IT RISK OFFICER

JOB OPPORTUNITY

Yako Bank Uganda Limited is a Tier II credit institution licensed by the Bank of Uganda. Originally established as Yako Microfinance Uganda Ltd in 2010, the institution began deposit-taking operations in 2015 before becoming Yako Bank in 2020. The Bank currently operates four branches in Kampala and Jinja, serving SMEs, salaried employees, micro-entrepreneurs and smallholder farmers.

IT Risk Officer

The IT Risk Officer will report to the Risk Manager and will be based at the Bank’s Head Office.

Key Responsibilities:

• Identify, assess and monitor IT, cybersecurity and information security risks.
• Maintain and update the Bank’s IT risk register.
• Conduct IT risk and control assessments for systems, products and digital channels.
• Test IT controls covering access management, system changes, backups, patching and user access.
• Monitor cybersecurity risks, vulnerabilities and penetration-testing findings.
• Manage and report IT and cybersecurity incidents and support root-cause analysis.
• Review Business Continuity and Disaster Recovery plans and participate in recovery tests.
• Assess risks related to IT vendors, cloud services and outsourced providers.
• Ensure compliance with Bank of Uganda regulations and relevant Ugandan laws.
• Coordinate responses to internal audit, external audit and regulatory findings.
• Prepare IT risk reports for management and other stakeholders.
• Supervise junior risk staff and interns and support IT risk awareness activities.

Requirements:

• Bachelor’s degree in IT, Computer Science, Information Systems or a related field.
• Professional certifications such as CISA, CISSP, CEH or CCNA are an added advantage.
• 3–4 years of relevant experience in IT risk, IT audit, information security or IT operations, preferably including banking experience.
• Knowledge of IT risk and control frameworks.
• Understanding of core banking systems, networks, databases, cloud services and digital banking.
• Knowledge of Bank of Uganda ICT/cybersecurity requirements and relevant Ugandan laws.
• Experience in risk, business impact, control and vulnerability assessments.
• Strong analytical, problem-solving, communication and report-writing skills.
• Advanced Microsoft Excel skills are required; GRC or security-monitoring experience is an advantage.
• High integrity and ability to handle confidential information professionally.

Salary: Attractive salary and benefits package.

How to Apply: Send your application addressed to the Head of Human Resource, Yako Bank, together with your CV and copies of academic testimonials to hr@yakobank.com.

Your CV should include telephone numbers and email addresses for three referees, including your most recent employer.

Deadline: 10 October 2026.

Only shortlisted candidates will be contacted. Yako Bank does not make job offers online.