ICT Officer-Infrastructure & Security at Winas Saving And Credit Co-operative Society Limited

To manage and secure the organization’s ICT infrastructure, ensuring availability, reliability, confidentiality, and integrity of systems, networks, and data in line with best practices and compliance requirements.

Duties and responsibilities

• Administer, monitor, and maintain core ICT infrastructure including physical/virtual servers, cloud services (e.g. Azure/M365), storage, and network devices.
• Implement and maintain secure configurations of servers, network devices, and other infrastructure components.
• Coordinate upgrades, patches, and migration of systems and infrastructure as necessary.
• Monitor datacenters and environmental conditions, ensuring uptime, performance, and security.
• Enforce access control, authentication, and audit procedures in line with ICT policies.
• Monitor infrastructure for vulnerabilities, apply patches, and manage antivirus systems.
• Enforce and document adherence to ISO 27001 controls, Data Protection Act, and other applicable regulatory requirements.
• Conduct regular risk assessments and recommend mitigation measures for infrastructure-related threats.
• Develop, implement, and test backup and disaster recovery procedures for infrastructure components and critical systems.
• Ensure data backup schedules are followed, tested, and documented.
• Participate in the planning and updating of business continuity strategies related to ICT infrastructure
• Maintain accurate records of infrastructure assets including hardware, software licenses, and configurations.
• Coordinate and document system change requests, upgrades, and decommissioning of legacy systems.
• Track resource utilization and anticipate future infrastructure needs.
• Proactively monitor infrastructure health and respond to alerts and performance issues.
• Provide 2nd/3rd line support for infrastructure- or security-related incidents.
• Collaborate with service providers and vendors in issue resolution and service optimization
• Conduct internal awareness sessions on cyber security best practices and threats.
• Respond to and investigate infrastructure-related security incidents, ensuring timely resolution and reporting.
• Develop and implement preventive maintenance schedules for infrastructure and security components.
• Ensure all procedures, configurations, and changes are documented in accordance with internal standards

KEY QUALIFICATIONS AND COMPETENCIES

Academic Qualifications

• Minimum Kenya Certificate of Secondary Education (C+) Plus
• Bachelor’s degree in Information Technology, Computer Science.
• Professional certifications such as Microsoft (Azure), Cisco, Comp TIA Security+, CEH, or ISO 27001 Implementer are an added advantage.
• Age 30 - 40 years.

Knowledge, Experience and Skills

• At 3-5 years’ experience in a busy IT environment