Turame Community Finance s.a, is a Microfinance Institution approved by the Bank of the Republic of Burundi (BRB) by the approval act no. D1/073/2007, of 30 January 2007.

Our mission is “To invest in the dreams of families in Burundi’s underserved communities as we proclaim and live the Gospel.”

Turame Community Finance is working in different provinces of Burundi such as Gitega, Rumonge, Ngozi, Cibitoke, Kayanza, Muyinga….

We are seeking to fill the position of IT security officer

Job Summary

IT Security officer will provide support to the activities of the Turame Community Finance S.A. branches in areas related to IT, networks, maintenance, and communication according to Turame’s internal policies.

RESPONSIBILITIES

To promote and fulfill the mission, method, and motivation of Turame Community Finance S.A.

I. Functional support

• Provide ongoing training and support to users;
• Maintain communication and information sharing with MIS/IT staff
• Identify security gaps in the MIS or in the processing of information, propose appropriate solutions.

II. IT security task

• Daily Tasks

  Review Sophos Antivirus Alerts

  • Review firewall and server logs (requires AlienVault or other SEIM)
  • Monitor Backup Status
• Weekly Security Checkup

Check servers and network equipment for available patches and schedule remediation.

• Confirm RTO/RPO with product managers

For each system and program, you have, document the Recovery Time Objective (RTO) and the Recovery Point Objective (RPO) and confirm it with the primary users of that system.

RPO and RTO should be confirmed on a yearly basis.

• Disaster Recovery Test

At least every 6 months a test restore needs to be done in order to validate backups are working properly.  In the case that there is a full disaster recover site, a full cut-over should be tested at least annually.

Also, once per year a Disaster Recovery Table Top Exercise (TTX) should take place.  This is not an actual restore or fail-over.  It is talking through different disaster scenarios with IT and Business leaders gathered and talking through the actions needed and the roles everyone will play in the event of a disaster.

• Firewall Test

Every 6 months:

• Review Firewall Rules
• Review VPN settings
• Run a ShieldsUp (or something similar) scan to identify open ports
• Shared users

Every user account that is shared by two or more people should be documented and reviewed every 6 months.

• File permissions

File permissions for any shared storage should be audited every 12 months.  Using the principle of least privilege as a guide, system admins should ensure that the proper people have access to the proper information.

• Weak passwords

Every 3 months run KnowBe4’s weak password test and force users to change weak passwords.

• Security Awareness Training

Quarterly phishing tests should be performed on users in the organization.  Additionally, monthly security reminders should go out to ensure users are up to date on latest tactics, threats, and remediations.

III. Participate as an active member of the Turame team.

• Provide support to other team members as needed.
• Participate in « Devotions » and encourage the spiritual growth of everyone.
• Refer to spiritual integration programs for the promotion of Christian values within the team

 IV. Perform all other duties as assigned by the MIS/IT Assistant to accomplish the mission of the institution.

SKILLS AND QUALIFICATIONS

Personal confession of Christian faith and commitment to the mission and vision of Turame Community Finance S.A.

Skills

• Strong experience with networking/networking, server infrastructure and computer security.
• Knowledge of managing loan tracking systems or a banking system with related software would be an asset
• Knowledge of Azure cloud, would be an asset
• Good communication and information sharing skills
• Innovative thinking in using technology to solve business problems
• Trustworthy, motivated, and flexible.

Qualifications

• Fully committed to Turame’s mission, method, and motivation
• Bachelor’s degree in Computer Science
• At least one year of experience in core banking IT systems
• Professional proficiency in English and French is a must.

How to apply

Application should include motivation letter, updated curriculum vitae, copies of diploma/certificate or anything that can confirm your competencies.

Physical application files can be sent to the following address:

The Human Resources and Administration Director

Turame Community Finance S.A.

P.O. Box 2893 ; 33, Avenue de la Révolution

Telephone: +257 22 256 736

Bujumbura-Burundi.

OR

Send electronic application documents by e-mail to:  recruitment@turame.com

CLOSING DATE: Tuesday, September 27^th, 2022, at 23h59