IT Security Specialist Job at NSSF

NSSF

IT Security Specialist Job Post

Location: Jobs in Uganda 2025 - 2026

Work Hours: Full-time, 08 hours per day

Salary: UGX

No. of vacancies: 01

Deadline: October 24 2025

Hiring Organization: NSSF

Job Details:

Job Purpose:

To implement and maintain our security systems by preventing unauthorized access to our data and responding to privacy breaches.

Duties and Responsibilities include:

Conduct compliance assessments by understanding business objectives, structure, policies and procedures, internal controls, and external regulations
Design and implement safety measures and data recovery plans
Document systems, processes and controls using narratives, flow charts, data flow diagrams, etc.
Understand and communicate the downstream impact on the business of control deficiencies.
Advise and collaborate on projects by providing IT controls and risk expertise and considerations
Analyse IT specifications to assess security risks.
Install, configure and upgrade security software/applications.
Secure networks through firewalls, password protection and other systems
Inspect hardware for vulnerable points of access
Monitor network activity to identify issues early and communicate them to IT teams
Act on privacy breaches and malware threats • Serve as a security expert and conduct trainings when needed
Draft security policies and guidelines
Completes audit work papers by documenting audit tests and findings
Collaborate with control owners to implement process changes and track to completion
Implementation of IT security strategy

Education Requirements:

Bachelor’s degree in information security, Computer Science, IT, or a related field; or equivalent professional experience.
Industry-recognized security certifications such as Cisco Security (CCNP Security, CCIE Security), OSCP, SSCP, CEH, CISSP, GIAC certifications, Microsoft Azure Security Engineer Associate, Microsoft Certified: Cybersecurity Architect Expert, or similar.

Work Experience:

4+ years’ experience in cyber security analysis, security engineering, or a similar role.
Hands-on experience with SIEM platforms, endpoint security, and vulnerability and patch management tools
Clear understanding of compliance requirements in financial services or regulated sectors.
2 years in a Supervisory role will be of added advantage.

Key Competences:

Network and System Security: Demonstrated experience in securing enterprise networks, systems, and endpoints, including firewall configuration, network segmentation and monitoring.
Identity and Access Management (IAM): Hands-on experience implementing and managing SSO, MFA, and PAM solutions.
Vulnerability and Patch Management: Proven ability to identify, prioritize, and close vulnerabilities using automated tools, with a strong understanding of patch lifecycle processes.
Security Assessments and Penetration Testing: Experience in conducting or coordinating vulnerability assessments, penetration tests, and remediation tracking to ensure system resilience.
Cloud and Application Security: Experience in securing cloud platforms and applications.
Security Monitoring and Incident Response: Practical experience using NDR and SIEM tools, threat detection, incident investigation, and forensic analysis.
Compliance and Risk Management: Working knowledge of ISO 27001, NIST, GDPR, and related frameworks, with the ability to translate compliance into operational controls.
Analytical and Problem-Solving: Ability to conduct threat intelligence, risk assessments, and provide actionable security insights.
Communication and Collaboration: Strong skills in explaining security concepts, leading awareness sessions, and coordinating across teams.
Automation and Innovation: Experience with scripting (Python, PowerShell) and familiarity with Zero Trust architectures and automation in security processes.