Cybersecurity Specialist, Uganda Data-Activated Architecture for Resilient Transition (DART)

About Palladium:

Operating in over 50 countries, Palladium is a global consulting and implementation company working in partnership with governments, businesses, investors, and communities to design and deliver solutions that create lasting positive impact. We address some of the world’s most complex challenges across infrastructure, economic growth and natural capital, health, energy, climate and environment, and digital transformation—strengthening systems, institutions, and markets to support inclusive and sustainable development. Our more than 2,100 staff worldwide work as trusted advisors across diverse contexts, combining deep technical expertise, implementation techniques, and innovative technology to deliver locally informed, client-focused solutions that help organizations achieve measurable, sustainable impact.

Palladium is part of GISI’s global family of companies, which aims to create solutions for the world’s most complex challenges. With annual revenues of $14 billion, GISI’s approximately 15,000 employees are engaged in projects across 100 countries worldwide providing construction, program/project management, and engineering consulting services.

Project Background:

Data-Activated Architecture for Resilient Transition (DART) supports the Ministry of Health (MOH) to strengthen and scale interoperable, fit-for-purpose digital health systems. The project supports facility digitization and EMR readiness; National Data Warehouse (NDWH) stabilization; data-center design and cybersecurity; Health Information Exchange (HIE) operations and priority integrations; workforce certification; survey modernization; responsible AI adoption; and service-delivery data reporting performance. The project is designed to build on MOH-owned systems, repositories, standards, and governance structures, with progressive transfer of capability to government and Ugandan institutions. Project period is anticipated 2026–2030, beginning with a six-month foundation phase.

Note: All positions are subject to award, final organizational design, and Palladium hiring procedures. Reporting lines may be adjusted during mobilization. “MOH” includes the responsible Directorate/Department of Health Informatics (DHI) and other government units as applicable.

Position Summary:

The Cybersecurity Specialist leads technical activities to identify, remediate, and monitor cybersecurity risks across DART-supported national digital health systems, infrastructure, interfaces, and endpoints. The position supports MOH to establish durable security operations practices aligned with Uganda’s data protection requirements, national guidance, and recognized cybersecurity frameworks.

Location:

This role and project will be based out of Kampala, Uganda with national and regional travel as required. Candidates must have current work authorization in Uganda as visa sponsorship cannot be considered.

Reporting and Supervision:

• This role will report to the Infrastructure & Disaster Recovery Lead, DART

Primary Responsibilities:

• Conduct or coordinate cybersecurity risk assessments, vulnerability assessments, penetration testing, remediation planning, retesting, and closure tracking for priority systems
• Support deployment, configuration, and validation of endpoint detection and response, network access control, identity and access controls, logging, and monitoring tools as approved
• Establish security procedures for privileged access, system accounts, secrets management, patching, vulnerability remediation, incident classification, and escalation
• Support secure design and operation of HIE, APIs, integration pipelines, MOH repositories, data warehouses, and facility endpoints
• Develop security runbooks, incident-response procedures, security awareness materials, and evidence packs for MOH review and milestone verification
• Work with MOH counterparts to establish practical security operations routines, including asset inventories, log review, access reviews, and post-incident lessons learned
• Ensure cybersecurity activities align with the Uganda Data Protection and Privacy Act, MOH policy, and applicable USG and Palladium requirements

Qualifications and Experience:

• Bachelor’s degree in cybersecurity, information technology, computer science, or related field
• At least 5 years of experience in cybersecurity, systems security, security operations, or network security
• Experience with vulnerability management, penetration testing coordination, EDR, NAC, SIEM/logging, IAM, endpoint security, and incident response
• Relevant professional certifications such as Security+, CEH, CISSP, CISM, ISO 27001, or equivalent are preferred
• Experience securing health information systems, government environments, APIs, or data centers is highly desirable
• Strong analytical, communication, and documentation skills

Applications will be accepted on a rolling basis. We encourage you to apply early as the position may close once a suitable candidate is found. Please note that only shortlisted candidates will be contacted.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, or status as a protected veteran.

Should you require any adjustments or accommodations to be made due to a disability or you are a neurodivergent individual, or for any other circumstance, please email our team at accessibility@thepalladiumgroup.com and we will be in touch to discuss.

Safeguarding - We define Safeguarding as “the preventative action taken by Palladium to protect our people, clients and the communities we work with from harm”. We are committed to ensuring that all children and adults who come into contact with Palladium are treated with respect and are free from abuse. All successful candidates will be subject to an enhanced selection process including safeguarding-focused interviews and a rigorous due diligence process.