Job Openings at Postbank

Career Opportunities, Jobs in Kenya, Lates Jobs,

Assistant Manager Information Security Systems

About the role

• Responsible for providing leadership and coordination to the IT Security and monitoring computer networks and ICT infrastructure against cyber-attacks, security threats or unauthorized access to safeguard the Bank’s data and knowledge base. Ensures the integrity, availability, confidentiality and authenticity of all information assets of the Bank.

Key responsibilities

• Review security reports that arise from security incidents and ensure that proper investigations have been carried out and remedial actions put in place
• Ensure the Bank complies with local regulations e.g. encryption regulations and privacy laws
• Enforce compliance to ICT Security policy of the Bank
• Ensure changes made to ICT systems strictly adhere to change management policy of the Bank and do not affect availability of services
• Oversee the development, update, communicate and publish the Information Security Policy and other operational security policies
• Review the Bank’s ICT security controls and security strategies while ensuring that the procedures for operating and maintaining those controls are in place
• Ensure that the Confidentiality, Integrity and Availability of services are maintained at the levels agreed in the Operation Level Agreements (OLAs)
• Ensure that all access to services by external partners and suppliers is subject to contractual agreements and responsibilities (e.g. non-disclosure agreements) and are closely monitored
• Ensure all changes to access are assessed for impact on all security aspects; including information security policy and controls
• Oversee the ICT security risk analysis and risk management in coordination with Risk and ICT Service Continuity Management functions
• Oversee the Bank’s ICT security awareness program to ensure the technology organisation employees understand the risks / threats to their business, their responsibilities and how to comply with policies
• Manage Coordinate the development and testing of the Bank’s Disaster Recovery Plans (DRPs)
• Oversee the design, development and delivery of enterprise level identity and access management solutions
• Ensue that there is a strategy for Identity and Access Management services that are robust and scalable to support the employees, contractors, partners and vendors
• Interact with other department to ensure that staff have the correct level of access to systems and applications
• Provide security services to and complement the information technology architecture while integrating with the business global architecture
• Oversee the analysis, design, building, testing, and deployment activities related to IAM components
• Act as trusted security architecture advisor to provide strategic direction in leading activities in support of Identity Lifecycle management tools and technologies and enterprise security objectives
• Review solutions and recommendations for issues caused by process challenges, emerging threats and technology changes
• Manage and support security infrastructure systems & devices (including Access Control Systems, Patch Management Systems, Web Application Firewalls, Database Security, Authentication Systems etc.)
• Oversee the development and implementation of an ICT Risk Management Framework and Security Control Framework
• Review and recommend security controls & configurations on systems, databases and network infrastructure
• Perform hardening of various operating, applications and database systems
• Design and implement ICT security architecture and proactively patching and implementing secure configurations and protocols on ICT systems
• Provide security guidance during technology projects, systems deployment, upgrades and changes
• Enforce the Bank’s Information Security policies on ICT systems and equipment as well as develop security solutions to mitigate against identified security vulnerabilities
• Liaise with various stakeholders in the Bank and external partners in enforcing ICT security standards for ICT infrastructure

Qualifications and requirements

• At least twelve (12) years relevant work experience in Public service or Private sector, three (3) of which must be in a supervisory level
• Master’s Degree in Information Technology, Computer Science, Business IT, Software Engineering, ICT Project Management, Computer Engineering or equivalent qualification from a recognized Institution
• Bachelor’s Degree in Information Technology, Computer Science, Business IT, Software Engineering, ICT Project Management, Computer Engineering or equivalent qualification from a recognized Institution
• Certification in CCNA/CCNP/CISA/CISM/CISSP or other equivalent security certifications/qualifications from a recognized institution
• Management course of not less than four (4) weeks from a recognized institution
• Knowledge of trends in ICT in the banking and financial services sectors
• Good understanding of business support services and their related technologies
• Experience in managing administering systems and infrastructure and managing all business support software and ICT/communications infrastructure
• In depth knowledge of server, clients, mobile operating systems and RDBMS with demonstrated understanding of security architecting of information systems
• In depth knowledge of tools used to secure and test security of information systems
• Demonstrated knowledge of threats and attack vectors as well as incident response and management
• Strong Vulnerability management experience
• Solid knowledge of security standards, ICT security regulatory and compliance regulations and standards
• Knowledge of various programming and scripting languages (e.g., .Net, Java, Perl, C#)
• Knowledge of and practical experience with various Internet protocols (e.g., DNS, TCPIP, SMTP, HTTP, SSL)
• Strong understanding and knowledge of ICT risk assessment, risk procedures, security assessment, vulnerability management, penetration testing
• Possess high levels of integrity, ethical standards and professionalism
• Fulfilled the requirements of Chapter Six of the Constitution

Assistant Manager Information Systems Audit

About the role

• Responsible for examining, evaluating and verifying the Bank’s information systems, technology processes, procedures, internal controls and data to provide independent assurance on the adequacy and effectiveness of ICT governance, risk management and controls. Plans, executes and reports on risk-based IS audits covering core banking systems, digital/agency platforms, cybersecurity, data governance, technology projects, and disaster recovery.

Key responsibilities

• Ensure through planning that there are adequate internal controls in the systems, that there is adequate protection of data and ensure its integrity
• Plan, execute and lead information security audits across the bank
• Asses the adequacy and effectiveness of ICT governance, technology risk management, internal controls and information-security arrangements
• Inspect and evaluate information systems, applications, databases, networks, operating systems, technology infrastructure and related security controls
• Review the Bank’s core banking system, and other critical applications for adequacy of application controls, interfaces, configurations, data integrity, security and availability
• Review controls over digital, mobile, agency banking and other electronic channels, including transaction processing, system availability, customer-data protection and fraud-prevention controls
• Evaluate the efficiency, effectiveness and compliance of information systems and technology operations with Bank policies, applicable laws, regulations, regulatory guidelines and recognized professional standards
• Review identity and access-management controls, including user administration, privileged access, segregation of duties, authentication and periodic access reviews
• Review system acquisition, development, implementation, integration, migration and change-management processes for adequate governance, authorization, testing, security and controls
• Provide independent assurance over ICT and digital-transformation projects, including project governance, system implementation, data migration and post-implementation controls
• Review controls over data governance, quality, integrity, privacy, classification, retention, backup and recovery
• Assess business continuity, ICT disaster recovery, system resilience, backup arrangements and recovery testing
• Review third-party, outsourced, vendor and cloud technology arrangements for information-security, data-protection, service-continuity and related technology risks
• Review technology incident-management processes, including identification, escalation, investigation, root-cause analysis and corrective actions
• Execute and document audit procedures and ensure findings and conclusions are supported by sufficient and appropriate audit evidence
• Apply Computer-Assisted Audit Techniques (CAATs), data analytics and other technology-enabled audit tools to analyse data, identify anomalies, test controls and enhance audit coverage
• Perform forensic investigative systems audits as may be required
• Develop rigorous best practice recommendations to improve system security on all levels
• Work with management to ensure security recommendations comply with the banks operations
• Collaborate with departments to improve security compliance manage risk and bolster effectiveness
• Prepare reports of system audits findings in addition to providing support for sophisticated data analysis and extraction through computer assisted audit techniques (CAATs)
• Monitor and validate implementation of agreed audit actions and escalate overdue, recurring or inadequately addressed issues

Qualifications and requirements

• At least twelve (12) years’ relevant work experience in Public Service or Private Sector, three (3) of which must have been in a supervisory position
• Master’s degree in Accounting, Finance, Business Administration (Finance and Accounting option), Information Technology, Information Systems, Computer Science, Cybersecurity or equivalent qualification from a recognized institution
• Bachelor’s degree in Accounting, Finance, Business Administration (Finance and Accounting option), Information Technology, Information Systems, Computer Science or equivalent qualification from a recognized institution
• Certified Information Systems Auditor (CISA) or Certified Information Security Manager (CISM) or equivalent relevant professional qualification
• Registered member of ISACA or equivalent relevant recognized professional body in good standing
• Attended a Management Course lasting not less than four (4) weeks from a recognized institution
• Demonstrated knowledge and experience in information systems auditing
• Knowledge of core banking systems, digital financial services, application controls, databases, networks and technology infrastructure
• Knowledge of applicable banking, cybersecurity, data-protection and ICT regulatory requirements and relevant professional frameworks
• Demonstrated ability to apply CAATs, data analytics and technology-enabled audit tools
• Strong numerical, analytical, problem-solving, communication and report-writing skills
• Fulfilled the requirements of Chapter Six of the Constitution of Kenya

Principal ICT Officer/Infrastructure Management

About the role

• Provides strategic leadership, planning, governance, and oversight of the organization’s ICT infrastructure environment. Ensures availability, security, resilience, performance, and scalability of technology platforms supporting business operations and digital transformation initiatives.

Key responsibilities

• Provide end user support and training users on effective and efficient use of ICT facilities
• Manage and administer Domain Policies, DNS, DHCP, active directory and Security
• Install, configure, administer and manage the Corporate Antivirus System and ensure the appropriate level of anti-virus protection
• Manage computer hardware preventive maintenance and repairs
• Develop computer hardware specifications and evaluations
• Install, Manage and monitor the money transfer systems – Money gram, RIA, Western union
• Manage user accounts, file-access and resource privileges
• Implement and maintenance of FTP, SFTP and Web servers
• Management of SAN storage and virtualization
• Installation and management of security certificates
• Monitor and report on server health
• Develop and implement ICT infrastructure strategies aligned with organizational objectives
• Manage enterprise servers, storage systems, virtualization platforms, and operating systems
• Ensure optimum performance, availability, and capacity of ICT infrastructure
• Administer Windows, Linux, and other enterprise platforms
• Manage Active Directory, identity management, and access control systems
• Oversee database and application hosting environments
• Maintain system documentation and configuration records
• Implement infrastructure security controls and best practices
• Manage endpoint security, firewalls, intrusion detection/prevention systems, and vulnerability management
• Conduct infrastructure risk assessments and support compliance audits
• Ensure adherence to organizational ICT security policies and regulatory requirements
• Develop and maintain backup and disaster recovery solutions
• Test business continuity and disaster recovery plans regularly
• Manage cloud infrastructure services and hybrid environments
• Monitor cloud resource utilization, costs, and performance
• Coordinate ICT infrastructure procurement activities
• Manage relationships with ICT vendors, suppliers, and service providers
• Monitor SLA compliance and contract performance
• Lead infrastructure implementation and upgrade projects
• Participate in digital transformation initiatives
• Prepare project plans, budgets, and progress reports
• Supervise ICT Officers infrastructure management
• Recommend infrastructure improvements and modernization initiatives

Qualifications and requirements

• Minimum of nine (9) years relevant work experience, three (3) years served at grade of Senior ICT Officer in public service or private sector
• Bachelor’s degree in Computer Science, Information Technology or equivalent qualification from a recognized Institution
• Professional ICT qualification in Microsoft Certified Professional, VMware VCP, ITIL, AWS, Azure, or Google Cloud certifications
• Management course lasting not less than four (4) weeks from a recognized institution
• Proficiency in computer applications
• Good interpersonal and communication skills
• Possess high levels of integrity, ethical standards and professionalism
• Knowledge of Active directory administration
• General desktop support knowledge including hardware, software, networking, virtualization and cloud concepts
• Fulfilled the requirements of Chapter Six of the constitution

ICT Officer/Network Administration

About the role

• Primarily responsible for the management of corporate network infrastructure including corporate firewalls, routers and switches. Configures, maintains, supports and optimizes network hardware, software and communication links, and troubleshoots network performance issues.

Key responsibilities

• The development, testing and continuous review of a comprehensive disaster recovery framework and architecture for the Bank’s networks and maintaining comprehensive documentation where required
• Collaborate with the team lead to asses near and long-term network capacity needs
• Prepare detailed network specifications, including diagrams, charts, equipment configurations, or recommended technologies, network mapping, processes, and service records
• Participate in evaluation of the technical specification of network and security related devices or such solutions
• Perform general network administration including user management, access control and security
• Deploy and develop methodologies for testing network performance and providing network performance statistics and reports
• Select, deploy and utilize appropriate tools for reporting of IP traffic on the network
• Support new and existing equipment, hardware and software upgrades relating to network equipment
• Manage and administer active corporate network infrastructure including corporate firewalls, routers and switches; installing additional servers, keeping the network operating system up to date and oversee the maintenance of network workstations
• Manage and ensure optimal operation of all network hardware and equipment including routers, switches, and Firewalls; diagnose network problems and outages
• Manage and ensure optimal operation of all network hardware and equipment of Unified communication and collaboration system and diagnosing network problems and outages
• Manage and ensure effectiveness of security solutions, including firewalls VPNs and IDS/IPS systems
• Configure all networks to ensure their smooth and reliable operation for fulfilling organizational objectives and processes
• Receive, prioritize, and respond to incoming work order calls, and /or emails regarding equipment and /or connectivity problems
• Assist in support of corporate infrastructure servers such as email, calendaring, web, license, document management, etc
• Perform network configurations backup and recovery periodically
• Manage Internet access filtering, email filtering and related monitoring systems
• Monitor and maintain the Postbank’s wide area network (WAN) to ensure connectivity availability to all system users
• Liaise with contracted service providers in reporting and resolving branch connectivity issues
• Coordinate and control the network access and usage
• Recommend changes to improve systems and network configurations and determine hardware or software requirements related to such changes
• Monitor network performance to determine whether adjustments need to be made, and to determine where changes will need to be made in the future
• Provide the lead and in maintain, troubleshooting, and upgrade the core network infrastructure
• Monitor the performance of ICT Network equipment
• Maintain Local Area Network and Wide Area Network components

Qualifications and requirements

• At least three (3) years relevant work experience at the grade of ICT Officer II or comparable position
• Bachelor’s degree in Information Technology, Computer Science, Business IT, Software Engineering, ICT Project Management, Computer Engineering or equivalent
• Certification in CCNA, CCNP, CISA, CISSP or equivalent qualification from a recognized institution
• Knowledge of operating systems, desktop products, and application systems
• Strong troubleshooting skills
• Fulfilled the requirements of Chapter Six of the constitution

ICT Officer/Application Development & System Analyst

About the role

• Builds and customizes applications, systems and interfaces to support the bank’s digital platform, internal processes, and other departments. Provides technical guidance and evaluates software applications used in the bank.

Key responsibilities

• Analyse business requirements and designing, testing and developing software to meet requirements
• Monitor operational efficiency of existing application systems and recommend technical solutions
• Customise and implement acquired software to enable automated functionality
• Analyse user needs and software requirements to determine feasibility of design within time and cost constraints
• Modify existing Applications to correct errors, allowing it to adapt to new hardware or to improve its performance
• Ensure application controls are incorporated during design of the software in order to check on risk exposures
• Conduct regular test of Applications to ensure set functionalities and security parameters are in place
• Timely response to security incidences to avoid adverse consequences to the business
• Work with assigned vendors to implement business systems that meet the banks/user needs and maintaining the applications already developed by daily applications monitoring
• Verify the integrity and availability of all applications reviewing system and application logs
• Design, develop and implement business applications/products for the Bank according to existing corporate software development standards
• Train users on the systems and preparing user documentation during the development of systems
• Carry out Integrations and upgrades of various systems in conjunction with consultants
• Carry out integrations with partner systems
• Support the banks digital delivery Channels
• Maintain the availability and reliability of applications to ensure that ICT can effectively meet service targets in accordance with planned business objectives
• Participate in gathering and /or understanding the organizations business requirements to be addressed /impacted by the supplier’s outsourced
• Ensure that proper testing occurs for all Application changes released into the production environments as assigned to you by Line Management

Qualifications and requirements

• At least three years relevant work experience at the grade of ICT Officer II or comparable position
• Bachelor’s degree in Information Technology, Computer Science, Business IT, Software Engineering, ICT Project Management, Computer Engineering or other relevant qualifications
• Professional ICT certification in Java, PL/SQL and either JavaScript / JQuery / AJAX, Object Oriented PHP, Python, HTML5/CSS3, Adobe CS
• Knowledge in JSON, XML, SQL, RDBMS (Oracle, SQL Server, DB2), JEE platform, and Linux
• Ability to facilitate technical discussions with other groups to resolve issues
• Fulfilled the requirements of Chapter Six of the constitution

Pharmacist

About the role

• Responsible for ensuring the safe, effective, and appropriate use of medicines by dispensing prescriptions, providing pharmaceutical care and medication guidance, managing medicine procurement and inventory, maintaining accurate pharmaceutical records, and ensuring compliance with relevant healthcare standards.

Key responsibilities

• Formulate and develop policies and programs for effective management of pharmacy services
• Dispense and compound drugs
• Check prescriptions for suitability and accuracy and where necessary contacting the prescriber to resolve any problems concerning safety, appropriateness and rational use of drugs
• Provide drug information to medical staff on dosages, adverse effects, appropriate dosage forms and any other aspects of medicine use
• Maintain records of patient’s drug histories and participating in decision-making on appropriate treatments
• Discuss treatments with and provide information on medicines to patients
• Ensure medicines are stored appropriately and securely and receive drugs and verify correct drugs are supplied
• Keep up to date with new developments in the field of human medicines, and contributing to research and development and drug market surveillance
• Develop guidelines for drug use within the staff clinic and regularly update drug formulary
• Provide information and statistics on expenditure on drugs and implement effectively the Bank’s drugs budget
• Participate in the procurement of drugs and medical consumables
• Making ENT and skin preparations for patients as per British Pharmacopoeia
• Liaising with drug suppliers to exchange short expiry drugs, replace expired ones and coordinating destruction of expired drugs with the pharmacy and poisons board
• Participate in the staff pharmacy audit and manage the pharmacy and drug store inventory as prescribed in the procedures
• Report adverse events and participate in Pharmaco-vigilance
• Maintain statutory and ethical records/registers, monitor patients on long-term medications and validate drug invoices and other purchases on petty cash

Qualifications and requirements

• At least Six (6) years relevant work experience with three (3) years served at the grade of pharmaceutical technologist II or comparable position
• Higher Diploma in Pharmaceutical Technology, Pharmacy or equivalent qualification from a recognized institution
• Diploma in Pharmaceutical Technology, Pharmacy or equivalent qualification from a recognized institution
• Registered with Pharmacy and Poisons board with current practising licence
• Attended a Supervisory Course lasting not less than two (2) weeks from a recognized institution
• Proficiency in computer applications
• Good interpersonal and communications skills
• Knowledge of Health laws and standard medical practices and procedures; pharmacy policy and legislative requirements
• Experience in providing medical services, pharmacy management and patient care
• Experience in drug supplies and management, and handling medical schemes
• Knowledge in basic accounting and administration
• Fulfil the requirements of Chapter Six of the Constitution

Click here to Apply