ICT Officer

The Office of the Auditor-General (OAG) is an Independent Office established by Article 229 of the Constitution of Kenya. The Office is charged with the primary oversight role of ensuring accountability in the use of public resources within the three arms of government (the Legislature, the Judiciary and the Executive), County Governments as well as the Constitutional Commissions and Independent Offices

Pursuant to Article 252 (1) (c) of the Constitution, the Office seeks to recruit qualified and competent staff to fill the following positions:

Advertisement No. 08/09/2025

ICT OFFICER II(SECURITY): GRADE OAG 8 (3 Posts)

Purpose of the job

This will be the entry and training grade for ICT staff. The position is responsible for identifying and addressing potential risks in security governance and compliance

Duties and Responsibilities

• Assist with implementing and monitoring security policies and protocols across different systems and in Regional Offices to ensure there are no threats;
• Assist in identifying and addressing potential risks in security governance and compliance;
• Support in the analysis of documented security incidents, escalating where appropriate;
• Assist in the review of access controls and permissions, ensuring adherence to security policies;
• Assist in ensuring adherence to cybersecurity policies;
• Perform Information security compliance checks;
• Participate in the Information security policy audits and documentation;
• Perform Information security compliance checks;
• Participate in audits of Information security and prepare reports for such;
• Any other duty assigned from time to time.

Requirements for Appointment

• Bachelor’s degree in Computer Science, Management Information Systems, Information Technology, Electrical/Electronic Engineering, Telecommunications or any other IT related field from a recognized institution;
• Must have Certified Ethical Hacker certification (CEH);
• Must have Certified Information Security Manager Certification CISM
• Cybersecurity Practitioner (CSX-P—CSX), CompTIA Security+ and CISSP Certification is desirable;
• Certification in Networks (e.g. CCNA, CCNP) or Microsoft Certification (e.g. Microsoft Certified Professional) will be an added advantage.
• Must have a strong grasp of network protocols, operating systems, and security technologies like Security Information and Event Management (SIEM) and intrusion prevention systems.

Core Competencies

• Creative/ Innovative – Develop new and unique ways to improve operations within the Office to deliver excellence, efficiency and outstanding service/products to clients (e.g. methods, processes, systems, policies etc.). Take initiative and start activities.
• Ethical – Understand ethical behaviour and public-sector practices. Ensure that own behaviour and behaviour towards others is consistent with these standards and aligns with the values and ethical standards of the Office.
• Conflict Management – Deal with disputes in a rational, balanced and effective way through effective communication, problem resolving abilities and good negotiating, conciliation and mediation skills to restore the focus of the teams within the Office.
• Computer Software Support – Knowledge of updating and upgrading software, installing new operating system versions, modifying user rights and properties.
• Manage Hosting providers – Knowledge to manage 3rd party IT hosting providers who provide dedicated servers and associated hardware to the office.
• Database Development – Knowledge of database technologies, database administration, database setup, expanding database functionality and developing new databases.
• IT Architecture – Knowledge of methodical IT specifications, models and guidelines, formal and informal IT solutions and infrastructure architecture processes.
• Effective Communication – Speak, listen, and write in a clear, thorough, and efficient manner using appropriate and effective communication tools and techniques. Speak eloquently and engagingly in meetings, in one-on-one situations as well as in small and large groups. Listen, be receptive to the counterpart and adapt to the situation. Adjust the message to the recipient.
• Desktop Support – Knowledge and ability to provide direct or remote desktop user assistance to staff members.
• Computer Hardware Maintenance – Knowledge of maintaining and repairing computer hardware.