Assistant Manager Information Security Systems, Job Grade PB 4: KPOSB/ICT/1/26

Position Function

The Assistant Manager, Information Technology Security will be responsible for providing leadership and coordination to the IT Security and is responsible for monitoring computer networks and ICT infrastructure against cyber-attacks, security threats or unauthorized access to safeguard the Bank’s data and knowledge base.

The job holder’s role is to ensure the integrity, availability, confidentially and authenticity of all information assets of the Bank.

Key Responsibilities

  1. Review security reports that arise from security incidents and ensure that proper investigations have been carried out and remedial actions put in place.

  2. Ensure the Bank complies with local regulations e.g. encryption regulations and privacy laws.

  3. Enforce compliance to ICT Security policy of the Bank.

  4. Ensure changes made to ICT systems strictly adhere to change management policy of the Bank and do not affect availability of services.

  5. Oversee the development, update, communicate and publish the Information Security Policy and other operational security policies.

  6. Review the Bank’s ICT security controls and security strategies while ensuring that the procedures for operating and maintaining those controls are in place.

  7. Ensure that the Confidentiality, Integrity and Availability of services are maintained at the levels agreed in the Operation Level Agreements (OLAs).

  8. Ensure that all access to services by external partners and suppliers is subject to contractual agreements and responsibilities (e.g. non-disclosure agreements) and are closely monitored.

  9. Ensure all changes to access are assessed for impact on all security aspects; including information security policy and controls.

  10. Oversee the ICT security risk analysis and risk management in coordination with Risk and ICT Service Continuity Management functions.

  11. Oversee the Bank’s ICT security awareness program to ensure the technology organisation employees understand the risks / threats to their business, their responsibilities and how to comply with policies.

  12. Manage Coordinate the development and testing of the Bank’s Disaster Recovery Plans (DRPs).

  13. Oversee the design, development and delivery of enterprise level identity and access management solutions.

  14. Ensue that there is a strategy for Identity and Access Management services that are robust and scalable to support the employees, contractors, partners and vendors.

  15. Interact with other department to ensure that staff have the correct level of access to systems and applications.

  16. Provide security services to and complement the information technology architecture while integrating with the business global architecture.

  17. Oversee the analysis, design, building, testing, and deployment activities related to IAM components.

  18. Act as trusted security architecture advisor to provide strategic direction in leading activities in support of Identity Lifecycle management tools and technologies and enterprise security objectives.

  19. Review solutions and recommendations for issues caused by process challenges, emerging threats and technology changes.

  20. Manage and support security infrastructure systems & devices (including Access Control Systems, Patch Management Systems, Web Application Firewalls, Database Security, Authentication Systems etc.).

  21. Oversee the development and implementation of an ICT Risk Management Framework and Security Control Framework.

  22. Review and recommend security controls & configurations on systems, databases and network infrastructure.

  23. Perform hardening of various operating, applications and database systems.

  24. Design and implement ICT security architecture and proactively patching and implementing secure configurations and protocols on ICT systems.

  25. Provide security guidance during technology projects, systems deployment, upgrades and changes.

  26. Enforce the Bank’s Information Security policies on ICT systems and equipment as well as develop security solutions to mitigate against identified security vulnerabilities.

  27. Liaise with various stakeholders in the Bank and external partners in enforcing ICT security standards for ICT infrastructure.

Knowledge, Skills & Abilities

  1. At least twelve (12) years relevant work experience in Public service or Private sector, three (3) of which must be in a supervisory level.

  2. Master’s Degree in any of the following disciplines: Information Technology, Computer Science, Business IT, Software Engineering, ICT Project Management, Computer Engineering or equivalent qualification from a recognized Institution.

  3. Bachelor’s Degree in any of the following fields: Information Technology, Computer Science, Business IT, Software Engineering, ICT Project Management, Computer Engineering or equivalent qualification from a recognized Institution.

  4. Certification in either Cisco Certified Network Associate (CCNA)/ Cisco certified network professional (CCNP) Certified Information Systems Auditor (CISA) certification/ Certified Information Systems Manager (CISM) certification/ Certified Information Systems Security Professional (CISSP) or other equivalent security certifications/qualifications from a recognized institution.

  5. Management course of not less than four (4) weeks from a recognized institution.

  6. Knowledge of trends in ICT in the banking and financial services sectors.

  7. Good understanding of business support services and their related technologies i.e. to support core banking systems, logistics, administrative, finance and HR activities.

  8. Experience in managing administering systems and infrastructure and in managing all business support software and ICT and communications infrastructure.

  9. In depth knowledge of server, clients, mobile operating systems and RDBMS with demonstrated understanding of security architecting of information systems in general.

  10. In depth knowledge of tools used to secure and test security of information systems.

  11. Demonstrated knowledge of threats and attack vectors as well as incident response and management.

  12. Strong Vulnerability management experience.

  13. Solid knowledge of security standards, ICT security regulatory and compliance regulations and standards.

  14. Knowledge of various programming and scripting languages (e.g., .Net, Java, Perl, C#).

  15. Knowledge of and practical experience with various Internet protocols (e.g., DNS, TCPIP, SMTP, HTTP, SSL;

  16. Strong understanding and knowledge of ICT risk assessment, risk procedures, security assessment, vulnerability management, penetration testing.

  17. Possess high levels of integrity, ethical standards and professionalism.

  18. Ability to drive change and emotional intelligence.

  19. Independence and objectivity and attention to detail.

  20. Strong interpersonal, written, and oral communication skills.

  21. Ability to prioritize and execute tasks in a high-pressure environment and make sound decisions in emergency situations.

  22. Highly self-motivated, with good analytical and problem-solving abilities.

  23. Strong customer service orientation.

  24. Experience working in a team-oriented, collaborative environment.

  25. Shown merit and ability as reflected in work performance and results.

  26. Fulfilled the requirements of Chapter Six of the Constitution.

Apply

Principal ICT Officer/Infrastructure Management Job Grade PB 5: KPOSB/ICT/2/26

Position Function

The Principal ICT Officer will provide strategic leadership, planning, governance, and oversight of the organization’s ICT infrastructure environment, ensuring the availability, security, resilience, performance, and scalability of technology platforms that support business operations and digital transformation initiatives.

He/she will also be responsible for developing infrastructure strategies, managing infrastructure projects, enforcing ICT standards and policies, overseeing disaster recovery and business continuity capabilities, and leading technical teams in the delivery of secure and reliable ICT services.

Key Responsibilities

  1. Provide end user support and training users on effective and efficient use of ICT facilities.

  2. Manage and administer Domain Policies, DNS, DHCP, Active Directory and Security.

  3. Install, configure, administer and manage the Corporate Antivirus System and ensure the appropriate level of anti-virus protection.

  4. Manage computer hardware preventive maintenance and repairs.

  5. Develop computer hardware specifications and evaluations.

  6. Install, manage and monitor the money transfer systems – MoneyGram, RIA and Western Union.

  7. Manage user accounts, file-access and resource privileges.

  8. Implement and maintain FTP, SFTP and Web servers.

  9. Manage SAN storage and virtualization.

  10. Install and manage security certificates.

  11. Monitor and report on server health.

  12. Develop and implement ICT infrastructure strategies aligned with organizational objectives.

  13. Manage enterprise servers, storage systems, virtualization platforms, and operating systems.

  14. Ensure optimum performance, availability, and capacity of ICT infrastructure.

  15. Administer Windows, Linux, and other enterprise platforms.

  16. Manage Active Directory, identity management, and access control systems.

  17. Oversee database and application hosting environments.

  18. Maintain system documentation and configuration records.

  19. Implement infrastructure security controls and best practices.

  20. Manage endpoint security, firewalls, intrusion detection/prevention systems, and vulnerability management.

  21. Conduct infrastructure risk assessments and support compliance audits.

  22. Ensure adherence to organizational ICT security policies and regulatory requirements.

  23. Develop and maintain backup and disaster recovery solutions.

  24. Test business continuity and disaster recovery plans regularly.

  25. Manage cloud infrastructure services and hybrid environments.

  26. Monitor cloud resource utilization, costs, and performance.

  27. Coordinate ICT infrastructure procurement activities.

  28. Manage relationships with ICT vendors, suppliers, and service providers.

  29. Monitor SLA compliance and contract performance.

  30. Lead infrastructure implementation and upgrade projects.

  31. Participate in digital transformation initiatives.

  32. Prepare project plans, budgets, and progress reports.

  33. Supervise ICT Officers in infrastructure management.

  34. Recommend infrastructure improvements and modernization initiatives.

Knowledge, Skills & Abilities

  1. A minimum of nine (9) years relevant work experience, three years served at the grade of Senior ICT Officer in the public service or private sector.

  2. Bachelor’s degree in any of the following fields: Computer Science, Information Technology or other equivalent qualifications from a recognized institution.

  3. Professional ICT qualification in either Microsoft Certified Professional certifications, VMware VCP, ITIL, AWS, Azure, or Google Cloud certifications.

  4. Management course lasting not less than four (4) weeks from a recognized institution.

  5. Proficiency in computer applications.

  6. Good interpersonal and communication skills.

  7. Possess high levels of integrity, ethical standards and professionalism.

  8. Ability to drive change, emotional intelligence and attention to detail.

  9. Independence and objectivity.

  10. Knowledge of Active Directory administration.

  11. General desktop support knowledge, including hardware, software, networking, virtualization and cloud concepts.

  12. Ability to prioritize and execute tasks in a high-pressure environment and make sound decisions in emergency situations.

  13. Highly self-motivated, with good analytical and problem-solving abilities.

  14. Strong customer service orientation.

  15. Experience working in a team-oriented, collaborative environment.

  16. Fulfilled the requirements of Chapter Six of the Constitution.

Apply

ICT Officer/Network Administration, Job Grade PB 7: KPOSB/ICT/3/26

Position Function

The Network Administrator is primarily responsible for the management of corporate network infrastructure, including corporate firewalls, routers and switches. He/she is responsible for configuring, maintaining, supporting and optimizing all new and existing network hardware, software and communication links. He/she also troubleshoots network performance issues, analyzes network traffic and provides capacity planning solutions.

Key Responsibilities

  1. Develop, test and continuously review a comprehensive disaster recovery framework and architecture for the Bank’s networks, maintaining comprehensive documentation where required.

  2. Collaborate with the team lead to assess near- and long-term network capacity needs.

  3. Prepare detailed network specifications, including diagrams, charts, equipment configurations, recommended technologies, network mapping, processes and service records.

  4. Participate in the evaluation of technical specifications for network and security-related devices or solutions.

  5. Perform general network administration, including user management, access control and security.

  6. Deploy and develop methodologies for testing network performance and providing network performance statistics and reports.

  7. Select, deploy and utilize appropriate tools for reporting IP traffic on the network.

  8. Support new and existing equipment, hardware and software upgrades relating to network equipment.

  9. Manage and administer active corporate network infrastructure, including corporate firewalls, routers and switches; install additional servers, keep the network operating system up to date and oversee the maintenance of network workstations.

  10. Manage and ensure optimal operation of all network hardware and equipment, including routers, switches and firewalls; diagnose network problems and outages.

  11. Manage and ensure optimal operation of all network hardware and equipment for the Unified Communication and Collaboration System, diagnosing network problems and outages.

  12. Manage and ensure the effectiveness of security solutions, including firewalls, VPNs and IDS/IPS systems.

  13. Configure all networks to ensure their smooth and reliable operation in fulfilling organizational objectives and processes.

  14. Receive, prioritize and respond to incoming work order calls and/or emails regarding equipment and/or connectivity problems.

  15. Assist in supporting corporate infrastructure servers such as email, calendaring, web, licensing and document management systems.

  16. Perform network configuration backups and recovery periodically.

  17. Manage Internet access filtering, email filtering and related monitoring systems.

  18. Monitor and maintain the Postbank wide area network (WAN) to ensure connectivity availability for all system users.

  19. Liaise with contracted service providers in reporting and resolving branch connectivity issues.

  20. Coordinate and control network access and usage.

  21. Recommend changes to improve systems and network configurations and determine hardware or software requirements related to such changes.

  22. Monitor network performance to determine whether adjustments need to be made and identify where future changes will be required.

  23. Provide leadership in maintaining, troubleshooting and upgrading the core network infrastructure. This includes core network switches, end switches, network drawings, maintaining current designs and developing future design requirements.

  24. Monitor the performance of ICT network equipment.

  25. Maintain Local Area Network (LAN) and Wide Area Network (WAN) components.

Knowledge, Skills & Abilities

  1. At least three (3) years of relevant work experience at the grade of ICT Officer II or in a comparable position.

  2. Bachelor’s degree in any of the following fields: Information Technology, Computer Science, Business IT, Software Engineering, ICT Project Management, Computer Engineering or equivalent qualifications from a recognized institution.

  3. Certification in either Cisco Certified Network Associate (CCNA), CCNP, Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP) or equivalent qualification from a recognized institution.

  4. Knowledge of operating systems, desktop products and application systems.

  5. Strong troubleshooting skills.

  6. Fulfilled the requirements of Chapter Six of the Constitution.

Apply

ICT Officer/Application Development & System Analyst, Job Grade PB 7: KPOSB/ICT/4/26

Position Function

The Application Developer will build and customize applications, systems and interfaces to support the Bank’s digital platform, internal processes and other departments. The jobholder will provide technical guidance and evaluate software applications used in the Bank.

Key Responsibilities

  1. Analyse business requirements and design, test and develop software to meet requirements.

  2. Monitor operational efficiency of existing application systems and recommend technical solutions.

  3. Customise and implement acquired software to enable automated functionality.

  4. Analyse user needs and software requirements to determine feasibility of design within time and cost constraints.

  5. Modify existing applications to correct errors, allow adaptation to new hardware or improve performance.

  6. Ensure application controls are incorporated during software design to check risk exposures.

  7. Conduct regular tests of applications to ensure that required functionalities and security parameters are in place.

  8. Respond to security incidents promptly to avoid adverse consequences to the business.

  9. Work with assigned vendors to implement business systems that meet the Bank’s and users’ needs, and maintain existing applications through daily application monitoring.

  10. Verify the integrity and availability of all applications by reviewing system and application logs.

  11. Design, develop and implement business applications and products for the Bank according to existing corporate software development standards.

  12. Train users on the systems and prepare user documentation during system development.

  13. Carry out integrations and upgrades of various systems in conjunction with consultants.

  14. Carry out integrations with partner systems.

  15. Support the Bank’s digital delivery channels.

  16. Maintain the availability and reliability of applications to ensure that ICT can effectively meet service targets in accordance with planned business objectives.

  17. Participate in gathering and/or understanding the organization’s business requirements to be addressed or impacted by the supplier’s outsourced services.

  18. Ensure proper testing occurs for all application changes released into production environments, as assigned by Line Management.

Knowledge, Skills & Abilities

  1. At least three (3) years of relevant work experience at the grade of ICT Officer II or in a comparable position.

  2. Bachelor’s degree in any of the following fields: Information Technology, Computer Science, Business IT, Software Engineering, ICT Project Management, Computer Engineering or other relevant and equivalent qualifications from a recognized institution.

  3. Professional ICT certification in Java, PL/SQL and either JavaScript/jQuery/AJAX, Object-Oriented PHP, Python, HTML5/CSS3, Adobe CS or equivalent qualifications from a recognized institution.

  4. Knowledge of JSON, XML, SQL development, relational database management systems (RDBMS) such as Oracle, SQL Server and DB2, the JEE platform and Linux, or equivalent qualifications from a recognized institution.

  5. Ability to facilitate technical discussions with other groups to resolve issues.

  6. Fulfilled the requirements of Chapter Six of the Constitution.

Apply

Assistant Manager/Information Systems Audit, Job Grade PB 4: KPOSB/IA/1/26

Position Function

The Information Systems Auditor is responsible for examining, evaluating and verifying the Bank’s information systems, technology processes, procedures, internal controls and data to provide independent assurance on the adequacy and effectiveness of ICT governance, risk management and controls.he/she will plans executes and reports on risk-based information systems audits covering the Bank’s core banking system and other critical applications, digital and agency banking platforms, cybersecurity, data governance, technology projects, business continuity and disaster recovery, and third-party technology services to ensure confidentiality, integrity, availability, security and compliance of the Bank’s information assets.

Key Responsibilities

  1. Ensure through planning that there are adequate internal controls in the systems, that there is adequate protection of data and ensure its integrity
  2. Plan, execute and lead information security audits across the bank;
  3. Asses the adequacy and effectiveness of ICT governance, technology risk management, internal controls and information-security arrangements;
  4. Inspect and evaluate information systems, applications, databases, networks, operating systems, technology infrastructure and related security controls;
  5. Review the Bank’s core banking system, and other critical applications for adequacy of application controls, interfaces, configurations, data integrity, security and availability;
  6. Review controls over digital, mobile, agency banking and other electronic channels, including transaction processing, system availability, customer-data protection and fraud-prevention controls;
  7. Evaluate the efficiency, effectiveness and compliance of information systems and technology operations with Bank policies, applicable laws, regulations, regulatory guidelines and recognized professional standards;
  8. Review identity and access-management controls, including user administration, privileged access, segregation of duties, authentication and periodic access reviews;
  9. Review system acquisition, development, implementation, integration, migration and change-management processes for adequate governance, authorization, testing, security and controls;
  10. Provide independent assurance over ICT and digital-transformation projects, including project governance, system implementation, data migration and post-implementation controls;
  11. Review controls over data governance, quality, integrity, privacy, classification, retention, backup and recovery;
  12. Assess business continuity, ICT disaster recovery, system resilience, backup arrangements and recovery testing;
  13. Review third-party, outsourced, vendor and cloud technology arrangements for information-security, data-protection, service-continuity and related technology risks;
  14. Review technology incident-management processes, including identification, escalation, investigation, root-cause analysis and corrective actions;
  15. Execute and document audit procedures and ensure findings and conclusions are supported by sufficient and appropriate audit evidence;
  16. Apply Computer-Assisted Audit Techniques (CAATs), data analytics and other technology-enabled audit tools to analyse data, identify anomalies, test controls and enhance audit coverage;
  17. Perform forensic investigative systems audits as may be required;
  18. Develop rigorous best practice recommendations to improve system security on all levels
  19. Work with management to ensure security recommendations comply with the banks operations
  20. Collaborate with departments to improve security compliance mange risk and bolster effectiveness
  21. Prepare reports of system audits findings in addition to providing support for sophisticated data analysis and extraction through computer assisted audit techniques (CAATs);
  22. Monitor and validate implementation of agreed audit actions and escalate overdue, recurring or inadequately addressed issues;

Knowledge Skills & Abilities

i) At least twelve (12) years’ relevant work experience in the Public Service or Private Sector, three (3) of which must have been in a supervisory position;

ii) Master’s degree in either Accounting, Finance or Business Administration (Finance and Accounting option), Information Technology, Information Systems, Computer Science, Cybersecurity or equivalent qualification from a recognized institution;

iii) Bachelor’s degree in either Accounting, Finance, Business Administration (Finance and Accounting option), Information Technology, Information Systems, Computer Science or equivalent qualification from a recognized institution;

iv) Certified Information Systems Auditor (CISA) or Certified Information Security Manager (CISM) or equivalent relevant professional qualification from a recognized professional body;

v) Registered member of ISACA or equivalent relevant recognized professional body in good standing;

vi) Attended a Management Course lasting not less than four (4) weeks from a recognized institution;

vii) Demonstrated knowledge and experience in information systems auditing

viii) Knowledge of core banking systems, digital financial services, application controls, databases, networks and technology infrastructure;

ix) Knowledge of applicable banking, cybersecurity, data-protection and ICT regulatory requirements and relevant professional frameworks;

x) Demonstrated ability to apply CAATs, data analytics and technology-enabled audit tools;

xi) Strong numerical, analytical, problem-solving, communication and report-writing skills;

xii) Ability to exercise sound professional judgment and evaluate audit evidence;

xiii) Ability to manage priorities, supervise assignments and work collaboratively with multidisciplinary teams;

xiv) High levels of integrity, ethical standards, professionalism, independence and objectivity;

xv) Ability to drive change and continuous improvement;

xvi) Emotional intelligence and effective stakeholder-management skills;

xvii) Proficiency in computer applications;

xviii) Shown merit and ability as reflected in work performance and results; and

xix) Fulfilled the requirements of Chapter Six of the Constitution of Kenya.

Apply

Pharmacist Job Grade PB 7, KPOSB/HR&ADMIN/1/26

Position Function

The Pharmacist is responsible for ensuring the safe, effective, and appropriate use of medicines by dispensing prescriptions, providing pharmaceutical care and medication guidance, managing medicine procurement and inventory, maintaining accurate pharmaceutical records, and ensuring compliance with relevant healthcare standards and pharmaceutical regulations.

Key Responsibilities

  1. Formulate and develop policies and programs for effective management of pharmacy services.

  2. Dispense and compound drugs.

  3. Check prescriptions for suitability and accuracy and, where necessary, contact the prescriber to resolve problems concerning safety, appropriateness and rational use of drugs.

  4. Provide drug information to medical staff on dosages, adverse effects, appropriate dosage forms and other aspects of medicine use.

  5. Maintain records of patients’ drug histories and participate in decision-making on appropriate treatments.

  6. Discuss treatments with patients and provide information on medicines.

  7. Ensure medicines are stored appropriately and securely, receive drugs and verify that the correct drugs are supplied.

  8. Keep up to date with new developments in the field of human medicines, contribute to research and development, and participate in drug market surveillance.

  9. Develop guidelines for drug use within the staff clinic and regularly update the drug formulary.

  10. Provide information and statistics on expenditure on drugs and effectively implement the Bank’s drugs budget.

  11. Participate in the procurement of drugs and medical consumables.

  12. Make ENT and skin preparations for patients in accordance with the British Pharmacopoeia.

  13. Liaise with drug suppliers to exchange short-expiry drugs, replace expired ones and coordinate the destruction of expired drugs with the Pharmacy and Poisons Board.

  14. Participate in the staff pharmacy audit and manage the pharmacy and drug store inventory as prescribed in the procedures.

  15. Report adverse events and participate in pharmacovigilance.

  16. Maintain statutory and ethical records/registers, monitor patients on long-term medications, and validate drug invoices and other purchases on petty cash.

Knowledge, Skills & Abilities — Person Specifications

  1. At least six (6) years of relevant work experience, with three (3) years served at the grade of Pharmaceutical Technologist II or in a comparable position.

  2. Higher Diploma in Pharmaceutical Technology, Pharmacy or equivalent qualification from a recognized institution.

  3. Diploma in Pharmaceutical Technology, Pharmacy or equivalent qualification from a recognized institution.

  4. Registered with the Pharmacy and Poisons Board with a current practising licence.

  5. Attended a Supervisory Course lasting not less than two (2) weeks from a recognized institution.

  6. Proficiency in computer applications.

  7. Good interpersonal and communication skills.

  8. Ability to manage priorities and work collaboratively in a team.

  9. High levels of integrity, ethical standards and professionalism.

  10. Emotional intelligence, independence, objectivity and attention to detail.

  11. Knowledge of health laws, standard medical practices and procedures, pharmacy policies and legislative requirements.

  12. Experience in providing medical services, pharmacy management and patient care.

  13. Experience in drug supplies and management, and handling medical schemes.

  14. Knowledge of basic accounting and administration.

  15. Shown merit and ability as reflected in work performance and results.

  16. Fulfil the requirements of Chapter Six of the Constitution.

Apply