of Crane Bank in 2017. Recognized for its strong financial performance, customer service excellence, and digital banking innovations, dfcu Bank has received multiple industry awards and remains a trusted partner for individuals, SMEs, and corporate clients.
The bank fosters a dynamic and inclusive work culture that emphasizes integrity, customer focus, innovation, teamwork, and excellence, offering employees professional growth, career advancement opportunities, and competitive benefits. With a strong presence across Uganda through an extensive network of branches, ATMs, and digital banking services, dfcu Bank continuously invests in technology to enhance accessibility and efficiency.
Committed to corporate social responsibility, the bank actively supports financial literacy programs, women empowerment initiatives, environmental sustainability efforts, and youth entrepreneurship. Headquartered at 26 Kyadondo Road, Kampala, Uganda, dfcu Bank remains a key driver of financial empowerment and economic development in the country. For more information
Are you looking for Security jobs in Uganda 2025 today? then you might be interested in IT Security Specialist – Applications job at DFCU Bank
Full Time
Deadline:
3 Sept 2025
Job Title
IT Security Specialist – Applications job at DFCU Bank
DFCU Bank
Job Description
Reporting to the Manager – Cyber Defense, the IT Security Specialist – Applications will safeguard DFCU Bank’s applications against vulnerabilities, threats, and unauthorized access. The position requires a proactive approach to identifying security risks, integrating security into the Software Development Life Cycle (SDLC), responding to incidents, and ensuring compliance with global standards such as OWASP, PCI-DSS, and ISO 27001. The incumbent will also be responsible for deploying and managing security tools, conducting penetration testing, educating development teams on security best practices, and working closely with cross-functional teams to maintain a robust application security framework.
Duties, Roles and Responsibilities
Qualifications, Education and Competencies
See all details of the qualifications, competencies and education for this role under the "How to Apply" section below.
ONLY ONLINE APPLICATIONS:
Interested and qualified candidates are advised that all applications should be submitted online.
To apply please click on the APPLY button below.
Applications are managed via the AfriCareers Jobs Portal:
-
Click the Apply button below
-
New users: Select Create Profile and complete the Profile Creation Wizard
-
Existing users: Log in and update your profile if needed
-
Go to the "Jobs" tab
-
Read the detailed job description, Roles and Qualifications.
-
Submit your application via the jobs portal
-
Track progress under "My Applications" tab
Important Note: Employers now hire directly on the AfriCareers New Jobs Portal — keep your profile updated so employers can easily view your CV and hire you instantly.
How to Apply
Conduct application vulnerability assessments and penetration testing.
Identify and remediate security weaknesses in application designs, code, and configurations.
Collaborate with developers to integrate security into the SDLC.
Advocate for secure coding practices including input validation, encryption, and authentication.
Investigate and respond to security incidents such as breaches and malware infections.
Perform root cause analysis and recommend preventative measures.
Develop and enforce application security policies and guidelines.
Ensure applications comply with standards (OWASP, PCI-DSS, ISO 27001).
Deploy and manage WAFs, SAST/DAST tools, and runtime protection solutions.
Monitor application activity for anomalies or suspicious behaviour.
Train and sensitize developers and stakeholders on security risks and best practices.
Communicate risks and solutions effectively to both technical and non-technical stakeholders.
Stay updated on emerging threats and propose improvements to strengthen application security.
SERVICES
COMMERCIAL
SERVICES
INDUSTRIAL
SERVICES
RESIDENTIAL
Education:
Bachelor’s degree in Computer Science, IT, or related field.
Master’s in Digital Security (added advantage).
Professional Certifications:
At least one certification such as CISSP, CISM, CEH, CCSP.
Additional certifications in Cisco, Microsoft, Unix/Linux technologies are advantageous.
Experience:
Minimum of 5 years in systems/network administration or information & cyber security.
Banking industry experience is an added advantage.
Demonstrated experience in ethical hacking, application penetration testing, and security frameworks.
Technical Skills:
Proficiency in firewalls, IDS, encryption, and Web Application Firewalls.
Knowledge of systems architecture, secure internet applications design, and scripting (Unix, Windows, Python).
Strong report writing and incident analysis skills.
Core Competencies:
Analytical thinking and problem-solving.
Strategic planning and decision-making.
Excellent communication and interpersonal skills.
Leadership and stakeholder engagement.
Strong work ethic, teamwork, and self-development focus.
