VisionFund Micro-Finance Institution (S.C.) Job Vacancy Announcement

Senior IT Risk Management Officer (Re-Advertised)

Place of Work: Head Office, Addis Ababa
Employment Type: Permanent
Opening Date: November 28, 2025
Closing Date: December 06, 2025

1. About the Organization

VisionFund Micro-Finance Institution (S.C.) was established in accordance with Proclamation No. 40/96 to provide financial services to productive low-income communities across rural and urban Ethiopia. The institution currently operates in five regional states and continues to expand its financial inclusion efforts. VisionFund is seeking qualified candidates for the position of Senior IT Risk Management Officer at the Head Office.

2. Purpose of the Job

The Senior IT Risk Management Officer is responsible for conducting comprehensive IT risk assessments—including emerging threats, vulnerabilities, and potential impacts on VFMFI’s operations. The role supports the Risk Management Division Manager in managing IT risk processes, strengthening information security, maintaining compliance, and developing an effective IT governance framework.

3. Key Duties and Responsibilities

Oversee IT risk management frameworks related to core banking, digital banking, and ICT exposures.
Support and monitor the IT change management process to ensure effectiveness and compliance.
Implement and follow through on IT risk management plans to prevent misconduct and protect information assets.
Identify threats and vulnerabilities; recommend improvements to mitigate risks.
Ensure compliance with IT policies, legal requirements, and information security regulations.
Oversee governance, policies, and tools concerning information security and risk control.
Design and manage a risk reduction program focused on information security.
Develop methodologies and frameworks for information security assurance across the institution.
Lead cyber incident response and collaborate with departments to improve risk processes.
Maintain compliance with all information risk and information security regulations.
Escalate issues related to IT systems, Business Continuity, and Disaster Recovery; initiate updates when required.
Support change initiatives to ensure IT and security controls are applied appropriately.
Prepare the IT risk register, monitor risk appetite, and analyze risk scenarios for business impact.
Work with the IT team to improve cybersecurity posture and deliver staff training and awareness.
Perform any other related duties as assigned.