Information & Cyber Security Officer : Education: Bachelor's Degree in Computer Science, Information Technology, Information Systems, Cybersecurity, or a related field.

Information & Cyber Security Officer

Organization: Urwego Bank PLC

Position: Information & Cyber Security Officer

Location: Kigali, Rwanda

Reports To: Chief Executive Officer (CEO) and IT Board Committee

Application Deadline: 3 July 2026, 5:00 PM

About Urwego Bank PLC

Our Mission

To provide a ladder of opportunity to underserved communities in Rwanda as we proclaim and live the Gospel of Jesus Christ.

Our Method

We share the hope of Christ while providing financial services and biblically based training that restore dignity and help break the cycle of poverty.

Our Motivation

The love of Jesus Christ inspires us to identify with those living in poverty and serve as His hands and feet while glorifying God through our work.

Position Summary

Urwego Bank PLC is seeking a highly motivated and experienced Information & Cyber Security Officer to lead the Bank’s information security and cybersecurity function.

The successful candidate will be responsible for developing, implementing, and overseeing cybersecurity strategies, policies, and controls that protect the Bank’s information systems, financial data, and digital infrastructure. The role will ensure compliance with regulatory requirements, industry standards, and cybersecurity best practices while supporting business continuity and operational resilience.

Key Responsibilities

Cybersecurity Strategy and Governance

- Develop and implement a comprehensive cybersecurity strategy aligned with the Bank’s objectives and regulatory requirements.

- Lead the execution and continuous improvement of the Bank’s cybersecurity program.

- Ensure cybersecurity initiatives support organizational goals and risk management objectives.

Cybersecurity Program Oversight

- Monitor and enforce compliance with cybersecurity policies, standards, and procedures.

- Recommend corrective actions to address identified security gaps and weaknesses.

- Ensure effective implementation of security controls across all departments.

Threat Management and Risk Assessment

- Establish and maintain threat modeling capabilities.

- Identify, assess, and mitigate cybersecurity threats and vulnerabilities.

- Conduct regular risk assessments and vulnerability reviews.

- Develop threat profiles and recommend appropriate mitigation measures.

Penetration Testing and Security Assessments

- Perform penetration testing and security assessments to identify system vulnerabilities.

- Conduct regular internal audits and compliance reviews.

- Support remediation efforts and follow-up activities.

Security Monitoring and Incident Detection

- Monitor systems for suspicious activities and unauthorized access attempts.

- Implement preventive and detective security measures.

- Maintain continuous security monitoring across critical systems and infrastructure.

Incident Response and Recovery

- Develop and maintain cybersecurity incident response plans.

- Coordinate investigation, containment, and recovery activities following security incidents.

- Support rapid restoration of services after cyber-attacks or security breaches.

Security Policies and Compliance

- Develop and maintain cybersecurity policies, standards, procedures, and guidelines.

- Ensure compliance with applicable laws, regulations, and industry standards.

- Strengthen data protection and information security controls.

Security Awareness and Training

- Design and deliver information security awareness programs.

- Train staff on cybersecurity best practices and organizational security policies.

- Promote a culture of cybersecurity awareness throughout the Bank.

Third-Party Security Management

- Assess and monitor the security posture of vendors, suppliers, and service providers.

- Ensure contracts include appropriate cybersecurity and data protection requirements.

- Monitor compliance of third parties with security obligations.

Reporting and Communication

- Prepare and present cybersecurity reports to the CEO and IT Board Committee.

- Communicate cybersecurity risks and recommendations to technical and non-technical stakeholders.

- Provide regular updates on security incidents, compliance, and risk management activities.

Qualifications and Experience

Education

- Bachelor's Degree in Computer Science, Information Technology, Information Systems, Cybersecurity, or a related field.

Professional Certifications

The following certifications are highly desirable:

- Certified Ethical Hacker (CEH)

- Certified Information Systems Security Professional (CISSP)

- Certified Information Security Manager (CISM)

- Certified Information Systems Auditor (CISA)

Experience

- Minimum of 2–3 years of professional experience in Information Security, Cybersecurity, IT Risk Management, IT Audit, or related fields.

- Experience in banking, financial services, telecommunications, or other regulated industries is preferred.

Required Skills and Competencies

- Strong understanding of information security frameworks, standards, and best practices.

- Knowledge of cybersecurity regulations, data protection, privacy requirements, and financial sector compliance obligations.

- Experience with network security technologies including firewalls, intrusion detection systems, and vulnerability assessment tools.

- Ability to conduct security audits, risk assessments, and vulnerability testing.

- Knowledge of IT infrastructure, architecture, software development, and operations.

- Excellent analytical, problem-solving, and decision-making skills.

- Strong communication, presentation, and interpersonal skills.

- Ability to work independently and meet deadlines.

- Proficiency in Microsoft Office and security management tools.

- Understanding of Christian organizational values and the financial sector is an added advantage.

Personal Attributes

- Strong Christian character and integrity.

- Passion for serving underserved communities in Rwanda.

- High ethical standards and commitment to confidentiality.

- Strong leadership and teamwork abilities.

- Commitment to continuous learning and professional development.

Application Procedure

Interested candidates who meet the above requirements are invited to submit the following documents as one PDF file:

- Application Letter explaining suitability for the position

- Updated Curriculum Vitae (CV)

- Notarized Copies of Academic Certificates

- Three Professional Referees (non-relatives) with full contact details

- Church Recommendation Letter

- Statement of Faith

- Copy of National ID

- Valid Criminal Record Certificate

Submission Details

Applications should be sent by email to:

urwegohr@urwegobank.com

Email Subject: Information & Cyber Security Officer

Deadline

Applications must be submitted no later than 3 July 2026 at 5:00 PM.

Important Notice

- Only shortlisted candidates will be contacted for tests and interviews.

- Urwego Bank PLC is committed to equal opportunity, integrity, and professional excellence.

Done at Kigali, 17 June 2026

Human Resources Department

Urwego Bank.

Always remember to share opportunities with others.