Are you passionate about cybersecurity, ICT infrastructure protection and safeguarding critical business systems? Do you have the expertise to identify vulnerabilities, strengthen security controls and respond to emerging cyber threats?

Co-op Bank is seeking a proactive and technically skilled Applications and Infrastructure Security Officer to strengthen the Bank’s information security posture. The successful candidate will play a critical role in managing security solutions, monitoring systems for suspicious activity, enforcing security policies and supporting secure technology implementations to protect the Bank’s systems, data and digital services.

The Role

Specifically, the successful jobholder will be required to:

• Manage and maintain ICT security solutions, including Web Application Firewalls, anti-malware, Data Loss Prevention (DLP), endpoint encryption, Privileged Access Management (PAM) and Multi-Factor Authentication (MFA).
• Coordinate the review and resolution of vulnerability assessment findings, recommend appropriate security enhancements and ensure security assessments are completed for new products, innovations, infrastructure upgrades and other ICT initiatives.
• Analyse system and application logs to identify indicators of compromise, suspicious user activities and security anomalies. Enforce security policies, configuration baselines and least-privilege access controls across business applications and infrastructure.
• Support the identification, logging, investigation and resolution of security incidents. Coordinate root cause analysis, monitor system availability and ensure appropriate corrective and preventive measures are implemented.
• Research, implement and maintain security tool integrations to enhance threat visibility, improve detection capabilities and reduce incident response times.
• Develop security dashboards, reports and metrics; monitor privileged user activities across servers, systems and databases; and engage ICT teams to communicate security risks, policy gaps and recommended improvements.
• Translate information security risks into practical business implications and provide security guidance to ICT teams and project stakeholders to support secure, reliable and compliant technology operations.

Skills, Competencies and Experience

The successful candidate will be required to have the following skills and competencies:

• A bachelor’s degree in Information Technology, Computer Science or a related IT discipline. A business-related degree will also be considered where supported by relevant IT security qualifications.
• Relevant professional certifications such as CCNA, CISA, CISSP, CCIE Security, CEH, DevSecOps, CRTP, CRTE or other recognised cybersecurity certifications.
• Good knowledge of enterprise cybersecurity, ICT risk management and information security controls.
• Practical experience or working knowledge of vulnerability assessments, security assessments, penetration testing methodologies and associated tools.
• Understanding of common cybersecurity threats, threat intelligence sources and emerging security risks.
• Good knowledge of ICT infrastructure, network architecture, operating systems and infrastructure components.
• Familiarity with software development environments, application security (iOS & Android) and database technologies.
• Practical experience conducting security architecture reviews and providing security assurance for new systems, technology projects and significant changes to existing platforms.
• Strong analytical, communication, reporting and stakeholder management skills.

How to Apply

If you have the expertise and passion to protect critical systems and strengthen our cybersecurity capabilities, we invite you to apply.

Forward your application letter enclosing a detailed Curriculum Vitae to jobs@co-opbank.co.ke, indicating the job reference number AISO/IID/2026, by 11 November 2026.