Senior IT Governance and Security Officer (Re-Advertised)

Nisir Microfinance Institution S.C is a leading microfinance institution in Ethiopia dedicated to providing trusted, need-based financial solutions to customers. Guided by our vision to be a beacon of swift and seamless financial solutions for underserved individuals and SMEs, we leverage intelligent systems and a people-centered approach to create sustainable value for our customers and stakeholders. To support our continued growth, strengthen our organizational capabilities, and expand our impact across Ethiopia, we are seeking qualified, motivated, and results-oriented professionals to join our team in the following positions.

1. Senior IT Governance and Security Officer (Re-Advertised)

Purpose of the Job:

To protect Nisir’s computing infrastructure from all forms of security breaches by designing systems and enforcing policies and procedures.

Main Duties and Responsibilities:

• Develop and maintain IT governance policies and procedures, ensuring compliance with industry standards and regulations.
• Identify and mitigate potential IT infrastructure risks.
• Monitor and troubleshoot IT infrastructure issues, ensuring optimal performance and availability.
• Maintain Nisir’s Security Policies including risk analysis and management, documentation management controls, information access controls and sanctions for failure to comply.
• Assign security responsibilities, control access to media and the controls in place against unauthorized access to workstations and related equipment.
• Set the access and authorization controls for everyday operations as well as emergency procedures for data.
• Set the standards for access controls, audit trails event reporting, encryption and integrity controls.
• Maintain Nisir’s Security Procedures including evaluation and compliance with security measures, disaster recovery and emergency operating procedures.
• Follow up security incident response and process protocols including incident reporting and sanctions.
• Conduct functionality and gap analyses to determine the extent to which key business areas and infrastructure comply with statutory and regulatory requirements.
• Evaluate and recommend new information security technologies and counter-measures against threats to information or privacy.
• Ensure compliance through adequate training programs and periodic security audits.
• Communicates risks and recommendations to mitigate risks to the senior management.
• Oversees all ongoing activities related to the development, implementation, and maintenance of the company’s information security policies and procedures.
• Identifying vulnerabilities in the current network.
• Develop and implement a comprehensive plan to secure company’s computing network.
• Monitor network usage to ensure compliance with security policies.
• Keep up to date with developments in IT security standards and threats.
• Perform penetration tests to find any flaws.
• Collaborate with management and the IT department to improve security.
• Documenting any security breaches and assessing their damage.
• Educate staff about security software and best practices for information security.

Qualification and Experience:

• BSC degree in Computer Science/Information Systems/ Computer Engineering or related field.
• Four (4)-years relevant experience.
• Number Required: One
• Place of Work: Head Office
• Salary: As per the company scale (Attractive).