​

KEY ACCOUNTABILITIES:

• Develop, implement, and enforce baseline security standards across all systems.
• Integrate security into the software development lifecycle and product design.
• Establish secure coding practices and ensure continuous security testing within CI/CD pipelines.
• Oversee vulnerability assessments, penetration testing, and red team simulations.
• Ensure timely remediation of identified risks and communicate critical findings to stakeholders.
• Lead vulnerability identification, prioritization, and recommendation on resolution.
• Report on key metrics and ensure compliance with risk appetite thresholds.
• Ensure effective lifecycle management of user identities, including provisioning, access reviews, and deprovisioning.
• Drive organization-wide awareness programs to strengthen security culture and reduce human risk.
• Lead third party security assessments and ongoing monitoring of vendors and partners in line with the security baseline standard.
• Maintain compliance with the ISMS (ISO 27001), PCI DSS, and all relevant regulatory requirements.
• Manage Bank of Uganda (BOU) quarterly reporting.
• Exercise oversight of enterprise technology governance, including cybersecurity and IT project governance—through the establishment of policies and standards, ongoing monitoring of compliance across technology initiatives, and management of governance issues to prevent control failures and recurrence.
• Manage internal and external audits, track findings, and oversee timely remediation to ensure no overdue findings, no failed validations and no repeat findings.
• Lead and mentor a high-performing cybersecurity team.
• Foster a culture of accountability, continuous improvement, and innovation.