IT Security Manager

About Fika Fika exists to innovate cost-effective rural infrastructural solutions through advocacy, evidence and technical assistance to promote safe access for geographically isolated communities through partnership with governments and donors. We provide flexible work arrangements, comprehensive mental and physical wellness support, and annual salary reviews aligned with our compensation policy. Additionally, we offer opportunities for professional growth, allowing individuals to shape their own career paths through targeted development programs. Job Purpose The IT Security Manager is responsible for protecting Fika’s systems, applications, computers, networks, and data from security breaches, cyber threats, and unauthorized access. This role involves monitoring systems for vulnerabilities, implementing security measures, responding to incidents, and ensuring compliance with security policies and regulatory standards. The IT Security Manager is responsible for: Safeguarding the organization's information assets, technology infrastructure, and data against cyber threats, unauthorized access, and security breaches. Proactively identifying vulnerabilities, implementing protective controls, and responding promptly to incidents. Maintaining the confidentiality, integrity, and availability of all Fika systems and data. Supporting the development, testing, and continuous improvement of business continuity and disaster recovery plans. Keeping Fika's digital environment secure and compliant with relevant regulatory laws and standards; in collaboration with the Data Protection Officer and the Compliance team. Duties and Responsibilities Risk Management: Identify, assess, and document information security risks for all new and existing systems and applications. Recommend the appropriate security controls and measures to mitigate identified risks. Support Fika’s org-wide risk management practices that span across multiple departments. Security Operations Monitor Fika systems, investigate and respond to security alerts, incidents, and threats. Implement, maintain and improve security monitoring tools, including SIEM, EDR, antivirus, and intrusion detection & prevention systems. Perform regular vulnerability assessments and penetration tests to identify potential threats, loopholes, and mitigate them. Maintain up-to-date security documentation, reports and provide periodic updates to the Senior IT Manager. Develop and conduct information security awareness training courses for all current staff and new hires. Security Governance and Compliance Develop, implement, and maintain Fika’s information security policies, standards, and procedures. Ensure staff compliance with organizational information security policies and regulatory requirements. Support annual internal and external information security audits. Build and implement Fika's IT Security Roadmap (including a plan to address findings of the GRF's cybersecurity audit). Network, Infrastructure and Endpoint Security Setup and secure firewalls, VPNs, LANs and wireless networks in all Program countries’ offices. Review firewall rules, network security configurations, and ensure continuous monitoring of the network activity. Ensure laptops, tablets and mobile devices comply with Fika security policies and standards, including mobile device management, patch management & disk encryption. Cloud Security Secure Fika’s cloud environments, i.e. Microsoft 365, Google Workspace, Azure, AWS, Box and Salesforce, and ensure compliance with internal policies and global security standards. Collaborate with the IT teams to support cloud identity and access management. Continuously monitor emerging cybersecurity threats, vulnerabilities, and security technologies to strengthen Fika's security posture. Business Continuity and Disaster Recovery Support the development, implementation, testing, and maintenance of business continuity and disaster recovery plans. Participate in routine disaster recovery testing exercises and ensure that critical systems can be restored within agreed recovery timelines. Support Fika Cybersecurity Incident Response Procedures. Qualifications Bachelor's Degree in Computer Science, Information Security, or related IT field. 3+ years of hands-on work experience in IT security, network security, or a related role. Strong understanding of network protocols, firewalls, VPNs, and encryption technologies. Experience with security tools (SIEM, IDS/IPS, vulnerability scanners, endpoint protection platforms). Knowledge of operating systems (Windows, macOS) and cloud environments (AWS, Azure, GCP) Familiarity with known security frameworks and global compliance standards. Strong analytical and problem-solving skills. Excellent communication skills, with ability to explain technical concepts to non-technical stakeholders Preferred Qualifications: Relevant certifications: CompTIA Security+, CISSP, CEH, CISA, CISM, or GIAC certifications Experience with scripting/automation Experience in incident response and digital forensics International development or NGO sector experience. Working Conditions This is a remote position. The candidate will be expected to ensure sufficient overlap with Fika colleagues across global time zones, including Africa, Europe, and North America. If located near a program office, hybrid available. Travel requirements are estimated at 10%, including site visits in Fika's program countries. Application Guidelines Fika is committed to creating an inclusive work environment. We welcome applicants from diverse backgrounds and strive to provide accommodations for individuals with disabilities during the application and employment process. If you require a reasonable accommodation to participate in our hiring process or to perform the essential functions of your job, please include this information in your application and we will work with you to ensure your needs are met. To apply we require A max one-page motivation letter A CV following these guidelines: Length: Maximum 2 pages. Education: Highlight relevant diplomas, degrees and recognized certifications Exclude: personal information (photos, gender, religion, marital status, number of dependents), non-certified training. By submitting your application, you consent to Fika collecting, storing, and processing your personal data for the purpose of evaluating your qualifications for this position and managing the recruitment process. Fika may retain your application materials and contact details for up to 3 years to consider you for similar job opportunities that match your qualifications and interests. You have the right to access, rectify, or delete your personal information at any time by contacting . If you prefer not to be contacted about future opportunities, please indicate your preference during the application process or email us at the address above. For more information about how we handle your personal data, please see our Privacy Policy .