Applications and Infrastructure Security Officer

About the role

Co-operative Bank of Kenya is looking for a proactive and technically skilled Applications and Infrastructure Security Officer to strengthen its information security posture. The role covers managing security solutions, monitoring systems for suspicious activity, enforcing security policies and supporting secure technology implementations to protect the bank's systems, data and digital services.

Key responsibilities

• Manage and maintain ICT security solutions, including Web Application Firewalls, anti-malware, Data Loss Prevention (DLP), endpoint encryption, Privileged Access Management (PAM) and Multi-Factor Authentication (MFA).
• Coordinate the review and resolution of vulnerability assessment findings, recommend security enhancements and ensure security assessments are completed for new products, innovations, infrastructure upgrades and other ICT initiatives.
• Analyse system and application logs to identify indicators of compromise, suspicious user activity and security anomalies, and enforce security policies, configuration baselines and least-privilege access controls.
• Support the identification, logging, investigation and resolution of security incidents, coordinate root cause analysis, monitor system availability and ensure corrective and preventive measures are implemented.
• Research, implement and maintain security tool integrations to improve threat visibility, detection and incident response.
• Develop security dashboards, reports and metrics, monitor privileged user activity and communicate security risks and recommendations to ICT teams and stakeholders.
• Translate information security risks into business terms and give security guidance to ICT teams and project stakeholders.

Required profile

• Bachelor's degree in Information Technology, Computer Science or a related IT discipline; a business-related degree is also considered with relevant IT security qualifications.
• Relevant professional certifications such as CCNA, CISA, CISSP, CCIE Security, CEH, DevSecOps, CRTP or CRTE.
• Practical experience or working knowledge of vulnerability assessments, security assessments, penetration testing and security architecture reviews.
• Strong analytical, communication, reporting and stakeholder management skills.

Required skills

• Enterprise cybersecurity, ICT risk management and information security controls.
• Vulnerability assessments, penetration testing and threat intelligence.
• ICT infrastructure, network architecture, operating systems and application security (iOS and Android) and database technologies.

To apply, send an application letter with a detailed CV by 11 November 2026, citing the job reference AISO/IID/2026.