Risk Department,Uganda.IT Risk Analyst

<p><span style="font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;"><strong>KEY RESPONSIBILITIES</strong></span></span></p><ul><li class="ortl-align-justify"><p style="margin-bottom: 2.7pt; margin-right: 0in; margin-top: 0in; text-align: justify;"><span style="font-family: Arial, sans-serif;"><span style="font-size: 11pt;">Conduct proactive systems reviews/assessments/data analysis to identify possible vulnerabilities for timely corrective action.</span></span></p></li><li class="ortl-align-justify"><p style="margin-bottom: 2.7pt; margin-right: 0in; margin-top: 0in; text-align: justify;"><span style="font-family: Arial, sans-serif;"><span style="font-size: 11pt;">Conduct risk assessments prior, during and after the implementation of bank strategic/business initiatives which includes tracking/monitoring the implementation of bank projects/business initiatives, active participation in implementation of bank IT projects and data analytics on performance of the same to inform business decisions.</span></span></p></li><li class="ortl-align-justify"><p style="margin-bottom: 2.7pt; margin-right: 0in; margin-top: 0in; text-align: justify;"><span style="font-family: Arial, sans-serif;"><span style="font-size: 11pt;">Scan the Market/Industry and obtain&nbsp;information related to cyber/system risk and preparing a monthly report for sharing with management.&nbsp;</span></span></p></li><li class="ortl-align-justify"><p style="margin-bottom: 2.7pt; margin-right: 0in; margin-top: 0in; text-align: justify;"><span style="font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">Track/monitor usage of risk tools (e.g. RCSAs, Risk Registers, KRIs Etc) within the Information Technology Department plus submission of the same to Risk Management Department within stipulated timeframes and conducting assurance reviews where appropriate&nbsp;</span></span><span style="color: black; font-family: Arial, sans-serif;"><span style="font-size: 11pt;">and&nbsp;</span></span><span style="font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">communicating test results to appropriate stakeholders.</span></span></p></li><li class="ortl-align-justify"><p style="margin-bottom: 2.7pt; margin-right: 0in; margin-top: 0in; text-align: justify;"><span style="font-family: Arial, sans-serif;"><span style="font-size: 11pt;">Driving/developing, managing and maintaining the bank’s incident management process and system plus associated procedures by ensuring that all units follow the incident management process for cyber/technology related incident.</span></span></p></li><li class="ortl-align-justify"><p style="margin-bottom: 2.7pt; margin-right: 0in; margin-top: 0in; text-align: justify;"><span style="font-family: Arial, sans-serif;"><span style="font-size: 11pt;">Participate in the implementation of the bank’s Business Continuity Management Programme in line with the bank’s Business Continuity Management Policy.</span></span></p></li><li class="ortl-align-justify"><p style="margin-bottom: 2.7pt; margin-right: 0in; margin-top: 0in; text-align: justify;"><span style="font-family: Arial, sans-serif;"><span style="font-size: 11pt;">Participate in the development, review and monitoring of compliance to Bank Policies and Procedures.</span></span></p></li><li class="ortl-align-justify"><p style="margin-bottom: 2.7pt; margin-right: 0in; margin-top: 0in; text-align: justify;"><span style="font-family: Arial, sans-serif;"><span style="font-size: 11pt;">Review of Information Systems audit reports and tracking implementation of the recommendations thereof.</span></span></p></li><li class="ortl-align-justify"><p style="margin-bottom: 2.7pt; margin-right: 0in; margin-top: 0in; text-align: justify;"><span style="font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">Maintain/ build relationships with all key stakeholders within the bank and assurance providers (internal and external audit, compliance and Bank of Uganda Examiners, etc.)</span></span></p></li><li class="ortl-align-justify"><p style="margin-bottom: 2.7pt; margin-right: 0in; margin-top: 0in; text-align: justify;"><span style="font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">Provide appropriate risk training, awareness and education to staff and teams in the bank related to Cyber and system-based risks.</span></span></p></li></ul><p style="margin-bottom: 2.7pt; margin-right: 0in; margin-top: 0in; text-align: justify;"><span style="font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;"><strong>DAILY RESPONSIBILITIES</strong></span></span></p><ul><li class="ortl-align-justify"><p style="text-align: justify;"><span style="font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">Report writing i.e. Risk assurance reporting, Senior Management reporting including&nbsp;</span><span style="font-size: 11pt;">routine reporting for system analytical reviews as one of the daily activities to be done for all high-risk areas that have been agreed upon with the supervisor.</span></span></p></li><li class="ortl-align-justify"><p style="text-align: justify;"><span style="font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt; line-height: 115%;">Attend to enquires, information requests, trainings etc where applicable for business units.</span></span></p></li><li class="ortl-align-justify"><p style="text-align: justify;"><span style="font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">Attend to scheduled and some unscheduled business activities/meetings and any other duties as may be allocated by your supervisor/departmental head from time to time in line with the bank’s expectations.</span></span></p></li></ul><p>&nbsp;</p><p><span style="font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;"><strong>MINIMUM POSITION</strong></span></span><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;"><strong> QUALIFICATION REQUIREMENTS</strong></span></span></p><p>&nbsp;</p><ol style="list-style-type: lower-alpha; padding-left: 96px;"><li><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;"><strong>Academic &amp; Professional</strong></span></span></li></ol><p>&nbsp;</p><figure class="table"><table border="1" cellspacing="0" cellpadding="0" style="border-collapse: collapse; border-width: medium; border-style: none; border-color: currentcolor; border-image: none; margin-left: 5.4pt;"><tbody><tr><td width="94" style="border: 1pt solid black; padding: 0in 5.4pt; width: 70.3pt;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;"><strong>Particulars</strong></span></span></td><td width="195" valign="top" style="border: 1pt solid black; padding: 0in 5.4pt; width: 146.55pt;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;"><strong>Detail</strong></span></span></td><td width="234" valign="top" style="border: 1pt solid black; padding: 0in 5.4pt; width: 175.25pt;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;"><strong>Specific Field or Qualification</strong></span></span></td><td width="102" valign="top" style="border: 1pt solid black; padding: 0in 5.4pt; width: 76.5pt;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;"><strong>Need Type</strong></span></span><a href="#_ftn1" name="_ftnref1" title=""><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;"><strong>[1]</strong></span></span></a></td></tr><tr><td rowspan="3" width="94" style="border: 1pt solid black; padding: 0in 5.4pt; width: 70.3pt;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">Education&nbsp;</span></span></td><td width="195" valign="top" style="border-width: medium 1pt 1pt medium; border-style: none solid solid none; border-color: currentcolor black black currentcolor; padding: 0in 5.4pt; width: 146.55pt;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">Bachelor’s degree</span></span></td><td width="234" valign="top" style="border-width: medium 1pt 1pt medium; border-style: none solid solid none; border-color: currentcolor black black currentcolor; padding: 0in 5.4pt; width: 175.25pt;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">Information Technology, Computer Science, Information Science, Information Systems, Information Security or related disciplines</span></span></td><td width="102" valign="top" style="border-width: medium 1pt 1pt medium; border-style: none solid solid none; border-color: currentcolor black black currentcolor; padding: 0in 5.4pt; width: 76.5pt;"><p style="text-align: center;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">RQ</span></span></p></td></tr><tr><td width="195" valign="top" style="border-width: medium 1pt 1pt medium; border-style: none solid solid none; border-color: currentcolor black black currentcolor; padding: 0in 5.4pt; width: 146.55pt;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">Professional Qualifications</span></span></td><td width="234" valign="top" style="border-width: medium 1pt 1pt medium; border-style: none solid solid none; border-color: currentcolor black black currentcolor; padding: 0in 5.4pt; width: 175.25pt;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">CRISC, CISM, CISSP, CISA &amp; related professional qualifications</span></span></td><td width="102" valign="top" style="border-width: medium 1pt 1pt medium; border-style: none solid solid none; border-color: currentcolor black black currentcolor; padding: 0in 5.4pt; width: 76.5pt;"><p style="text-align: center;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">AA</span></span></p></td></tr><tr><td width="195" valign="top" style="border-width: medium 1pt 1pt medium; border-style: none solid solid none; border-color: currentcolor black black currentcolor; padding: 0in 5.4pt; width: 146.55pt;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">Master’s degree</span></span></td><td width="234" valign="top" style="border-width: medium 1pt 1pt medium; border-style: none solid solid none; border-color: currentcolor black black currentcolor; padding: 0in 5.4pt; width: 175.25pt;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">IT, MBA, Computer Science &amp; related disciplines</span></span></td><td width="102" valign="top" style="border-width: medium 1pt 1pt medium; border-style: none solid solid none; border-color: currentcolor black black currentcolor; padding: 0in 5.4pt; width: 76.5pt;"><p style="text-align: center;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">AA</span></span></p></td></tr></tbody></table></figure><p><br>&nbsp;</p><div><ol style="list-style-type: lower-alpha; padding-left: 96px;"><li><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;"><strong>Experience</strong></span></span></li></ol><p>&nbsp;</p><figure class="table"><table border="1" cellspacing="0" cellpadding="0" width="630" style="border-collapse: collapse; border-width: medium; border-style: none; border-color: currentcolor; border-image: none; margin-left: 5.4pt; width: 472.5pt;"><tbody><tr><td width="432" valign="top" style="border: 1pt solid black; padding: 0in 5.4pt; width: 4.5in;"><p>&nbsp;</p><p><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">Total Minimum No of Years Experience Required</span></span></p><p>&nbsp;</p></td><td width="198" valign="top" style="border: 1pt solid black; padding: 0in 5.4pt; width: 148.5pt;"><p>&nbsp;</p><p style="text-align: center;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">3</span></span></p></td></tr></tbody></table></figure><p>&nbsp;</p><figure class="table"><table border="1" cellspacing="0" cellpadding="0" style="border-collapse: collapse; border-width: medium; border-style: none; border-color: currentcolor; border-image: none; margin-left: 5.4pt;"><thead><tr style="height: 6.65pt;"><th width="144" style="border: 1pt solid black; height: 6.65pt; padding: 0in 5.4pt; width: 1.5in;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;"><strong>Detail</strong></span></span></th><th width="192" valign="top" style="border: 1pt solid black; height: 6.65pt; padding: 0in 5.4pt; width: 2in;"><p style="text-align: center;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;"><strong>Area</strong></span></span></p></th><th width="174" valign="top" style="border: 1pt solid black; height: 6.65pt; padding: 0in 5.4pt; width: 130.5pt;"><p style="text-align: center;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;"><strong>Minimum No of Years</strong></span></span></p></th><th width="121" valign="top" style="border: 1pt solid black; height: 6.65pt; padding: 0in 5.4pt; width: 90.9pt;"><p style="text-align: center;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;"><strong>Need Type</strong></span></span><a href="#_ftn1" name="_ftnref1" title=""><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;"><strong>[1]</strong></span></span></a></p></th></tr></thead><tbody><tr style="height: 6.65pt;"><td width="144" style="border: 1pt solid black; height: 6.65pt; padding: 0in 5.4pt; width: 1.5in;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">Experience Area 1</span></span></td><td width="192" valign="top" style="border-width: medium 1pt 1pt medium; border-style: none solid solid none; border-color: currentcolor black black currentcolor; height: 6.65pt; padding: 0in 5.4pt; width: 2in;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">Information Risk /or IT Security and/or IT Audits</span></span></td><td width="174" valign="top" style="border-width: medium 1pt 1pt medium; border-style: none solid solid none; border-color: currentcolor black black currentcolor; height: 6.65pt; padding: 0in 5.4pt; width: 130.5pt;"><p style="text-align: center;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">3</span></span></p></td><td width="121" valign="top" style="border-width: medium 1pt 1pt medium; border-style: none solid solid none; border-color: currentcolor black black currentcolor; height: 6.65pt; padding: 0in 5.4pt; width: 90.9pt;"><p style="text-align: center;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">ES</span></span></p></td></tr><tr style="height: 6.45pt;"><td width="144" style="border: 1pt solid black; height: 6.45pt; padding: 0in 5.4pt; width: 1.5in;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">Experience Area 2&nbsp;</span></span></td><td width="192" valign="top" style="border-width: medium 1pt 1pt medium; border-style: none solid solid none; border-color: currentcolor black black currentcolor; height: 6.45pt; padding: 0in 5.4pt; width: 2in;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">Information Risk Reviews and Vulnerability Assessments Experience</span></span></td><td width="174" valign="top" style="border-width: medium 1pt 1pt medium; border-style: none solid solid none; border-color: currentcolor black black currentcolor; height: 6.45pt; padding: 0in 5.4pt; width: 130.5pt;"><p style="text-align: center;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">3</span></span></p></td><td width="121" valign="top" style="border-width: medium 1pt 1pt medium; border-style: none solid solid none; border-color: currentcolor black black currentcolor; height: 6.45pt; padding: 0in 5.4pt; width: 90.9pt;"><p style="text-align: center;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">ES</span></span></p></td></tr><tr style="height: 6.45pt;"><td width="144" style="border: 1pt solid black; height: 6.45pt; padding: 0in 5.4pt; width: 1.5in;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">Experience Area 3</span></span></td><td width="192" valign="top" style="border-width: medium 1pt 1pt medium; border-style: none solid solid none; border-color: currentcolor black black currentcolor; height: 6.45pt; padding: 0in 5.4pt; width: 2in;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">Red Team Exercises and/or Penetration Testing Experience</span></span></td><td width="174" valign="top" style="border-width: medium 1pt 1pt medium; border-style: none solid solid none; border-color: currentcolor black black currentcolor; height: 6.45pt; padding: 0in 5.4pt; width: 130.5pt;"><p style="text-align: center;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">2</span></span></p></td><td width="121" valign="top" style="border-width: medium 1pt 1pt medium; border-style: none solid solid none; border-color: currentcolor black black currentcolor; height: 6.45pt; padding: 0in 5.4pt; width: 90.9pt;"><p style="text-align: center;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">ES</span></span></p></td></tr><tr style="height: 10.3pt;"><td width="144" style="border: 1pt solid black; height: 10.3pt; padding: 0in 5.4pt; width: 1.5in;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">Experience Area 4</span></span></td><td width="192" valign="top" style="border-width: medium 1pt 1pt medium; border-style: none solid solid none; border-color: currentcolor black black currentcolor; height: 10.3pt; padding: 0in 5.4pt; width: 2in;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">Stakeholder management</span></span></td><td width="174" valign="top" style="border-width: medium 1pt 1pt medium; border-style: none solid solid none; border-color: currentcolor black black currentcolor; height: 10.3pt; padding: 0in 5.4pt; width: 130.5pt;"><p style="text-align: center;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">2</span></span></p></td><td width="121" valign="top" style="border-width: medium 1pt 1pt medium; border-style: none solid solid none; border-color: currentcolor black black currentcolor; height: 10.3pt; padding: 0in 5.4pt; width: 90.9pt;"><p style="text-align: center;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">ES</span></span></p></td></tr><tr style="height: 10.3pt;"><td width="144" style="border: 1pt solid black; height: 10.3pt; padding: 0in 5.4pt; width: 1.5in;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">Experience Area 5</span></span></td><td width="192" valign="top" style="border-width: medium 1pt 1pt medium; border-style: none solid solid none; border-color: currentcolor black black currentcolor; height: 10.3pt; padding: 0in 5.4pt; width: 2in;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">Report writing</span></span></td><td width="174" valign="top" style="border-width: medium 1pt 1pt medium; border-style: none solid solid none; border-color: currentcolor black black currentcolor; height: 10.3pt; padding: 0in 5.4pt; width: 130.5pt;"><p style="text-align: center;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">2</span></span></p></td><td width="121" valign="top" style="border-width: medium 1pt 1pt medium; border-style: none solid solid none; border-color: currentcolor black black currentcolor; height: 10.3pt; padding: 0in 5.4pt; width: 90.9pt;"><p style="text-align: center;"><span style="color: black; font-family: Arial, sans-serif;"><span lang="EN-GB" style="font-size: 11pt;">ES</span></span></p></td></tr></tbody></table></figure><p><br>&nbsp;</p></div>