Overview

The Cybersecurity Manager at the organisation is responsible for protecting our digital assets and sensitive information from cyber threats. This role involves developing and implementing security policies, conducting risk assessments, and training staff on best practices to ensure a safe online environment for our nonprofit operations in Uganda and beyond. You'll play a crucial part in safeguarding our mission and maintaining the trust of our donors and community supporters.

Responsibilities

• Develop and implement cybersecurity policies and procedures to protect organizational data.
• Conduct regular risk assessments to identify vulnerabilities and recommend improvements.
• Monitor network traffic for unusual activity and respond to security incidents promptly.
• Train staff on cybersecurity best practices and promote a culture of security awareness.
• Collaborate with IT teams to ensure secure system configurations and software updates.
• Maintain documentation of security incidents and responses for compliance and reporting.
• Stay updated on the latest cybersecurity trends, threats, and technology solutions.
• Coordinate with external partners and stakeholders to enhance cybersecurity measures.

Interview questions to ask

1. Can you describe a time when you identified a significant security vulnerability in your organization? What steps did you take to address it, and what was the outcome?
2. In the context of a nonprofit organization, how would you prioritize cybersecurity initiatives? What factors would influence your decisions?
3. Imagine you discover a data breach that may have exposed sensitive information. How would you handle the situation, and what processes would you implement to mitigate the impact?
4. Describe your experience with compliance frameworks (such as GDPR or CCPA). How would you ensure that the organisation adheres to relevant regulations in Uganda?
5. Can you share an example of how you've successfully trained non-technical staff on cybersecurity best practices? What strategies did you find most effective?
6. How do you stay updated with the latest cybersecurity threats and trends? Can you provide an example of how you've applied this knowledge in your previous roles?
7. The organisation values collaboration and community engagement. How would you foster a culture of cybersecurity awareness among volunteers and community supporters?
8. Describe a challenging cybersecurity project you've managed. What obstacles did you face, and how did you overcome them?
9. In your opinion, what are the key differences between cybersecurity in the nonprofit sector compared to the private sector? How would you adapt your strategies accordingly?
10. How would you assess the cybersecurity maturity of the organisation? What initial steps would you recommend to strengthen our security posture?
11. Can you discuss a time when you had to advocate for cybersecurity resources or budget within your organization? How did you make your case?
12. What motivates you to work in the nonprofit sector, particularly in a role focused on cybersecurity? How do you see this aligning with the organisation’s mission?