Manager – Group Systems, IT & Cybersecurity

AI summary

Victory Farms is hiring a Manager – Group Systems, IT & Cybersecurity to lead ERPNext operations, IT infrastructure, cybersecurity and business-continuity across Kenya, Rwanda and Tanzania. The role focuses on improving enterprise systems, strengthening controls and access, managing vendors and supporting audits. It is a full-time position based in Nairobi.

• Owns ERPNext operations, improvements and cross-country rollout
• Leads IT operations, networks, devices and Microsoft 365 services
• Responsible for cybersecurity roadmap, incident response and access controls
• Coordinates IT support across Kenya, Rwanda and Tanzania
• Full-time role based in Nairobi, Kenya

Original source description

Key Responsibilities: Enterprise Systems and ERPNext Own stable day-to-day operation, administration and user support for ERPNext and other assigned enterprise applications. Actively identify and shape opportunities for ERPNext to simplify work, remove manual activity, improve control and enable faster, better operational and financial decisions. Develop a clear view of ERPNext’s existing capabilities, underused functionality and future potential, and translate this into an ambitious but practical improvement roadmap. Challenge legacy processes and assumptions constructively; work with business owners to redesign processes before digitizing or automating them. Prototype and pilot improvements rapidly, measure the operational and control benefits, and scale successful solutions consistently across countries and functions. Establish clear issue, service-request and change-request processes, including prioritization, ownership, testing, approvals, documentation and release control. Partner with key business process owners and the Kenya and Rwanda Finance Directors, who depend on ERPNext for operational and accounting transactions, to translate agreed requirements: into practical system improvements. Strengthen role-based access, segregation of duties, master-data controls, workflow discipline and audit trails. Maintain an ambitious ERPNext improvement roadmap and transparent backlog, balancing value creation, business impact, control, urgency and available capacity. Work closely with the Strategic Projects Office to structure and deliver cross-functional ERPNext and systems initiatives, with clear scope, milestones, ownership and business adoption. Engage Internal Audit on system controls, access, segregation of duties, audit trails and remediation of identified weaknesses. Coordinate integrations with Aqua, Snowflake, Power BI and other platforms with Jacques and the relevant data owners, while preserving clear system ownership. Drive measurable reductions in manual workarounds, duplicate entry and spreadsheet dependency where a controlled ERPNext solution is practical and justified. IT Operations and Infrastructure Ensure reliable connectivity, networks, devices, endpoints and Microsoft 365 services across offices and operating sites. Define and monitor service levels for incidents and requests; identify recurring issues and eliminate root causes. Maintain accurate registers for hardware, software, licenses, warranties, users, privileged accounts and critical technology vendors. Standardize device configuration, onboarding, transfers and offboarding, including timely removal of access and recovery of company assets. Coordinate IT support across Kenya, Rwanda and Tanzania, with regular presence at operational sites including Roo Farm. Manage vendors, contracts, renewals and technology spend within approved budgets and procurement controls. Cybersecurity, Risk and Business Continuity Maintain and implement a practical Group cybersecurity roadmap proportionate to the Group’s risks and operating environment. Strengthen identity and access management, multi-factor authentication, endpoint protection, patching, secure configuration and privileged-access controls. Lead cybersecurity incident response, escalation, containment, evidence preservation, lessons learned and corrective actions. Maintain effective backup, recovery and disaster-recovery arrangements and coordinate periodic restoration and continuity tests. Run regular access reviews, vulnerability follow-up, phishing awareness and targeted user training. Support internal audit, external audit, insurers and the Audit & Risk Committee with clear evidence, risk reporting and remediation tracking. Leadership, Governance and Business Partnership Lead, coach and coordinate Systems and IT team members, clarifying ownership, priorities and expected service standards. Create simple policies, operating procedures and documentation that teams can consistently apply. Work with Country MDs, Farm Directors, Finance Directors, the Strategic Projects Office, Internal Audit and functional leaders to agree priorities; require the business to own requirements, process decisions, testing and adoption. Provide concise monthly reporting on platform health, service performance, security risks, incidents, backlog, budget and major actions. Prepare the systems, IT and cybersecurity function for an effective handover into the future Group D&T leadership structure. Create momentum for change by communicating the value of improvements, recognizing adoption barriers and driving actions through to sustained business use. Success Measures: ERPNext and core IT services are stable, while the pace and business value of ERPNext improvements increase materially. Time and capacity remain visibly weighted toward ERPNext and enterprise-systems improvement, while material cybersecurity risks and controls receive priority within the IT remit. New or improved ERPNext capabilities deliver measurable gains in process speed, control, user productivity, data quality or decision-making. Successful pilots are converted into standard Group-wide solutions, with clear ownership and sustained adoption by business teams. A transparent, business-prioritized ERPNext and systems backlog is governed through documented change control. Critical users, devices, licenses, vendors, systems, interfaces and privileged access are fully inventoried and controlled. Access management, cybersecurity controls, backup and recovery are demonstrably stronger and tested. Recurring IT incidents and unresolved support issues reduce, while ownership and escalation become clearer. Country teams operate within common Group standards while retaining accountability for execution and operational results. Material system and cybersecurity risks are reported early, with clear owners and tracked remediation. Qualifications & Requirements: 7–10 years of relevant experience: across enterprise systems, IT operations and cybersecurity, including at least 3 years leading teams or significant multi-site services. Solid working knowledge of Microsoft 365, identity and access management, networks, endpoints, backups, cloud services and cybersecurity controls. Experience: in a multi-country, multi-site or operationally intensive environment such as aquaculture, agriculture, food production, FMCG, manufacturing, logistics or retail. Demonstrated ability to improve service reliability, introduce controls and complete practical system improvements—not only design strategies or policies. Entrepreneurial track record of identifying technology-enabled business opportunities, building support, piloting solutions and converting them into sustained operational improvements. Commercially aware and disciplined in vendor, license, budget and project management. Able to communicate clearly with operational users, technical specialists and senior leadership. Willing to work regularly from operational sites and travel across the Group’s countries. Leadership Qualities: Hands-on, responsive and calm under pressure. Structured and control-minded without creating unnecessary bureaucracy. Proactive in identifying root causes and driving issues through to closure. Curious and entrepreneurial, with the ambition to challenge current ways of working and turn ideas into scalable improvements. Strong service orientation combined with the confidence to enforce standards and prioritization. Collaborative across countries and functions, with clear respect for business ownership and role boundaries. Comfortable operating in a growing business where capabilities are still being built.