Housing Finance Bank is a Commercial Bank and the leading provider of housing finance solutions with a vision to be the preferred consumer and business bank with a focus on housing finance. To attain its strategic objectives efficiently and effectively, Housing Finance Bank is seeking to hire qualified, versatile, and self-driven individuals to fill the vacant position in its establishment below.

Department: Information Security

Reports To: Head of Information Security

Direct Reports:

Direct - User Access Management Analysts

Indirect - External Cybersecurity Service providers

Interacts/Interfaces with:

Internal - All Staff

 - Business Technology Department

 - IT Risk Management

 - Compliance Department

External - External Cybersecurity Service providers

 - Regulators BOU, NITA, UCC

Job Purpose:

• The role is responsible for overseeing the bank’s Identity and Access Management program, ensuring that only authorized

individuals have appropriate access to systems, applications, and data. This involves designing, implementing, and maintaining

IAM policies, tools, and processes to mitigate security risks, streamline access controls, and comply with banking regulations.

Key Result Areas:

1. Develop and maintain a strategic IAM framework aligned with the bank’s cybersecurity policies, business goals and regulatory requirements.

2. Regularly review and update IAM policies to address emerging threats and compliance changes.

3. Define and implement Role-Based Access Control (RBAC) or Attribute-Based Access Control (ABAC) models.

4. Oversee the provisioning and de-provisioning of user accounts for employees, contractors, and third parties.

5. Collaborate with IT, HR, compliance, and business units to align IAM processes with organizational needs.

6. Manage and monitor privileged accounts to prevent misuse or unauthorized access.

7. Create and manage access certification processes, ensuring periodic reviews of user access rights.

8. Supervise access request workflows to ensure compliance with approval processes.

9. Implement and manage MFA solutions across the bank’s critical systems while ensuring MFA adoption for remote access, privileged accounts, and high-risk applications.

10. Deploy and manage SSO systems to simplify user access while enhancing security.

11. Enforce strong password policies and implement password management tools.

12. Oversee the creation, modification, and deletion of user accounts as employees join, change roles, or leave the bank ensuring timely removal of access for terminated employees or inactive accounts.

13. Maintain IAM processes to comply with standards such as ISO 27001, PCI DSS, GDPR, and local banking regulations while ensuring timely implementation of audit recommendations related to IAM.

14. Perform regular risk assessments to identify vulnerabilities in the IAM framework and respond to and investigate access-related security incidents, such as unauthorized access or account compromise.

15. Regularly review and update IAM policies, procedures, and workflows to improve efficiency and security.

16. Automate repetitive IAM tasks such as provisioning, de-provisioning, and access reviews to improve efficiency.

17. Define and monitor Key Performance Indicators (KPIs) for IAM processes, such as provisioning times, access review completion rates, and incident resolution times and provide regular reports to key stakeholders.

Financial Responsibility:

1. Develop and manage the budget for IAM activities.

2. Justify investments in tools, training, and personnel for security initiatives.

3. Ensure that adequate resources are available to meet security objectives

1. Develop and manage the budget for IAM activities.

2. Justify investments in tools, training, and personnel for security initiatives.

3. Ensure that adequate resources are available to meet security objectives

Person Specifications

Education & Training:

1. Bachelor’s Degree in IT, Computer Science, Cybersecurity or Business Administration or any other related field with a focus on

Information Systems.

2. 5+ years of relevant IAM experience in information security, governance, compliance, or risk management.

3. Familiarity with frameworks like NIST CSF, ISO27001, COBIT, PCI DSS, or other industry standards.

4. Relevant certifications in information security, governance and compliance such as CISSP, CISA, CRISC, CISM, ISO 27001 are

highly desirable

Skills & Experience:

• Strong technical knowledge of IAM tools (e.g., Arcos, CyberArk), directory services (LDAP, Active Directory), and authentication

protocols (e.g. SAML, OAuth) and cloud IAM (AWS IAM, Azure AD).

• Strong analytical and problem-solving skills for risk assessment and mitigation.

• Excellent communication and stakeholder engagement skills.

• Strong leadership and team management abilities.

Business Behaviours

• Excellent customer service and interpersonal skills.

• Proven initiative, good judgement and confidence.

• Proven compliance with audit and regulatory requirements.

• Ability to meet deadlines without close supervision.

• Total commitment to quality and attention to detail.

Interested candidates should send a recent CV, copies of all academic transcripts, certificates and testimonials, daytime telephone

contact, postal and email address and three competent referees not later than Tuesday, 22nd April, 2025 by 5:00pm to:

Chief Human Resources Officer

Housing Finance Bank,

Investment House

4 Wampewo Avenue, Kololo

Please take note that all applications should be sent by email to

Recruitment@housingfinance.co.ug

DO NOT HAND DELIVER YOUR APPLICATION

Please take note that ONLY shortlisted candidates will be contacted, and any form of canvassing will lead to automatic disqualification.

Guidelines for submitting Documents.

1. Ensure that all your documents are scanned and submitted in 1 single batch using the following order:

• Application letter

• Curriculum Vitae (CV)

• Academic Documents and Certificates

2. The maximum document size is 10 MBs.

3. Please indicate the name of the position you are applying for in the subject