Job title: Information Security  Analyst

Work Location: Hariss International Limited – Kampala, Uganda

Division / Department: IT Department

Reports to: Cyber Security Lead

Job Purpose:

Responsible for protecting the organization’s computer networks, systems and data from cyber threats, unauthorized access and breaches. Act as the “digital security guard,” constantly monitoring infrastructure, access, applications, events and implementing safeguards to maintain the confidentiality, integrity and availability of sensitive information.

Key Responsibilities:

Continuous Monitoring and Incident Detection: 

• Monitor network traffic 24/7 for suspicious activity using Security Information and Event Management (SIEM) and Endpoint Detection and Response (EDR) (e.g. Darktrace) tools.

Incident Response: 

• Act as a first responder to security breaches by investigating alerts, containing threats and working to restore systems to normal operation.

Vulnerability Assessments: 

• Regularly scan for system weaknesses and perform penetration testing (simulated attacks) to identify and patch security gaps before they are exploited.

Security Tool Maintenance: 

• Install, configure and update essential defense software, antivirus programs, and data encryption tools.

Policy Development and Enforcement: 

• Ensure adherence to Information Security Policies (ISP), standards, best practices and to guide employee behavior to meet regulatory requirements.

Security Awareness Training: 

• Educate employees and users on how to recognize phishing attempts, malware infections, unauthorized access, use of strong passwords and to follow safe digital practices.
• Set-up regular training and awareness session with users and ensure documentary evidence of users attending training sessions.

Reporting and Compliance: 

• Prepare detailed reports on security metrics and incidents for the Cyber Security Lead and ensure the organization complies with legal and industry security standards.
• Maintain detailed documentation of security incidents, investigations, and resolutions.

Education and/or Work Experience Requirements: 

Education:

• Bachelor’s degree or diploma in Computer Science, IT, or related acceptable qualification.

Experience:

• Proven experience in cybersecurity operations, threat management or as a security analyst/engineer.

Technical Knowledge:

• Proficiency in network security, endpoint protection, and security tools (e.g., SIEM, Privileged Access Management (PAM).
• Knowledge of network security, cloud security, risk management and security infrastructure is essential.

Certifications:

Certifications such as, Certified Information Systems Security Professional (CISSP) or Global Information Assurance Certification (GIAC) is an advantage.

Key Requirements: 

Analytical Thinking: 

• Ability to study complex datasets and identify subtle patterns that indicate a threat.
• Ability to stay updated on the latest cyber threats and vulnerabilities by evaluating threat intelligence feeds and reports.
• Problem-solving, attention to detail and strong communication skills are critical for identifying and mitigating threats.
• Ability to identify AI risks that could pose a cyber security risk.

Effective Communication: 

• Translating highly technical security threats into understandable terms for non-technical stakeholders.

Detail-Oriented: 

• Vigilance in noticing minor system performance changes that could signal a breach.
• Operating Systems:
• Deep understanding of the various environments.

Network Security: 

• Proficiency in protocols (TCP/IP), DNS, VPNs, and proxies.

Scripting: 

• Ability to use languages like Python, PowerShell or Bash to automate repetitive security tasks and analyze log data.

Equal Employment Opportunity Policy

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, or disability status.

Hariss International is an equal opportunity employer Minorities/Females/People with Disabilities/Protected Veterans/Sexual Orientation/Gender Identity.

All Applications should be sent through careers@harissint.com

Deadline: 15th October 2026