❗ Notice:

La date limite de cette publication a été dépassée

Turame Community Finance s.a, is a Microfinance Institution approved by the Bank of the Republic of Burundi (BRB) by the approval act no. D1/073/2007, of 30 January 2007.

Our mission is “To invest in the dreams of families in Burundi’s underserved communities as we proclaim and live the Gospel.”

Turame Community Finance is working in different provinces of Burundi such as Gitega, Rumonge, Ngozi, Cibitoke, Kayanza, Muyinga….

We are seeking to fill the position of IT security officer

Job Summary

IT Security officer will provide support to the activities of the Turame Community Finance S.A. branches in areas related to IT, networks, maintenance, and communication according to Turame’s internal policies.

Location:	Bujumbura
Department:	IT/MIS
Supervisor:	MIS/IT Manager
Supervisee:	None
Type:	Full-time, local contract

RESPONSIBILITIES

To promote and fulfill the mission, method, and motivation of Turame Community Finance S.A.

I. Functional support

Provide ongoing training and support to users;
Maintain communication and information sharing with MIS/IT staff
Identify security gaps in the MIS or in the processing of information, propose appropriate solutions.

II. IT security task

Daily Tasks
Review Sophos Antivirus Alerts
- Review firewall and server logs (requires AlienVault or other SEIM)
- Monitor Backup Status
Weekly Security Checkup

Check servers and network equipment for available patches and schedule remediation.

Confirm RTO/RPO with product managers

For each system and program, you have, document the Recovery Time Objective (RTO) and the Recovery Point Objective (RPO) and confirm it with the primary users of that system.

RPO and RTO should be confirmed on a yearly basis.

Disaster Recovery Test

At least every 6 months a test restore needs to be done in order to validate backups are working properly. In the case that there is a full disaster recover site, a full cut-over should be tested at least annually.

Also, once per year a Disaster Recovery Table Top Exercise (TTX) should take place. This is not an actual restore or fail-over. It is talking through different disaster scenarios with IT and Business leaders gathered and talking through the actions needed and the roles everyone will play in the event of a disaster.

Firewall Test

Every 6 months:

Review Firewall Rules
Review VPN settings
Run a ShieldsUp (or something similar) scan to identify open ports
Shared users

Every user account that is shared by two or more people should be documented and reviewed every 6 months.

Documentation should include the following fields:

System, Username, Date Created, Owner (responsible party), Additional users, Notes, Approval Check by Director of IT, Date Reviewed.

File permissions

File permissions for any shared storage should be audited every 12 months. Using the principle of least privilege as a guide, system admins should ensure that the proper people have access to the proper information.

Weak passwords

Every 3 months run KnowBe4’s weak password test and force users to change weak passwords.

Security Awareness Training

Quarterly phishing tests should be performed on users in the organization. Additionally, monthly security reminders should go out to ensure users are up to date on latest tactics, threats, and remediations.

III. Participate as an active member of the Turame team.

Provide support to other team members as needed.
Participate in « Devotions » and encourage the spiritual growth of everyone.
Refer to spiritual integration programs for the promotion of Christian values within the team

IV. Perform all other duties as assigned by the MIS/IT Assistant to accomplish the mission of the institution.

SKILLS AND QUALIFICATIONS

Personal confession of Christian faith and commitment to the mission and vision of Turame Community Finance S.A.

Skills

Strong experience with networking/networking, server infrastructure and computer security.
Knowledge of managing loan tracking systems or a banking system with related software would be an asset
Knowledge of Azure cloud, would be an asset
Good communication and information sharing skills
Innovative thinking in using technology to solve business problems
Trustworthy, motivated, and flexible.

Qualifications