Pearl Bank has confirmed Steven Mwesige as Chief Information Security Officer (CISO)after a year in an acting capacity, giving him oversight of cybersecurity, data protection and security governance.
Mwesige’s confirmation took effect in July 2026. He brings more than 15 years of experience across information technology, cybersecurity and enterprise risk management, including several years building the bank’s security function.
According to Pearl Bank, Mwesige led the transformation of its cybersecurity function after rejoining the institution in 2020. His achievements include leading the bank to attain ISO/IEC 27001:2022 and PCI DSS certifications, internationally recognised standards covering information security management and payment card security.
In the confirmed role, his remit spans cybersecurity strategy, cyber risk management, enterprise risk governance, regulatory compliance and security operations. It also includes responsible artificial intelligence governance, linking the protection of the bank’s existing systems with oversight of how emerging technologies are used.
His appointment follows successive leadership roles within the bank. He served as Manager, ICT Security and Data Protection from September 2020 to February 2024, then as Head of ICT Security and Governance from March 2024 to June 2025. He became Acting Chief Information Security Officer in July 2025.
Mwesige had previously worked at the bank as an ICT Security Officer between 2018 and 2019. Before returning in 2020, he served as an ICT Risk Officer at Bank of Africa Uganda.
His wider experience includes work as an ICT Solutions Architect and Lead Penetration Tester at Summit Consulting, a manager and senior trainer at the Institute of Forensics and ICT Security, and a systems administrator at the Anti-Corruption Coalition Uganda. These roles span technical implementation, security testing, training and risk oversight.
Mwesige holds an Executive MBA in Artificial Intelligence and Blockchain, earned with distinction from Guglielmo Marconi University in Italy, and a Bachelor of Science in Information Technology from Uganda Christian University.
His professional credentials include DCRO Institute certificates in Risk Governance and Cyber Risk Governance, ISO/IEC 27001 Lead Implementer and Certified Ethical Hacker. He has also completed Harvard University’s executive programme in Managing Risk in the Information Age and participated in the Journey to the Boardroom leadership programme.
Beyond the bank’s security function, Mwesige serves as Governor of the Uganda Chapter of the Global Council for Responsible AI and Board Chairperson of the Pearl Bank Staff SACCO. He also mentors young technology professionals, reflecting an interest in developing the local talent needed to support Uganda’s growing technology sector.
