JOB DETAILS:
Job Purpose:
The Infrastructure Security Analyst is responsible for safeguarding the bank’s IT infrastructure, including servers, networks, storage, and cloud environments. The role ensures compliance with regulations, mitigates vulnerabilities, and supports the secure operation of banking services.

Key Responsibilities
1. Infrastructure Protection:
o Develop and maintain secure infrastructure designs aligned with security frameworks such as NIST, ISO 27001, or CIS Controls.
o Configure and manage firewalls, intrusion detection/prevention systems (IDS/IPS), and virtual private networks (VPNs).

o Ensure network segmentation to isolate critical systems and reduce attack surfaces.
2. Vulnerability Management:
o Conduct regular vulnerability assessments using tools like Nessus, Qualys, or OpenVAS.
o Ensure timely patching of operating systems, firmware, and software to address known vulnerabilities.

o Test patches in controlled environments before deployment to avoid operational disruptions.
3. Cloud Security:
o Implement security measures for cloud environments such as AWS, Azure, or Google Cloud Platform.
o Manage identity, access control, encryption, and logging in cloud platforms.

o Monitor cloud environments for misconfigurations, unauthorized access, and data breaches.
4. Incident Response:
o Investigate and respond to infrastructure-related security incidents, such as DDoS attacks or unauthorized access.
o Collaborate with incident response teams to remediate incidents and perform root cause analysis.
5. Endpoint Security:
o Deploy and manage endpoint security solutions such as antivirus, Endpoint Detection and Response (EDR), and Data Loss Prevention (DLP).
o Use Security Information and Event Management (SIEM) tools to monitor infrastructure logs for anomalies and potential breaches.
6. Compliance and Documentation:
o Ensure infrastructure security aligns with standards like PCI DSS, GDPR, and local banking regulations.

o Document compliance measures and provide evidence for audits.
7. Disaster Recovery and Resilience:
o Manage secure and encrypted backups of critical infrastructure data.
o Conduct regular disaster recovery drills to validate the effectiveness of plans.

Key Result Areas
• Proactively identify and resolve infrastructure vulnerabilities.
• Ensure compliance with security frameworks and regulatory requirements.
• Strengthen the bank’s IT infrastructure resilience against evolving threats.

Education and Training
• Bachelor’s Degree in IT, Cybersecurity, Network Engineering, or a related field.
• Certifications such as CompTIA Security+, CCNA/CCNP Security, or CISSP.
• Advanced certifications in Palo Alto Networks, Fortinet, or Check Point Security Appliances are advantageous.

Skills and Experience
1. Experience:
o 5–7 years in IT infrastructure, network security, or system administration roles.
2. Technical Skills:
o Expertise with firewalls, SIEM, IDS/IPS, and endpoint protection tools.
o Familiarity with cloud platforms and their security features.
3. Soft Skills:
o Problem-solving and analytical skills for identifying and mitigating vulnerabilities.
o Effective communication skills to explain technical issues to non-technical stakeholders.

• Submit your application to:
• For More Information:
• Toll-Free: 0800 211 082
• Phone: 0771 888 755
• Note: Housing Finance Bank is regulated by the Bank of Uganda. Customer deposits are protected up to UGX 10 million.