EXTERNAL JOB ADVERT: IT SECURITY OFFICER
Job Summary
IT Security officer will provide support to the activities of the Turame Community Finance S.A. branches in areas related to IT, networks, maintenance, and communication according to Turame’s internal policies.
| Location: | Bujumbura |
| Level: | Agent |
| Department: | IT/MIS |
| Supervisor: | MIS/IT Manager |
| Supervisee: | None |
| Type: | Full-time, local contract |
RESPONSIBILITIES
To promote and fulfill the mission, method, and motivation of Turame Community Finance S.A.
- Functional support
- Provide ongoing training and support to users,
- Maintain communication and information sharing with MIS/IT staff,
- Identify security gaps in the MIS or in the processing of information, propose appropriate solutions.
- IT security task
- Daily Tasks
- Review Sophos Antivirus Alerts
- Review firewall and server logs (requires AlienVault or other SEIM),
- Monitor Backup Status.
- Weekly Security Checkup
Check servers and network equipment for available patches and schedule remediation.
Confirm RTO/RPO with product managers
For each system and program, you have, document the Recovery Time Objective (RTO) and the Recovery Point Objective (RPO) and confirm it with the primary users of that system,
RPO and RTO should be confirmed on a yearly basis.
At least every 6 months a test restore needs to be done in order to validate backups are working properly. In the case that there is a full disaster recover site, a full cut-over should be tested at least annually,
Also, once per year a Disaster Recovery Tabletop Exercise (TTX) should take place. This is not an actual restore or fail-over. It is talking through different disaster scenarios with IT and Business leaders gathered together and talking through the actions needed and the roles everyone will play in the event of a disaster.
Every 6 months:
- Review Firewall Rules,
- Review VPN settings,
- Run a ShieldsUp (or something similar) scan to identify open ports.
- Shared users and administrator users
Every user account that is shared by two or more people should be documented and reviewed every 6 months,
Documentation should include the following fields:
System, Username, Date Created, Owner (responsible party), Additional users, Notes, Approval Check by Director of IT, Date Reviewed,
Check and document all administrator user compliance with security measures.
File permissions for any shared storage should be audited every 12 months. Using the principle of least privilege as a guide, system admins should ensure that the proper people have access to the proper information.
Security Awareness Training
Quarterly phishing tests should be performed on users in the organization. Additionally, monthly security reminders should go out to ensure users are up to date on latest tactics, threats, and remediations.
- Participate as an active member of the Turame team.
- Provide support to other team members as needed,
- Participate in « Devotions » and encourage the spiritual growth of each individual,
- Refer to spiritual integration programs for the promotion of Christian values within the team.
- Perform all other duties as assigned by the MIS/IT Assistant to accomplish the mission of the institution.
SKILLS AND QUALIFICATIONS
Personal confession of Christian faith and commitment to the mission and vision of Turame Community Finance S.A.
Skills
- Strong experience with networking/networking, server infrastructure, and computer security,
- Knowledge of managing loan tracking systems or a banking system with related software would be an asset,
- Knowledge of Azure cloud, would be an asset,
- Good communication and information-sharing skills,
- Innovative thinking in using technology to solve business problems,
- Trustworthy, motivated, and flexible.
Qualifications
- Fully committed to Turame’s mission, method, and motivation,
- last bachelor’s degree in computer science, IT security, or equivalent,
- At least one year of experience in core banking IT systems,
- Professional proficiency in English and French is a must.
How to apply
Application should include motivation letter, updated curriculum vitae, copies of diploma/certificate or anything that can confirm your competencies.
Physical application files can be sent to the following address:
The Human Resources and Admin Director
Turame Community Finance S.A.
P.O. Box 2893 ; 33, Avenue de la Révolution
Telephone: +257 22 256 736
Bujumbura-Burundi.
OR Send electronic application documents by e-mail to: recruitment@turame.com
CLOSING DATE: Friday, August 2nd, 2024, at 23h59
