Manager Identity and Access Management
2025-04-14T11:38:49+00:00
Housing Finance Bank
https://www.greatugandajobs.com/jsjobsdata/data/employer/comp_962/logo/housing.jpg
https://www.www.housingfinance.co.ug/
FULL_TIME
Investment House 4 Wampewo Avenue, Kololo
Kololo
Kampala
00256
Uganda
Business Management and Administration
Management
2025-04-22T17:00:00+00:00
Uganda
8
Housing Finance Bank is a Commercial Bank and the leading provider of housing finance solutions with a vision to be the preferred
consumer and business bank with a focus on housing finance. To attain its strategic objectives efficiently and effectively, Housing
Job Purpose:
- The role is responsible for overseeing the bank’s Identity and Access Management program, ensuring that only authorized
individuals have appropriate access to systems, applications, and data. This involves designing, implementing, and maintaining
policies, tools, and processes to mitigate security risks, streamline access controls, and comply with banking regulations.
Key Result Areas:
1. Develop and maintain a strategic IAM framework aligned with the bank’s cybersecurity policies, business goals and regulatory
requirements.
2. Regularly review and update IAM policies to address emerging threats and compliance changes.
3. Define and implement Role-Based Access Control (RBAC) or Attribute-Based Access Control (ABAC) models.
4. Oversee the provisioning and de-provisioning of user accounts for employees, contractors, and third parties.
5. Collaborate with IT, HR, compliance, and business units to align IAM processes with organizational needs.
6. Manage and monitor privileged accounts to prevent misuse or unauthorized access.
7. Create and manage access certification processes, ensuring periodic reviews of user access rights.
8. Supervise access request workflows to ensure compliance with approval processes.
9. Implement and manage MFA solutions across the bank’s critical systems while ensuring MFA adoption for remote access,
privileged accounts, and high-risk applications.
10. Deploy and manage SSO systems to simplify user access while enhancing security.
11. Enforce strong password policies and implement password management tools.
12. Oversee the creation, modification, and deletion of user accounts as employees join, change roles, or leave the bank ensuring
timely removal of access for terminated employees or inactive accounts.
13. Maintain IAM processes to comply with standards such as ISO 27001, PCI DSS, GDPR, and local banking regulations while
ensuring timely implementation of audit recommendations related to IAM.
14. Perform regular risk assessments to identify vulnerabilities in the IAM framework and respond to and investigate access-related
security incidents, such as unauthorized access or account compromise.
15. Regularly review and update IAM policies, procedures, and workflows to improve efficiency and security.
16. Automate repetitive IAM tasks such as provisioning, de-provisioning, and access reviews to improve efficiency.
17. Define and monitor Key Performance Indicators (KPIs) for IAM processes, such as provisioning times, access review completion
rates, and incident resolution times and provide regular reports to key stakeholders.
Financial Responsibility:
1. Develop and manage the budget for IAM activities.
2. Justify investments in tools, training, and personnel for security initiatives.
3. Ensure that adequate resources are available to meet security objectives
Person Specifications
Education & Training:
1. Bachelor’s Degree in IT, Computer Science, Cybersecurity or Business Administration or any other related field with a focus on
Information Systems.
2. 5+ years of relevant IAM experience in information security, governance, compliance, or risk management.
3. Familiarity with frameworks like NIST CSF, ISO27001, COBIT, PCI DSS, or other industry standards.
4. Relevant certifications in information security, governance and compliance such as CISSP, CISA, CRISC, CISM, ISO 27001 are
highly desirable
Skills & Experience:
- Strong technical knowledge of IAM tools (e.g., Arcos, CyberArk), directory services (LDAP, Active Directory), and authentication
protocols (e.g. SAML, OAuth) and cloud IAM (AWS IAM, Azure AD).
- Strong analytical and problem-solving skills for risk assessment and mitigation.
- Excellent communication and stakeholder engagement skills.
- Strong leadership and team management abilities.
Business Behaviours
- Excellent customer service and interpersonal skills.
- Proven initiative, good judgement and confidence.
- Proven compliance with audit and regulatory requirements.
- Ability to meet deadlines without close supervision.
• Total commitment to quality and attention to detail
1. Develop and maintain a strategic IAM framework aligned with the bank’s cybersecurity policies, business goals and regulatory requirements. 2. Regularly review and update IAM policies to address emerging threats and compliance changes. 3. Define and implement Role-Based Access Control (RBAC) or Attribute-Based Access Control (ABAC) models. 4. Oversee the provisioning and de-provisioning of user accounts for employees, contractors, and third parties. 5. Collaborate with IT, HR, compliance, and business units to align IAM processes with organizational needs. 6. Manage and monitor privileged accounts to prevent misuse or unauthorized access. 7. Create and manage access certification processes, ensuring periodic reviews of user access rights. 8. Supervise access request workflows to ensure compliance with approval processes. 9. Implement and manage MFA solutions across the bank’s critical systems while ensuring MFA adoption for remote access, privileged accounts, and high-risk applications. 10. Deploy and manage SSO systems to simplify user access while enhancing security. 11. Enforce strong password policies and implement password management tools. 12. Oversee the creation, modification, and deletion of user accounts as employees join, change roles, or leave the bank ensuring timely removal of access for terminated employees or inactive accounts. 13. Maintain IAM processes to comply with standards such as ISO 27001, PCI DSS, GDPR, and local banking regulations while ensuring timely implementation of audit recommendations related to IAM. 14. Perform regular risk assessments to identify vulnerabilities in the IAM framework and respond to and investigate access-related security incidents, such as unauthorized access or account compromise. 15. Regularly review and update IAM policies, procedures, and workflows to improve efficiency and security. 16. Automate repetitive IAM tasks such as provisioning, de-provisioning, and access reviews to improve efficiency. 17. Define and monitor Key Performance Indicators (KPIs) for IAM processes, such as provisioning times, access review completion rates, and incident resolution times and provide regular reports to key stakeholders. Financial Responsibility: 1. Develop and manage the budget for IAM activities. 2. Justify investments in tools, training, and personnel for security initiatives. 3. Ensure that adequate resources are available to meet security objectives
Strong technical knowledge of IAM tools (e.g., Arcos, CyberArk), directory services (LDAP, Active Directory), and authentication protocols (e.g. SAML, OAuth) and cloud IAM (AWS IAM, Azure AD). Strong analytical and problem-solving skills for risk assessment and mitigation. Excellent communication and stakeholder engagement skills. Strong leadership and team management abilities. Business Behaviours Excellent customer service and interpersonal skills. Proven initiative, good judgement and confidence. Proven compliance with audit and regulatory requirements. Ability to meet deadlines without close supervision. • Total commitment to quality and attention to detail
. Bachelor’s Degree in IT, Computer Science, Cybersecurity or Business Administration or any other related field with a focus on Information Systems. 2. 5+ years of relevant IAM experience in information security, governance, compliance, or risk management. 3. Familiarity with frameworks like NIST CSF, ISO27001, COBIT, PCI DSS, or other industry standards. 4. Relevant certifications in information security, governance and compliance such as CISSP, CISA, CRISC, CISM, ISO 27001 are highly desirable
JOB-67fcf3c972f6e
Vacancy title:
Manager Identity and Access Management
[Type: FULL_TIME, Industry: Business Management and Administration, Category: Management]
Jobs at:
Housing Finance Bank
Deadline of this Job:
Tuesday, April 22 2025
Duty Station:
Investment House 4 Wampewo Avenue, Kololo | Kololo | Kampala | Uganda
Summary
Date Posted: Monday, April 14 2025, Base Salary: Not Disclosed
Similar Jobs in Uganda
Learn more about Housing Finance Bank
Housing Finance Bank jobs in Uganda
JOB DETAILS:
Housing Finance Bank is a Commercial Bank and the leading provider of housing finance solutions with a vision to be the preferred
consumer and business bank with a focus on housing finance. To attain its strategic objectives efficiently and effectively, Housing
Job Purpose:
- The role is responsible for overseeing the bank’s Identity and Access Management program, ensuring that only authorized
individuals have appropriate access to systems, applications, and data. This involves designing, implementing, and maintaining
policies, tools, and processes to mitigate security risks, streamline access controls, and comply with banking regulations.
Key Result Areas:
1. Develop and maintain a strategic IAM framework aligned with the bank’s cybersecurity policies, business goals and regulatory requirements.
2. Regularly review and update IAM policies to address emerging threats and compliance changes.
3. Define and implement Role-Based Access Control (RBAC) or Attribute-Based Access Control (ABAC) models.
4. Oversee the provisioning and de-provisioning of user accounts for employees, contractors, and third parties.
5. Collaborate with IT, HR, compliance, and business units to align IAM processes with organizational needs.
6. Manage and monitor privileged accounts to prevent misuse or unauthorized access.
7. Create and manage access certification processes, ensuring periodic reviews of user access rights.
8. Supervise access request workflows to ensure compliance with approval processes.
9. Implement and manage MFA solutions across the bank’s critical systems while ensuring MFA adoption for remote access,
privileged accounts, and high-risk applications.
10. Deploy and manage SSO systems to simplify user access while enhancing security.
11. Enforce strong password policies and implement password management tools.
12. Oversee the creation, modification, and deletion of user accounts as employees join, change roles, or leave the bank ensuring
timely removal of access for terminated employees or inactive accounts.
13. Maintain IAM processes to comply with standards such as ISO 27001, PCI DSS, GDPR, and local banking regulations while
ensuring timely implementation of audit recommendations related to IAM.
14. Perform regular risk assessments to identify vulnerabilities in the IAM framework and respond to and investigate access-related
security incidents, such as unauthorized access or account compromise.
15. Regularly review and update IAM policies, procedures, and workflows to improve efficiency and security.
16. Automate repetitive IAM tasks such as provisioning, de-provisioning, and access reviews to improve efficiency.
17. Define and monitor Key Performance Indicators (KPIs) for IAM processes, such as provisioning times, access review completion
rates, and incident resolution times and provide regular reports to key stakeholders.
Financial Responsibility:
1. Develop and manage the budget for IAM activities.
2. Justify investments in tools, training, and personnel for security initiatives.
3. Ensure that adequate resources are available to meet security objectives
Person Specifications
Education & Training:
1. Bachelor’s Degree in IT, Computer Science, Cybersecurity or Business Administration or any other related field with a focus on
Information Systems.
2. 5+ years of relevant IAM experience in information security, governance, compliance, or risk management.
3. Familiarity with frameworks like NIST CSF, ISO27001, COBIT, PCI DSS, or other industry standards.
4. Relevant certifications in information security, governance and compliance such as CISSP, CISA, CRISC, CISM, ISO 27001 are
highly desirable
Skills & Experience:
- Strong technical knowledge of IAM tools (e.g., Arcos, CyberArk), directory services (LDAP, Active Directory), and authentication
protocols (e.g. SAML, OAuth) and cloud IAM (AWS IAM, Azure AD).
- Strong analytical and problem-solving skills for risk assessment and mitigation.
- Excellent communication and stakeholder engagement skills.
- Strong leadership and team management abilities.
Business Behaviours
- Excellent customer service and interpersonal skills.
- Proven initiative, good judgement and confidence.
- Proven compliance with audit and regulatory requirements.
- Ability to meet deadlines without close supervision.
• Total commitment to quality and attention to detail
Work Hours: 8
Experience in Months: 60
Level of Education: bachelor degree
Job application procedure
Interested in applying for this job? Click here to submit your application now.
All Jobs | QUICK ALERT SUBSCRIPTION