Are you passionate about protecting data, managing risk, and ensuring business continuity in a fast-paced financial environment? FINCA Tanzania is inviting applications for the Information Security and Business Continuity Intern position at its Head Office in Dar es Salaam. This exciting internship offers hands-on experience in cybersecurity, data protection, and IT compliance within a global financial institution known for empowering communities through innovative banking solutions, Information Security and Business Continuity Intern at FINCA 2025.
About FINCA Tanzania
FINCA Microfinance Bank is a leading financial services provider committed to enabling sustainable economic growth for individuals and small businesses. Through modern technology and responsible banking, FINCA helps Tanzanians access affordable financial solutions—while maintaining the highest standards of security, integrity, and customer data protection.
Position Overview
Job Title: Information Security and Business Continuity Intern
Location: Head Office – Dar es Salaam
Reports to: Head of Risk Management and Compliance
As an intern, you will work closely with the Senior Information Security and Business Continuity team to implement and monitor the bank’s cybersecurity, data protection, and continuity programs. This role is ideal for recent graduates eager to build a career in information security, cybersecurity, or IT governance.
Key Responsibilities
1. Information Security & Cybersecurity Support
- Assist in implementing and maintaining the Information Security Management System (ISMS).
- Support vulnerability assessments and basic risk analysis.
- Monitor cybersecurity logs and report potential threats.
- Participate in security awareness campaigns, phishing simulations, and training follow-ups.
- Help define and enforce security policies, standards, and procedures.
- Assist in conducting user access reviews and documentation.
- Support incident response and audit preparations.
- Track closure of findings from BOT directives, internal/external audits, and other control reviews.
2. Personal Data Protection
- Support compliance with Personal Data Protection laws and FINCA’s internal policies.
- Assist in conducting Personal Data Protection Impact Assessments (PDP-IAs).
- Document and monitor data processing activities.
- Help respond to data subject access requests (DSARs) under supervision.
- Prepare reports on compliance with data privacy laws such as GDPR and local regulations.
3. Business Continuity & Crisis Management
- Assist in updating Business Continuity Management (BCM) documentation, including policies and plans (BCP, BRP, DRP, CMP, OEP, BIA).
- Participate in simulation exercises and staff awareness training.
- Help track backup and recovery plans for systems and data.
- Support in evaluating the bank’s disaster recovery readiness.
4. Additional Responsibilities
- Perform other IT compliance, security, or data protection tasks as assigned by supervisors.
- Contribute to projects aimed at strengthening FINCA’s risk management framework.
Qualifications and Requirements
- Bachelor’s degree in Information Security, Computer Science, Cybersecurity, Management Information Systems, or a related field.
- Basic knowledge of Information Security frameworks (ISO 27001, NIST, COBIT, PCI DSS).
- Understanding of data protection regulations such as GDPR and Tanzania’s Personal Data Protection Act.
- Strong analytical and problem-solving skills.
- Previous experience or internship in the banking or financial sector is an added advantage.
Why Join FINCA Tanzania?
- Gain real-world experience in cybersecurity and data privacy.
- Work with seasoned professionals in risk management and compliance.
- Enhance your understanding of global security standards and IT governance frameworks.
- Build a strong foundation for a career in information security, business continuity, or compliance management.
How to Apply
Interested candidates should send their CV and cover letter to: TZ_Recruitment@finca.co.tz, Deadline: October 23, 2025, Only shortlisted candidates will be contacted.
