• Cybersecurity Risk Assessments • Conduct routine assessments of IT systems, applications, and business processes to evaluate the design and effectiveness of cybersecurity controls. • Assist in the identification, documentation, and tracking of cybersecurity risks and weaknesses across the Bank. • Vulnerability Management & Testing Support • Plan, coordinate, and report on vulnerability assessments and penetration testing exercises (internal, external, application, wireless, cloud). • Follow up on remediation timelines and verify closure of high-risk findings. • Perform basic technical validation of findings using approved tools and methods. • Third-Party Security Assessments • Conduct security due diligence for third-party service providers and vendors during onboarding and renewal cycles. • Maintain the third-party security risk tracker in alignment with the Bank’s procurement and outsourcing guidelines. • Liaise with procurement, legal, and IT teams to ensure security clauses are included in contracts. • Cybersecurity Audit Support • Support internal and external audits related to cybersecurity and IT risk management. • Prepare and organise documentation, evidence logs, and follow-up actions for audit requirements. • Track closure of audit findings and provide regular progress reports to the Cyber Assurance Manager. • Red Team & Control Testing Participation • Assist with red team and tabletop exercises under the direction of the Cyber Assurance Manager. • Help simulate adversary tactics to evaluate the effectiveness of the SOC and incident response capabilities. • Document findings and lessons learned from exercises. • Reporting & Metrics • Maintain dashboards and reports related to vulnerabilities, risks, and third-party assessments. • BUSINESS BEHAVIOURS • Passion: Committed to excellence, delivering outstanding results and making a positive impact on our customers and stakeholders. • Teamwork: Collaborates, mutual respect, and diverse perspectives, to achieve shared success and deliver greater value to the Bank. • Integrity: Uphold honesty, transparency, and accountability, ensuring ethical practices in every action. • Innovation: Embrace creativity and forward-thinking, continually seek new solutions to enhance customer experience and drive business growth.

• Bachelor’s degree in Cybersecurity, Information Technology, or a related discipline. • A minimum of 2 years of experience in cybersecurity, IT audit, programming, IT system administration, or related role • Preferred certifications: eJPT, CEH, Security+, or other entry-level GRC or technical certs. • Exposure to security assessments, vulnerability scanning, or penetration testing. • Familiarity with financial or regulated environments is an added advantage. • THE FOLLOWING DOCUMENTS SHOULD ACCOMPANY THE APPLICATION • Cover letter, Detailed CV, and Copies of academic documents all as one file.

To apply for this job email your details to hr@postbank.co.ug