ICT Risk Officer

SOKIFY JOB POSTING Position: ICT Risk Officer Organization: The Co-operative Bank of Kenya Overview The Co-operative Bank of Kenya is seeking a detail-oriented, self-motivated professional with a genuine passion for Information Security to join our ICT Risk and Control Team. If you thrive in identifying vulnerabilities, strengthening security defenses, and fostering a culture of data protection, we want to hear from you. Reporting to the Head of ICT Risk and Control, you will play a critical role in safeguarding the Bank's digital assets and ensuring our systems remain secure, compliant, and resilient against evolving threats. Key Responsibilities In this role, you will be responsible for: Conducting comprehensive ICT risk assessments across Co-operative Bank systems and recommending robust IT security controls to mitigate potential risks Continuously monitoring and enhancing existing ICT controls to maintain effectiveness and compliance standards Reviewing systems at all operational levels including servers, applications, databases, and network devices to identify gaps and recommend remediation strategies Delivering ongoing assurance on ICT risk management across the Bank's technology infrastructure Evaluating ICT controls across all operating systems, applications, database management systems, and networks to ensure consistent regulatory and internal policy compliance Building a culture of Information Security awareness by delivering guidance, consultation, and targeted awareness programs throughout the organization Proactively identifying emerging threats and vulnerabilities while coordinating with the ICT department to develop and implement effective mitigation measures Managing and maintaining ICT risk registers Executing periodic vulnerability assessments and penetration tests on Bank systems and technology infrastructure, documenting findings and providing actionable remediation recommendations Essential Qualifications and Experience Bachelor's degree in Information Technology, Information Security, Computer Science, or related field Professional IT Security certification such as CISA, CISM, CEH, or equivalent recognized credentials Minimum 5 years of professional experience in an ICT risk or information security role within a highly computerized environment Demonstrated experience implementing Information Security Standards including ISO 27001 and COBIT frameworks Strong understanding of ICT risk management and systems security control processes Knowledge of Information Systems Architecture and operational best practices Familiarity with audit methodologies and risk assessment approaches Hands-on experience with Windows Enterprise servers or UNIX systems administration Solid knowledge of modern cybersecurity practices including Identity and Access Management, Data Protection, and Penetration Testing Previous experience in a banking IT environment is advantageous Application Instructions To apply, click the "Apply" button and submit a detailed Curriculum Vitae along with your application. Please reference job code "IRO/CEO/2026" in your submission. Applications must be received by 5 PM on 24th July 2026.