4 Job Positions at BRD_ Development Bank of Rwanda  : (Deadline: 15 December 2023)

Background Information

Job Title: Senior Manager – Information Security & Risk

Job Grade: JG 4

Department: CEO’s Office

Department/ Section/Unit: Information Security & Risk

Reports to: Chief Executive Officer

Direct Reports:

• Information Security Specialist
• Information Security Officer
• Information Security Analyst

Indirect Reports: N/A

Contract Terms: Open-ended

Purpose of the Job

The purpose of the job is to be responsible for establishing and maintaining a corporate-wide information security management program to ensure that information assets are adequately protected. The position is also responsible of advising and establishing the information security strategy and overseeing information security operations in the bank.

This position is responsible for identifying, evaluating, and reporting on information security risks in a manner that meets compliance and regulatory requirements, and aligns with and supports the risk posture of the bank. The position is also responsible for reporting and investigating information security incidents and advising on remediation actions to avoid their recurrence.

The position is also responsible for advising and recommending needed tools to improve the security posture of the bank and maintain high compliance levels.

The Senior Manager – Information Security & Risk role will also be responsible for developing an information security awareness program for all functions to educate employees, and customers about the risks associated with the misuse of information resources and how to avoid them.

The Senior Manager – Information Security & Risk will also be responsible for engaging and managing internal and external information security stakeholders’ relationships to ensure the bank remains compliant and aware of external requirements.

Main Responsibilities of the Job

• Develop, implement, and monitor a strategic, comprehensive information security and IT risk management program to ensure that the integrity, confidentiality, and availability of information is owned, controlled or processed by the bank.
• Manage the enterprise’s information security organization, consisting of direct reports and indirect reports (such as individuals in Risk, Audit and IT). This includes hiring, training, staff development, performance management and annual performance reviews.
• To manage creation, maintenance and implementation of the bank information security awareness training program.
• Creating, leading, and managing cybersecurity strategies
• Oversee information security audits, whether performed by internal audit or third-party personnel.
• Manage security team members and all other information security personnel.
• Evaluate department budget and costs associated with technological development in cybersecurity.
• Define and communicate to the management, the key threats to the information assets.
• Assist in the investigation of security threats or other attacks on the information assets at the bank.
• Forecast potential threats to the business.
• Assess current technology architecture for vulnerabilities, weaknesses and for possible upgrades or improvement.
• Manage the acquisition of additional information security solutions or enhancements to existing information security solutions to improve the overall information security posture.
• Lead, develop and implement the FinSOC program to ensure compliance with the regulator.
• Serve as a focal point of contact for the information security team, the customer and across the organization.
• Manage external stakeholders through regular engagements (BNR, NCSA..etc).
• Manage, configure, and test physical security, disaster recovery and data backup systems.
• Communicate information security goals and new programs effectively with other department managers within the organization.

Performance indicators

• Conduct a continuous gap analysis and vulnerability assessment of the bank in terms of information security to ensure the bank is always aware of its cybersecurity risks.
• Ensure the preparedness level of the bank is efficient by evaluating how well-prepared we are for any potential cybersecurity threat or attack.
• Review continuously the number of devices on the organization’s network and whether they are fully patched up, up-to-date, and safe.
• Timely and effective management of information security incidents by ensuring the mean time to detect, to resolve, to contain, etc. are low.
• Prevent any intrusion attempts in the bank’s network by continuous monitoring of network devices logs and activities performed within the bank.
• Ensure our information security rating improve and remains excellent.
• Ensure system are properly patched on a timely manner.
• Provide comprehensive cybersecurity awareness training.
• Safeguard the bank from cybersecurity threats and attacks such as bots’ attacks, viruses, phishing attacks, ransomware and more.
• Measure and evaluate our cost per incident to minimize loss for the bank.
• Document and ensure compliance of all information technology policies, procedures, and processes.
• Develop a logical access matrix for each system used within the bank.
• Closely monitoring of the user system access of staff or external partners according to the logical access matrix of each node.
• Monitor data privacy and protection of the bank, its staff, and customers according to the Rwandan’s law especially on the protection of personal data and privacy.

Working relationships

• Executives and Heads of departments
• IT & Digital Information
• System and Database administrators
• Senior and Middle Managers
• External stakeholders

Professional, academic qualifications and experience

• Bachelor’s degree in computer science, Information Technology, or related field. Master’s degree in the related field is preferred.
• Professional certification in Cybersecurity such as CCNA/CCNP Security, ISO/IEC, or related field
• A minimum of seven years of IT experience, with five years in an information security role.
• Strong leadership skills and the ability to work effectively with business managers, IT engineering and IT operations staff.
• Remarkable experience in information security risk assessment and management.
• Knowledge and understanding of relevant legal and regulatory requirements.
• Exhibit excellent analytical skills, the ability to manage multiple projects under strict timelines, as well as the ability to work well in a demanding, dynamic environment and meet overall objectives.
• Ability to lead and motivate cross-functional, interdisciplinary teams to achieve tactical and strategic goals.
• A strong understanding of the business impact of cybersecurity tools, technologies, policies, procedures, and processes.
• Experience developing and maintaining policies, procedures, standards, and guidelines.
• A drive to learn and master new technologies and techniques.

Core competencies

• Visionary leader with sound knowledge of business management and a working knowledge of information security technologies Industry experience is preferred.
• Understanding of operating system internals and network protocols.
• Familiarity with Cybersecurity tools and technologies (e.g., SIEM, ESG, EDR, PAM, DAM and other related tools)
• Knowledge of the principles of cryptography and cryptanalysis.
• Experience in system technology security testing (vulnerability scanning and penetration testing).
• Familiarity in application technology security testing (white box, black box and code review).
• Highly familiar with related information security laws and regulations, including knowledge of Rwandan Data Privacy law.
• Proven abilities to take initiative and be innovative.
• Analytical mind with a problem-solving aptitude
• BSc/BA in Computer Science, Engineering, or relevant field.

Background Information

Job Title: Senior Data Analyst

Job Grade: JG 6

Department: IT & Digital Innovation

Reports to: Manager, IT Operations

Direct Reports: N/A

Indirect Reports: N/A

Contract Terms – Open Ended

Purpose of the Job

The goal is to acquire a proficient expert in data analysis, adept at database management, possessing advanced scripting skills, and a strong capacity to transform data into actionable insights that drive business objectives.

Main Responsibilities of the Job

• Conduct data analysis to identify trends, patterns, and insights that can inform business decisions.
• Develop and maintain database structures and data models.
• Perform data extraction, transformation, and loading (ETL) processes to ensure data accuracy and integrity.
• Collaborate with business stakeholders to define data requirements and design data solutions.
• Monitor and optimize database performance, including troubleshooting and resolving performance issues.
• Manage and administer core banking applications, including maintenance and troubleshooting.
• Implement security measures to protect and secure database information.
• Collaborate with vendors to review contracts and manage vendor support.
• Support the integration of any Electronic Financial Management Information System with external partners.
• Participate in process improvement and automation initiatives to enhance operational efficiency.
• Ensure timely and accurate database backups and high availability for critical systems.
• Provide technical support to system users for database-related issues.
• Collaborate with cross-functional teams on IT projects to deliver efficient IT solutions.
• Mentor and support junior data analysts.
• Stay up to date with industry trends and emerging technologies in data analysis and database management.

Performance indicators

• Data Quality and Analysis Accuracy: Measure the accuracy and effectiveness of data analysis conducted to identify trends, patterns, and insights. Assess the impact of data-driven decisions on the organization’s success.
• Database Performance and Maintenance: Evaluate the efficiency of maintaining database structures, data models, and ETL processes. Track the performance of core banking applications and the ability to troubleshoot and resolve performance issues promptly.
• Data Security and Rules:  Enforcing Data Protection Law ,by implementation of security measures to ensure data security and integrity.

Working relationships

• Disbursement Manager and Recovery Manager
• Marketing and Communication Manager
• Education Portfolio Management Partners

Professional, academic qualifications and experience

• Bachelor’s degree in computer science, Information Technology, Data Science, or a related discipline.
• Minimum of five (5) years of experience in data analysis and database management.
• Proficiency in SQL and database management systems (e.g., Oracle, MySQL, SQL Server).
• Experience with data visualization tools (e.g., Tableau, Power BI).
• Knowledge of data warehousing concepts and methodologies.
• Strong understanding of data privacy and security best practices.
• Relevant certifications in data analysis or database management are a plus.

Core competencies

• Ability to analyze and interpret complex data sets.
• Strong attention to detail and accuracy.
• Ability to work independently and manage multiple tasks and projects simultaneously.
• Effective time management and organizational skills.
• Ability to communicate insights and findings to stakeholders effectively.
• Continuous learning and adaptability to new technologies and tools.
• Collaborative mindset and willingness to share knowledge and mentor junior analysts.
• Ability to work under pressure and meet tight deadlines.

Background Information

Job Title: Portfolio Monitoring officer

Job Grade: JG 6

Department: Credit

Direct Reports: N/A

Indirect Reports: N/A

Contract Terms: Open-ended

Reporting Line: Manager, Portfolio Monitoring

Purpose of the Job

The purpose of the job is to review disbursements for projects under implementation, restructure projects for new repayment plans, carrying out field visits, cross-checking fulfillment of all analyzed pre-conditions of financed projects under AFIRR project in the implementation and post implementation progress phase and preparing monitoring reports and recommendations.

Main Responsibilities of the Job

• Review realization of all precedent conditions related to the signing of contracts, to the disbursement modalities and client’s own contribution before disbursement.
• Advise clients to fulfill conditions where necessary and to agree with the clients on the implementation plan and disbursement modalities as approved by the Bank under AFIRR project.
• Review disbursement notes that include project background, collateral status, financial/investment, disbursement plan, reason of request, analysis of the client’s request/status with proposals/recommendations accordingly for Management’s decision.
• Plan regular field visits of the projects in the implementation phase to assess proper utilization of the disbursed funds and to keep clients on track for successful implementation of projects.
• Advise and guide clients on their businesses through regular visitation, checks on initial project projection in relation to the actual performance of the business.
• Ensure regular collateral valuation, collateral monitoring, and collateral reconciliation with original documents for the portfolio he/she is monitoring.
• Follow up to ensure timely collection of due instalments (principal and interest payments) of the clients financed by the Bank and making regular reminders through calls, notice letters for debt payment of their due arrears to keep them in the performing class.
• Restructuring of files requested by clients aiming at solving problems encountered during the implementation phase of the project.
• Provide all needed information to internal & external customers regarding their loans’ files.
• Follow-up of the execution of the various recommendations and recommendations given to the clients.
• Maintain the performing clients (Risk Class1 and Risk Class2 clients) by regular reminders for payment of their instalment due.
• Ensure that all the projects financed under AFIRR are visited within the required timeline as agreed upon.
• Build and maintain relationship with existing and potential clients of the Bank while encouraging good performing projects for additional funding for business growth.

Performance indicators

• Level of compliance with credit agreements, internal policies, and sectoral regulations
• Timeliness and accuracy of activity reports and proposals
• Level of projects visits, and reports produced.
• Proactive identification of credit risks
• Turnaround time on clients’ requests and SLA
• Customer satisfaction and reliability of research materials

Working relationships

• Disbursement Manager and Recovery Manager
• Marketing and Communication Manager
• Education Portfolio Management Partners

Professional, academic qualifications and experience

• Bachelor’s Degree in commerce/Business Administration/ or related field from a recognized institution
• Relevant professional qualification
• A minimum of three (3) years in similar position

Core competencies

• High level of financial literacy
• Computer literacy
• Speed, accuracy and efficiency of transactional processes and reporting.
• Strict adherence to agreed credit turnaround time and Service Level Agreement (SLA).
• credit risk analysis in terms of risk identification, assessment, measurement and mitigation
• Management, especially the different asset classes institutional investors are exposed to in Africa.
• Working knowledge of customer service software, databases and tools
• Awareness of industry’s latest technology trends and applications.
• Client relation management skills.

Background Information

Job Title: Monitoring, Evaluation Learning Officer (1)

Job Grade: JG 6

Department: Strategy, Research, Resource Mobilization and M&E

Reports to: Functionally to Strategy and Research Manager and administratively to SEIRHCP Project Coordinator.

Direct Reports: N/A

Indirect Reports: N/A

Contract Terms: 3 years

Purpose of the Job

The purpose of the job is to design, coordinate, and implement the monitoring and evaluation of the project in line with the Project Development Objectives.  The Project Monitoring, Evaluation, And Learning Officer’s responsibility will be to ensure that the SEIRHCP Project has the right tools, processes, and reports in place in order to inform the project teams’ decision-making and to measure progress toward the project Objectives.

Success in this Monitoring, Evaluation, and Learning role requires a track record in monitoring and evaluation of  donor-funded projects  with an excellent ability to collect, analyze and synthesize quantitative and qualitative data,  an  in-depth knowledge of inclusive finance and development issues in general (role of the private sector in development, tackling poverty, etc.) and in-depth knowledge of project management, coupled with the ability to multi-task and meet deadlines while exercising sound monitoring and evaluation of the project’s critical success indicators.

The incumbent needs to have passion for strong work ethic, demonstrate integrity, and have excellent working relationships with all the project stakeholders. The job also requires having a sufficient understanding of each facet of business operations and information systems to be able to make meaningful analysis and recommendations, which add value to the project development objectives.

Main Responsibilities of the Job

• Ensure that the SEIRHCP Project has the right tools, processes, and reports in place to inform the project teams’ decision-making and to measure progress toward the project Objectives.
• Produce reports and publications based on surveys, project progress reports, project evaluations and knowledge building activities.
• Provide progress implementation reports of the SEIRHCP project and provide recommendations to management for further actions.
• Collect data on a regular basis to measure achievement against the performance indicators.
• Document successes and challenges in implementation to support learning.
• Closely follow up on the SEIRHC Project capacity-building activities.
• Prepare reports capturing lessons learned and advice for future operations, collaborating with other partners supporting refugee-host community economic inclusion.
• Analyze the data being collected on business profitability and sustainability.
• Support the project annual survey(s), mid-term review, and the end-line assessment.
• Organize other monitoring activities to collect more targeted qualitative and quantitative data to inform the project. (PFIs, Beneficiaries, Stakeholders)
• Support operationalization and usage of the PMIS (Project Management and Information System) as a management tool for BRD
• Prepare impact reports of the SEIRHCP project demonstrating the progress towards achievement of the overall objectives.
• Carry out any other assignment from the Line manager or the Management of the Bank.

Working relationships

• All BRD departments, all SEIR & HC, PFIs and project beneficiaries

Professional, academic qualifications and experience

• Bachelor’s degree in business administration, Finance, Rural Finance, and Project Management or related fields from a recognized institution.
• A minimum of three (3) years’ experience in a similar position.

Core competencies

• Monitoring and evaluation of development programs required.
• Demonstrated relevant experience in M&E of government or development partner-funded programs/projects.
• In-depth knowledge of inclusive finance and development issues in general.
• Capacity to prepare accurate and timely monitoring and evaluation reports.
• Ability to collect, analyze and synthesize quantitative and qualitative data.
• Strong quantitative and analytical skills with good knowledge of Microsoft programs, especially MS Excel.
• Proven knowledge of market research, statistical modelling, and measurement program design, Skills in the use of statistical analysis tools such as STATA or SPSS will be highly recommended.
• Strict adherence to the agreed project turnaround time and BRD Service Level Agreements.
• Stakeholder relation management skills.
• Fluency in English, French, and Kinyarwanda is a requirement.
• Excellent communication and presentation skills.
• Proven personal integrity and work ethics.

Duty Station

• The Monitoring, Evaluation and Learning officer will be stationed at the Development Bank of Rwanda (BRD) offices in Kigali.