Job Title: Cyber Security Analyst
Organisation: Joint Clinical Research Centre (JCRC)
Duty Station: Kampala, Uganda
Reports to: Head ICT
About US:
The Joint Clinical Research Centre (JCRC) is an indigenous medical organization that was established in 1991 as a limited liability not-for-profit Joint-venture between the Uganda Ministry of Health (MoH), Ministry of Defense and Makerere University Medical School (now Makerere College of Health Sciences).
Job Summary: The Cyber Security Analyst (CSA) is responsible for assisting with the day-to-day operations of securing the firm’s various information systems. Reporting to the Head ICT, the CSA is tasked with providing technical expertise in all areas of network, system, and application security. The CSA works closely with the various teams in the Information Technology Department to ensure that systems and networks are always designed, developed, deployed, and managed with an emphasis on strong, effective security and risk management controls. He/she will oversee software development and ensure that the networks are safe from external threats like hackers or crackers who want access for malicious purposes.
The CSA leads the organization’s cyber risk and vulnerability management program, manages the annual cyber security assessments, incident response and penetration tests, researches and reports on emerging threats, to help JCRC take pre-emptive risk mitigation steps. The CSA effectively correlates and analyzes security events within the context of JCRC’s unique environment to proactively prevent, detect threats and mitigate attacks before they occur.
Key Duties and Responsibilities:
- Proactively monitor the environment to detect and implement steps to mitigate cyber-attacks before they occur.
- Conduct periodic vulnerability assessment and penetration testing of the IT environment and coordinate mitigation implementation
- Provides technical expertise regarding security-related concepts to operational teams within the Information Technology Department and the business.
- Review, investigate, and respond to real-time incidents and alerts within the environment.
- Daily Security Incident and Event Management for the IT Environment
- Monitor online security-related resources for new and emerging cyber threats.
- Assesses new security technologies to determine potential value for the enterprise.
Qualifications, Skills and Experience:
- The applicant must hold a degree in Information Security, Information Technology, Information systems or any related course.
- Three years of experience in a security analyst or related position.
- Technical knowledge of enterprise-class technologies such as firewalls, routers, switches, wireless access points, VPNs, and desktop and server operating systems.
- Strong writing skills, as well as the ability to articulate security-related concepts to a broad range of technical and non-technical staff.
- Experience with managing and securing both on-premises and hosted systems and applications.
- Hands-on experience analyzing high volumes of logs, network data and other attack artifacts
- Experience with application and database security.
- Ability to conduct vulnerability assessment and penetration testing skills
- Be a proficient problem-solver that is able to work autonomously.
- Desired Certifications; One or more of the following certifications: CEH, CISM, CISA, CompTIA Security+, CISSP, GSEC
How to Apply:
All applications must be addressed to: Manager Human Resource & Development at Joint Clinical Research Centre, Plot 101 Lubowa Campus off Entebbe Road, P.O Box 10005, Kampala-Uganda and send to jobs@jcrc.org.ug Strictly two documents combined in one PDF are required (Application letter and CV not exceeding 6 pages).
Note: JCRC is an equal opportunity employer. Any attempts of influencing the recruitment process will lead to automatic disqualification.
Deadline: 7th July 2023 at 05:00Pm