Applications and Infrastructure Security Officer at Co-operative Bank of Kenya

The Role

Specifically, the successful jobholder will be required to:

• Manage and maintain ICT security solutions, including Web Application Firewalls, anti-malware, Data Loss Prevention (DLP), endpoint encryption, Privileged Access Management (PAM) and Multi-Factor Authentication (MFA).
• Coordinate the review and resolution of vulnerability assessment findings, recommend appropriate security enhancements and ensure security assessments are completed for new products, innovations, infrastructure upgrades and other ICT initiatives.
• Analyse system and application logs to identify indicators of compromise, suspicious user activities and security anomalies. Enforce security policies, configuration baselines and least-privilege access controls across business applications and infrastructure.
• Support the identification, logging, investigation and resolution of security incidents. Coordinate root cause analysis, monitor system availability and ensure appropriate corrective and preventive measures are implemented.
• Research, implement and maintain security tool integrations to enhance threat visibility, improve detection capabilities and reduce incident response times.
• Develop security dashboards, reports and metrics; monitor privileged user activities across servers, systems and databases; and engage ICT teams to communicate security risks, policy gaps and recommended improvements.
• Translate information security risks into practical business implications and provide security guidance to ICT teams and project stakeholders to support secure, reliable and compliant technology operations.

Skills, Competencies and Experience

The successful candidate will be required to have the following skills and competencies:

• A bachelor’s degree in Information Technology, Computer Science or a related IT discipline. A business-related degree will also be considered where supported by relevant IT security qualifications.
• Relevant professional certifications such as CCNA, CISA, CISSP, CCIE Security, CEH, DevSecOps, CRTP, CRTE or other recognised cybersecurity certifications.
• Good knowledge of enterprise cybersecurity, ICT risk management and information security controls.
• Practical experience or working knowledge of vulnerability assessments, security assessments, penetration testing methodologies and associated tools.
• Understanding of common cybersecurity threats, threat intelligence sources and emerging security risks.
• Good knowledge of ICT infrastructure, network architecture, operating systems and infrastructure components.
• Familiarity with software development environments, application security (iOS & Android) and database technologies.
• Practical experience conducting security architecture reviews and providing security assurance for new systems, technology projects and significant changes to existing platforms.
• Strong analytical, communication, reporting and stakeholder management skills.