Makune Sandra
@makunesandra
I build security controls, reduce cyber risk, and strengthen governance across complex organizations.
UgandaWhat I'm looking for
I'm an Information Security Specialist currently building enterprise-wide security controls at the United Nations Regional Service Centre Entebbe. I've improved audit readiness by 40% and coordinated vulnerability remediation across 16 UN missions, reducing critical vulnerabilities by more than 60% in my first year.
My work spans IT risk, governance, incident response, IAM, business continuity, and security awareness. Across banking and IT operations roles, I've translated technical risk into practical controls, policies, and resilient services aligned with business objectives.
Experience
Work history, roles, and key accomplishments
ICT Security Specialist
United Nations Regional Service Centre Entebbe
Jan 2022 - Present (4 years 8 months)
Developed and implemented enterprise-wide security controls, aligning processes with ISO 27001, NIST, and regulatory requirements, improving audit readiness by 40%. Drove vulnerability management lifecycle, reducing critical vulnerabilities by over 60% within the first year.
Assistant Manager IT Security
Diamond Trust Bank
Jan 2021 - Dec 2021 (11 months)
Managed security operations and governance tasks including policy creation, control monitoring, and security reporting to senior management. Coordinated third-party risk assessments and vendor due diligence, ensuring alignment with internal security requirements and external regulations.
IT Risk Officer
I&M Bank Uganda
Aug 2020 - Jan 2021 (5 months)
Conducted enterprise and IT risk assessments, identifying critical risks and tracking mitigation efforts across strategic business units. Developed and maintained IT risk registers, improving transparency and risk ownership across technology teams.
IT Officer
Entrepreneur's Financial Centre
Sep 2015 - Jul 2020 (4 years 10 months)
Delivered core IT operations support including network configuration, endpoint management, and system administration. Resolved service requests, incidents, and user escalations while maintaining strong SLA performance and user satisfaction.
Education
Degrees, certifications, and relevant coursework
PECB
ISO/IEC 27001 Lead Implementer, Information Security
ISO/IEC 27001 Lead Implementer certification from PECB, completed in March 2026.
Axelos
Prince2 7 Foundation, Project Management
Prince2 7 Foundation certification from Axelos, completed in December 2025.
ISACA
Certified in Risk and Information Systems Control (CRISC), Risk and Information Systems Control
Certified in Risk and Information Systems Control (CRISC) from ISACA, completed in June 2025.
WINS Academy
Certified Nuclear Security Specialised Professional (CNSSP), Nuclear Security
Certified Nuclear Security Specialised Professional (CNSSP) from WINS Academy, completed in July 2023.
CSA
Certificate of Cloud Security Knowledge (CCSK), Cloud Security
Certificate of Cloud Security Knowledge (CCSK) from CSA, completed in January 2023.
Axelos
ITIL V4, IT Service Management
ITIL V4 certification from Axelos, completed in May 2022.
ISACA
Certified Information Systems Auditor (CISA), Information Systems Auditing
Certified Information Systems Auditor (CISA) from ISACA, completed in April 2019.
CompTIA
CompTIA Security+, Cybersecurity
CompTIA Security+ certification from CompTIA, completed in December 2017.
Makerere University
Bachelor of Science, Information Technology
2011 - 2015
Bachelor of Science in Information Technology from Makerere University, completed from 2011 to 2015.
Tech stack
Software and tools used professionally
Availability
Location
UgandaAuthorized to work in
Job categories
Skills
Interested in hiring Makune?
You can contact Makune and 90k+ other talented remote workers on Himalayas.
Message MakuneGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
