Manager – Group Systems, IT & Cybersecurity

AI summary

Victory Farms is hiring a Manager – Group Systems, IT & Cybersecurity in Nairobi, Kenya. The role focuses on leading ERPNext and enterprise systems improvements while overseeing IT operations and cybersecurity. Requires a Bachelor's in Computer Science or IT, CISM/CISSP/CISA certifications, and 5+ years of IT leadership experience. Full-time position with a deadline of 14/09/2026.

• Lead ERPNext and enterprise systems transformation across farms, hatcheries, processing, supply chain, and retail
• Oversee IT operations and cybersecurity including access controls, incident readiness, and backup/recovery
• Requires Bachelor's in Computer Science or IT plus CISM/CISSP/CISA certifications
• Minimum 5+ years of IT leadership experience required
• Full-time management role based in Nairobi, Kenya
• Application deadline is 14/09/2026

Original source description

Job Title: Manager – Group Systems, IT & Cybersecurity Date Posted: 19/08/2026 Job Type: Full Time Job Level: Management Employer: Victory Farms Industry: IT Salary: Open Location: Nairobi Country: Kenya Deadline: 14/09/2026 Summary: Manager – Group Systems, IT & Cybersecurity position at Victory Farms, focusing on IT infrastructure, cybersecurity, and systems architecture. Requires a Bachelor’s in Computer Science or IT, certifications (CISM/CISSP/CISA), and 5+ years of IT leadership. Full-time role. We are seeking a hands-on and entrepreneurial ERPNext Lead to join our Technology team. This role will lead a step change in how Victory Group uses ERPNext and related enterprise systems across farms, hatcheries, processing, supply chain, retail, and support functions. You will translate operational and financial needs into practical system capabilities that simplify work, improve adoption, strengthen controls, and drive better execution across the organization. Approximately 75% of the role will focus on ERPNext and related enterprise systems, driving continuous improvement and step-change value creation through process redesign, automation, new functionality, stronger user adoption, and scalable Group-wide solutions. You will work closely with business and country teams to identify opportunities, challenge existing ways of working, develop and test solutions, and scale what works—while ensuring system reliability, governance, controls, and effective user support. The remaining 25% will focus on IT operations and cybersecurity, with priority given to cybersecurity risk management, access controls, incident readiness, endpoint protection, and backup and recovery, alongside essential IT administration. This is an opportunity to shape how technology enables a more efficient, secure, and scalable Victory Group. Key Responsibilities: Enterprise Systems and ERPNext Own stable day-to-day operation, administration and user support for ERPNext and other assigned enterprise applications. Actively identify and shape opportunities for ERPNext to simplify work, remove manual activity, improve control and enable faster, better operational and financial decisions. Develop a clear view of ERPNext’s existing capabilities, underused functionality and future potential, and translate this into an ambitious but practical improvement roadmap. Challenge legacy processes and assumptions constructively; work with business owners to redesign processes before digitizing or automating them. Prototype and pilot improvements rapidly, measure the operational and control benefits, and scale successful solutions consistently across countries and functions. Establish clear issue, service-request and change-request processes, including prioritization, ownership, testing, approvals, documentation and release control. Partner with key business process owners and the Kenya and Rwanda Finance Directors, who depend on ERPNext for operational and accounting transactions, to translate agreed requirements: into practical system improvements. Strengthen role-based access, segregation of duties, master-data controls, workflow discipline and audit trails. Maintain an ambitious ERPNext improvement roadmap and transparent backlog, balancing value creation, business impact, control, urgency and available capacity. Work closely with the Strategic Projects Office to structure and deliver cross-functional ERPNext and systems initiatives, with clear scope, milestones, ownership and business adoption. Engage Internal Audit on system controls, access, segregation of duties, audit trails and remediation of identified weaknesses. Coordinate integrations with Aqua, Snowflake, Power BI and other platforms with Jacques and the relevant data owners, while preserving clear system ownership. Drive measurable reductions in manual workarounds, duplicate entry and spreadsheet dependency where a controlled ERPNext solution is practical and justified. IT Operations and Infrastructure Ensure reliable connectivity, networks, devices, endpoints and Microsoft 365 services across offices and operating sites. Define and monitor service levels for incidents and requests; identify recurring issues and eliminate root causes. Maintain accurate registers for hardware, software, licenses, warranties, users, privileged accounts and critical technology vendors. Standardize device configuration, onboarding, transfers and offboarding, including timely removal of access and recovery of company assets. Coordinate IT support across Kenya, Rwanda and Tanzania, with regular presence at operational sites including Roo Farm. Manage vendors, contracts, renewals and technology spend within approved budgets and procurement controls. Cybersecurity, Risk and Business Continuity Maintain and implement a practical Group cybersecurity roadmap proportionate to the Group’s risks and operating environment. Strengthen identity and access management, multi-factor authentication, endpoint protection, patching, secure configuration and privileged-access controls. Lead cybersecurity incident response, escalation, containment, evidence preservation, lessons learned and corrective actions. Maintain effective backup, recovery and disaster-recovery arrangements and coordinate periodic restoration and continuity tests. Run regular access reviews, vulnerability follow-up, phishing awareness and targeted user training. Support internal audit, external audit, insurers and the Audit & Risk Committee with clear evidence, risk reporting and remediation tracking. Leadership, Governance and Business Partnership Lead, coach and coordinate Systems and IT team members, clarifying ownership, priorities and expected service standards. Create simple policies, operating procedures and documentation that teams can consistently apply. Work with Country MDs, Farm Directors, Finance Directors, the Strategic Projects Office, Internal Audit and functional leaders to agree priorities; require the business to own requirements, process decisions, testing and adoption. Provide concise monthly reporting on platform health, service performance, security risks, incidents, backlog, budget and major actions. Prepare the systems, IT and cybersecurity function for an effective handover into the future Group D&T leadership structure. Create momentum for change by communicating the value of improvements, recognizing adoption barriers and driving actions through to sustained business use. Success Measures: ERPNext and core IT services are stable, while the pace and business value of ERPNext improvements increase materially. Time and capacity remain visibly weighted toward ERPNext and enterprise-systems improvement, while material cybersecurity risks and controls receive priority within the IT remit. New or improved ERPNext capabilities deliver measurable gains in process speed, control, user productivity, data quality or decision-making. Successful pilots are converted into standard Group-wide solutions, with clear ownership and sustained adoption by business teams. A transparent, business-prioritized ERPNext and systems backlog is governed through documented change control. Critical users, devices, licenses, vendors, systems, interfaces and privileged access are fully inventoried and controlled. Access management, cybersecurity controls, backup and recovery are demonstrably stronger and tested. Recurring IT incidents and unresolved support issues reduce, while ownership and escalation become clearer. Country teams operate within common Group standards while retaining accountability for execution and operational results. Material system and cybersecurity risks are reported early, with clear owners and tracked remediation. Qualifications & Requirements: 7–10 years of relevant experience: across enterprise systems, IT operations and cybersecurity, including at least 3 years leading teams or significant multi-site services. Strong practical experience: with ERP platforms; direct ERPNext experience: is highly desirable. Solid working knowledge of Microsoft 365, identity and access management, networks, endpoints, backups, cloud services and cybersecurity controls. Experience: in a multi-country, multi-site or operationally intensive environment such as aquaculture, agriculture, food production, FMCG, manufacturing, logistics or retail. Demonstrated ability to improve service reliability, introduce controls and complete practical system improvements—not only design strategies or policies. Entrepreneurial track record of identifying technology-enabled business opportunities, building support, piloting solutions and converting them into sustained operational improvements. Commercially aware and disciplined in vendor, license, budget and project management. Able to communicate clearly with operational users, technical specialists and senior leadership. Willing to work regularly from operational sites and travel across the Group’s countries. Leadership Qualities: Hands-on, responsive and calm under pressure. Structured and control-minded without creating unnecessary bureaucracy. Proactive in identifying root causes and driving issues through to closure. Curious and entrepreneurial, with the ambition to challenge current ways of working and turn ideas into scalable improvements. Strong service orientation combined with the confidence to enforce standards and prioritization. Collaborative across countries and functions, with clear respect for business ownership and role boundaries. Comfortable operating in a growing business where capabilities are still being built.