ATLANTIQUE MICROFINANCE is a microfinance institution that provides financial services such as loans and savings accounts to its clients. Atlantique microfinance plc has been registered as a microfinance company in Rwanda since 2018 and holds a microfinance services authorization certificate issued by the Central Bank of Rwanda (BNR).

https://atlanticmicrofinance.net/rwanda/

ATLANTIQUE MICROFINANCE is a microfinance institution that provides financial services such as loans and savings accounts to its clients. ATLANTIQUE MICROFINANCE Plc has been registered as a microfinance company in Rwanda since 2018 and holds a microfinance services authorization certificate issued by the Central Bank of Rwanda (BNR).

Reporting line : General Manager

General Description:

Responsible for ensuring the proper functioning of the network and operational IT security within the subsidiary, this technician ensures user connectivity to the group's platforms, maintains the local network infrastructure (LAN, VPN, firewall) and applies the security policies defined by the group.

Main tasks:

1. Threat monitoring and detection

• Monitor security alerts and events from cybersecurity systems, networks, and tools.
• Analyze logs, connections, and suspicious activity to detect threats and anomalies.
• Identify unauthorized access attempts, malware, ransomware, phishing and other cyberattacks.
• Escalate high-risk or critical incidents quickly.
• To monitor new threats and contribute to improving detection mechanisms.

2. Cybersecurity Incident Management and Response

• Identify, analyze and classify cybersecurity incidents according to their nature and criticality.
• Participate in the investigation, containment, eradication and restoration of affected systems.
• Document the incidents, preserve the elements necessary for their analysis and prepare the corresponding reports.
• Ensure follow-up on corrective and preventive actions.
• Contribute to post-incident analyses in order to identify root causes and prevent their recurrence.

3. Vulnerability Management

• Participate in security scans and tests.
• Identify and assess the vulnerabilities of systems and applications.
• Keep the vulnerability register up to date.
• Monitor the installation of patches and remediation plans.
• Ensure the handling of critical vulnerabilities.
• Prepare periodic reports on the state of vulnerabilities.

4. Security of networks and infrastructure, systems, applications and workstations

• Administers and maintains the branch's local network (switches, routers, Wi-Fi, cabling, firewall)
• Monitors network and security events.
• Contributes to the security of network equipment, servers, datacenters and cloud environments.
• Manages Internet connectivity and VPN access to different platforms and verifies filtering rules, VPN access and remote connections.
• Participates in network segmentation and system hardening.
• Identifies and reports configurations, ports, or services that present a security risk.
• Check the antivirus/EDR protection of workstations and servers.
• Monitors and analyzes alerts, infections, and malicious activity.
• Controls the application of updates and security patches.
• Checks system configurations, hardening, and installed software.
• Participates in securing computer equipment.
• Participates in the evaluation and securing of critical applications.
• Identifies risks, vulnerabilities and unusual activities.
• Check access and authentication controls.
• Follows the recommendations of the safety tests.
• Reports any potential compromise or fraud.
• Deploys and maintains network and security equipment during branch openings or renovations
• Manage firewalls and filtering rules in accordance with group standards

5. Protection of personal data

• Contributes to the protection of sensitive and critical data.
• Monitors access and identifies risks of leakage or compromise.
• Contributes to the securing, encryption and restoration of backups.
• Reports any data breach or suspected data compromise.

6. Security policies, procedures and controls

• Update cybersecurity policies and procedures.
• Define and implement security controls and standards.
• Document the controls and retain evidence of compliance.
• Implement the audit recommendations.
• Contribute to the continuous improvement of the cybersecurity framework.

7. Audit, compliance and risk management

• Participates in IT and cybersecurity audits.
• Contributes to the identification and monitoring of cyber risks.
• Ensures follow-up on audit recommendations and action plans.
• Prepare the evidence and compliance reports.
• Participates in regulatory assessments and responses intended for the relevant authorities.

8. Staff awareness and training

• Participate in cybersecurity awareness campaigns.
• Informs users about the risks associated with phishing, social engineering, and data protection.
• Encourages the use of strong passwords and multi-factor authentication (MFA).
• Contributes to training, phishing simulations and awareness materials.
• Monitors and evaluates the results of awareness-raising activities.

9. Backup, continuity and disaster recovery

• Checks the protection and proper functioning of critical backups.
• Participates in restoration, business continuity and disaster recovery testing.
• Ensures that critical systems have appropriate recovery measures in place.
• Participate in cyberattack or disaster simulation exercises.
• Ensures network service continuity and contributes to business continuity plans (BCP).

10. Reporting et documentation

• Surveillance and cybersecurity reports.
• Incident and vulnerability reports.
• Dashboards and patch tracking reports.
• Access and compliance review reports.
• Follow-up on audit recommendations.
• Awareness reports and security test reports.

II. COMPETENCES ET EXPERIENCES

1. Techniques

• Good command of network security, Firewall, VPN, VLAN, IDS/IPS (TCP/IP, DNS, DHCP, NAT and Cisco equipment) and network segmentation.
• Experience in SIEM/SOC, log analysis and security event monitoring.
• Knowledge of EDR/Antivirus and XDR solutions.
• Skills in vulnerability management, patch management and hardening.
• Good knowledge of Windows Server, Linux, Active Directory and IAM.
• Experience in detecting, analyzing and responding to cybersecurity incidents.
• Knowledge of application, database and API security.
• Knowledge of backup, restore, BCP/DRP and Disaster Recovery principles.
• Knowledge of ISO 27001 standards and other standard safety norms.
• Proficiency in tools such as Wazuh, FortiGate, Microsoft Defender/EDR, Nessus/OpenVAS, Wireshark and Veeam is an asset.
• Experience in the banking, financial or microfinance sector is an advantage.

2. Behavioral

• Rigour, integrity and confidentiality.
• Ability to document configurations »
• Analytical, critical thinking and problem-solving skills.
• Responsiveness and prioritization.
• Team spirit, autonomy and a sense of responsibility.
• Good communication with both technical and non-technical stakeholders.
• Adaptability, curiosity and continuous improvement.
• Adherence to procedures and ability to work under pressure.
• Availability for urgent interventions and travel to the subsidiary's branches

3. Qualifications and training

• Bachelor's/Master's degree in Cybersecurity, Computer Science, Networks and Telecommunications, Information Systems or related field.
• 2 to 4 years of professional experience in cybersecurity, IT security, systems or networks
• Certifications such as CEH, FCP, ISO/IEC 27001; CISSP; Fortinet or equivalent certifications are an asset
• Regulatory knowledge of data protection principles, IT risk management and cybersecurity requirements applicable to the financial sector.
• Good command of French and/or English, both spoken and written.
• Experience in a financial, banking or microfinance institution is an advantage.

• Monitor security alerts and events from cybersecurity systems, networks, and tools; analyze logs, connections, and suspicious activity to detect threats and anomalies.
• Identify, analyze and classify cybersecurity incidents; participate in investigation, containment, eradication and restoration; document incidents and follow up on corrective and preventive actions.
• Participate in security scans and tests, assess vulnerabilities, maintain the vulnerability register, monitor patches and remediation plans, and prepare periodic reports.
• Administer and maintain the branch's local network, manage Internet connectivity, VPN access, firewalls and filtering rules, and contribute to network segmentation and system hardening.
• Monitor antivirus/EDR protection, security patches, system configurations, access and authentication controls, and report potential compromise or fraud.
• Contribute to protecting sensitive and critical data, securing and restoring backups, and reporting data breaches or suspected data compromise.
• Update cybersecurity policies and procedures, implement security controls and standards, document compliance evidence, and implement audit recommendations.
• Participate in IT and cybersecurity audits, monitor cyber risks, follow up on audit recommendations, and prepare evidence and compliance reports.
• Participate in cybersecurity awareness campaigns, training, phishing simulations and awareness materials.
• Check critical backups and participate in restoration, business continuity, disaster recovery testing and simulation exercises.
• Prepare surveillance, incident, vulnerability, dashboard, patch tracking, access, compliance, audit follow-up, awareness and security test reports.

• Network security, Firewall, VPN, VLAN, IDS/IPS, TCP/IP, DNS, DHCP, NAT, Cisco equipment and network segmentation
• SIEM/SOC, log analysis and security event monitoring
• EDR/Antivirus and XDR solutions
• Vulnerability management, patch management and hardening
• Windows Server, Linux, Active Directory and IAM
• Cybersecurity incident detection, analysis and response
• Application, database and API security
• Backup, restore, BCP/DRP and Disaster Recovery principles
• ISO 27001 standards and other standard safety norms
• Wazuh, FortiGate, Microsoft Defender/EDR, Nessus/OpenVAS, Wireshark and Veeam
• Rigour, integrity and confidentiality
• Analytical, critical thinking and problem-solving skills
• Responsiveness, prioritization, team spirit, autonomy and responsibility
• Communication with technical and non-technical stakeholders
• Adaptability, curiosity, continuous improvement and ability to work under pressure

• Bachelor's/Master's degree in Cybersecurity, Computer Science, Networks and Telecommunications, Information Systems or related field.
• Certifications such as CEH, FCP, ISO/IEC 27001; CISSP; Fortinet or equivalent certifications are an asset
• Regulatory knowledge of data protection principles, IT risk management and cybersecurity requirements applicable to the financial sector.
• Good command of French and/or English, both spoken and written.
• Experience in a financial, banking or microfinance institution is an advantage.