Other · Contract
Direct employerGraduate Trainee - Information Security
KampalaEntry level · Not statedCloses Sunday, 25 October 2026, 23:59 EATChecked 12 Oct 2026
Published by employer
About this role
Role overview
To support the implementation and continuous improvement of the organization's information security programme by assisting with security operations, application security testing, vulnerability management, IT controls validation, risk assessments, compliance activities, and staff security awareness. The role provides practical experience in protecting the confidentiality, integrity, and availability of the organization's information assets, digital financial services, and technology infrastructure.
Security Operations and Monitoring
- Assist in monitoring security alerts from SIEM, endpoint detection and response (EDR), firewalls, and other security tools.
- Support the investigation, documentation, escalation, and tracking of security incidents.
- Review security logs and assist in identifying suspicious activities and potential threats.
- Support incident response exercises and follow-up on remediation actions.
Read full role
Application Security and Vulnerability Management
- Assist in conducting Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA) and Interactive Application Security Testing (IAST).
- Support vulnerability assessments and authorized penetration testing of web applications, APIs, mobile applications, and supporting infrastructure.
- Document identified vulnerabilities, assess their severity, and track remediation with development and IT teams.
- Assist in validating security fixes and conducting regression security testing.
- Support secure coding reviews and the application of OWASP security guidelines.
Governance, Risk and Compliance (GRC)
- Assist in conducting information security risk assessments and third-party security due diligence.
- Support IT controls validation, audit evidence collection, and compliance reviews.
- Assist in maintaining IT risk registers, vulnerability trackers, audit findings, and remediation plans.
- Assist in reviewing information security policies, procedures, standards, and control documentation.
- Support compliance with applicable data protection, cybersecurity, and financial-sector regulatory requirements.
Security Awareness and Data Protection
- Support the development and delivery of staff security awareness initiatives.
- Assist in phishing simulation exercises and track staff participation and reporting rates.
- Promote secure handling, classification, storage, transmission, and disposal of sensitive information.
- Support privacy and data protection assessments.
Security Testing and Quality Assurance
- Assist in security testing of new systems, application releases, APIs, and technology changes.
- Document functional security defects and communicate findings to relevant technical teams.
- Support user acceptance testing (UAT) and release security readiness assessments.
- Track defects and verify that agreed security requirements have been implemented.
Documentation and Reporting
- Prepare periodic security activity reports, dashboards, and management summaries.
- Maintain accurate records of security incidents, assessments, vulnerabilities, and remediation activities.
- Assist in preparing evidence for internal audits, external audits, and regulatory reviews.
- Research emerging cybersecurity threats, vulnerabilities, and recommended security controls.
Minimum Qualifications
- Bachelor's degree in Computer Science, Information Technology, Information Systems, Cybersecurity, Software Engineering, or related discipline.
- Recent graduate or candidate with limited professional experience seeking practical information security exposure.
- Relevant cybersecurity certifications or training will be an added advantage.
Technical Skills and “Nice-to-Haves”
- Basic understanding of information security principles, networking, operating systems, and common cybersecurity threats.
- Familiarity with the OWASP Top 10 and web application security concepts.
- Basic knowledge of DevSecOps and security testing tools such as, Burp Suite, Black Duck, Corgea, Frida, MobSF, Snyk or equivalent.
- Familiarity with SIEM, EDR, NDR, SOAR and SOC concepts.
- Familiarity with QA tools such as Postman, Jmeter, Locust, Selenium, etc.
- Basic scripting or programming knowledge in Python, PowerShell, Bash, or a similar language is an advantage.
Interested candidates should submit their resume and a cover letter outlining their qualifications and why they are the most suitable candidate for this role at ABC. Please send your application to the employer’s official contact . Please include "Internal Auditor" in the email subject line. The application deadline is 25th October 2026.