Enable it under Account > Security: scan the QR in an authenticator app (Google Authenticator, Authy), confirm the 6-digit code and store the recovery codes.
Enabling
Under Account > Security, turn on two-factor authentication. Scan the QR code with an authenticator app (Google Authenticator, Authy, 1Password or similar) and type the 6-digit code it generates to confirm. From then on every login asks for the password and then the app code.
Recovery codes
When you enable it, Avos shows single-use recovery codes. Keep them off the phone (password vault or paper): each code works once in place of the app code, for when you change device or lose access to the authenticator. Once used, a code stops working.
Lost everything?
Without the app and without recovery codes, the company administrator cannot turn off someone else's 2FA, by design. Write to support through the contact form from the registered email; identity verification happens before any reset.