Applications and Infrastructure Security Officer

About the role

Co-operative Bank is looking for a proactive and technically skilled Applications and Infrastructure Security Officer in Nairobi to strengthen its information security posture. The role covers managing security solutions, monitoring systems for suspicious activity, enforcing security policies and supporting secure technology implementations to protect the bank's systems, data and digital services.

Key responsibilities

• Manage and maintain ICT security solutions, including Web Application Firewalls, anti-malware, Data Loss Prevention (DLP), endpoint encryption, Privileged Access Management (PAM) and Multi-Factor Authentication (MFA).
• Coordinate the review and resolution of vulnerability assessment findings, recommend security enhancements and ensure security assessments are completed for new products, infrastructure upgrades and other ICT initiatives.
• Analyse system and application logs to identify indicators of compromise, suspicious user activity and security anomalies.
• Enforce security policies, configuration baselines and least-privilege access controls across applications and infrastructure.
• Support the identification, logging, investigation and resolution of security incidents, coordinate root cause analysis and monitor system availability.
• Research, implement and maintain security tool integrations to improve threat visibility and detection, and develop security dashboards, reports and metrics.
• Monitor privileged user activity and communicate security risks, policy gaps and recommendations to ICT teams and project stakeholders.

Required profile

• Bachelor's degree in Information Technology, Computer Science or a related IT discipline; a business-related degree is also considered with relevant IT security qualifications.
• Relevant professional certifications such as CCNA, CISA, CISSP, CCIE Security, CEH, DevSecOps, CRTP or CRTE.
• Practical experience or working knowledge of vulnerability assessments, security assessments, penetration testing and security architecture reviews.
• Strong analytical, communication, reporting and stakeholder management skills.

Required skills

• Enterprise cybersecurity, ICT risk management and information security controls.
• Vulnerability assessments, penetration testing and threat intelligence.
• ICT infrastructure, network architecture, operating systems and application security (iOS and Android).

To apply, send an application letter with a detailed CV by 11 November 2026, quoting the job reference AISO/IID/2026.