1. Senior Information Security Officer.

Company Description Digaf Microcredit Provider S.C. is a micro-financing institution based in Addis Ababa, Ethiopia, focused on expanding access to financial services through innovative technology. The organization aims to provide inclusive and reliable financial solutions to individuals and small enterprises that may be underserved by traditional banking. By leveraging digital platforms, Digaf seeks to offer efficient, secure, and user-friendly financial services. Team members join a mission-driven environment that values integrity, customer-centric service, and sustainable growth in the financial sector. Role Description The Senior Information Security Officer is a full-time, on-site role based in Addis Ababa, Ethiopia. This role is responsible for designing, implementing, and overseeing the institution’s information security program, including policies, procedures, and controls that protect digital assets and customer data. Day-to-day activities include assessing security risks, monitoring systems for vulnerabilities and threats, coordinating incident response, and ensuring compliance with relevant data privacy and cybersecurity regulations. The Senior Information Security Officer will collaborate with IT, operations, and management to integrate security requirements into business processes, lead security awareness initiatives, and support business continuity planning. The role also involves preparing regular security reports, recommending improvements, and guiding the organization in maintaining a robust and resilient security posture. Qualifications Strong experience in Information Security Management and implementing an Information Security Management System (ISMS). Proficiency in Cybersecurity practices, including risk assessment, threat monitoring, and incident response. Knowledge of Data Privacy principles, regulatory requirements, and secure data handling practices. Experience with Business Continuity planning, disaster recovery strategies, and resilience frameworks. Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field; relevant certifications are an advantage. Ability to develop and enforce security policies, train staff on security awareness, and communicate complex technical issues to non-technical stakeholders. Experience in financial services or fintech environments is beneficial, particularly in emerging markets. Strong analytical, problem-solving, and organizational skills, with the ability to work collaboratively in a multi-disciplinary team.