Senior Information Security Officer

Position: Senior Information Security Officer

Number of Posts: 01

Opening Date: March 6, 2026

Place of Work: Addis Ababa (Head Office)

About the Organization:

VisionFund Micro Finance Institution (S.C) is an Institution established according to Proclamation No. 40/96 which currently amended to 626/2009 to provide financial services to the productive poor in the rural and urban areas of Ethiopia. VisionFund is currently operating in five of the Regional States of the country. VisionFund MFI is currently looking for candidates for Senior Information Security Officer. The successful candidates will have skills and experience that meet the following requirements:

Major Responsibilities:

• Enforce the MFI’s Information Security policies, standards, and procedures in line with regulatory and international standards.
• Conduct regular risk assessments on the MFI’s Infrastructure and systems to identify, analyze, and mitigate security threats.
• Identifies methods to mitigate common security threats to network devices, hosts and applications.
• Ensure compliance with banking regulatory requirements (e.g., National Bank of Ethiopia directives, GDPR, AML/CFT, data protection laws).
• Be aware of the implications of legislated requirements that impact security for the Company.
• Support internal and external IT/security audits and manage remediation of findings.
• Monitor and manage security operations, including intrusion detection, firewalls, SIEM, and endpoint protection systems.
• Investigate and respond to security incidents, breaches, and fraud attempts.
• Coordinate with IT teams to ensure timely patch management and system hardening.
• Enforce least privilege and segregation of duties in system access controls.
• Ensure proper user access provisioning, monitoring, and periodic reviews.
• Conduct regular cybersecurity awareness programs for employees and contractors.
• Promote a culture of security and compliance within the bank.
• Carry out any other responsibilities as assigned by the immediate Supervisor

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field
• Professional Trainings on Cyber security areas
• Professional Certifications on one or more of the following areas will be an added advantage
• CISM (Certified Information Security Manager
• CISSP (Certified Information Systems Security Professional)
• CISA (Certified Information Systems Auditor)
• ISO/IEC 27001 Lead Implementer/Auditor
• Minimum 5 years of experience in information security, IT risk management, or IT audit, preferably in the banking or financial services sector.
• Hands-on experience with SIEM, firewalls, intrusion detection/prevention, encryption, DLP, IAM solutions.
• Strong knowledge of cybersecurity frameworks and banking regulatory requirements.
• Analytical, investigative, and problem-solving skills.
• Ability to design and enforce security architectures and controls.
• Strong communication and stakeholder management skills.
• High integrity and ethical standards.

Terms of Employment: Permanent

Salary: As per the Institution salary scale