Job Description الوصف الوظيفي
1. IT Infrastructure & Operations
Lead the design, implementation, and maintenance of secure servers, networks, operating systems, and enterprise applications across all AKCS sites.
Ensure high availability and performance of LAN/WAN, Wi‑Fi, VPNs, internet connectivity, and multi‑site integrations.
Oversee administration of core business systems including ERP, POS/ticketing systems, time attendance, CRM, and reporting platforms.
Establish proactive maintenance, monitoring, and lifecycle management for all IT assets.
2. Cybersecurity Leadership & Risk Management
Own the cybersecurity strategy, policies, and technical controls protecting systems, networks, data, websites, and digital platforms.
Lead cyber incident response, including ransomware preparedness, containment, recovery, and post‑incident reviews.
Implement and manage:
Network security (firewalls, segmentation, VPNs)
Endpoint protection and antivirus/EDR
Identity and access management (user privileges, MFA where applicable)
Coordinate with external security vendors, SOC/MSSPs, and consultants for monitoring, threat intelligence, and incident escalation.
Conduct regular:
Vulnerability assessments and risk reviews
Patch and update cycles
Security configuration reviews
Ensure cybersecurity controls are proportionate to public‑facing, revenue‑generating, and heritage‑sensitive environments.
3. Business Continuity & Disaster Recovery
Design, implement, and continuously test backup, disaster recovery, and business continuity plans.
Ensure defined RPO/RTO objectives for critical systems.
Lead recovery drills and tabletop exercises to validate readiness for cyber incidents, system outages, and operational disruptions.
4. Governance, Policies & Compliance
Develop and enforce:
IT and cybersecurity policies
Access control and acceptable use standards
Asset management and changing management procedures
Ensure compliance with relevant data protection, information security, and organizational governance requirements.
Maintain accurate documentation of systems, configurations, risks, and controls.
5. Digital Platforms & Websites
Own the security, availability, and governance of all websites, domains, hosting environments, and online platforms.
Ensure secure integrations, proper access control, regular updates, and vulnerability remediation.
Coordinate with internal teams and external providers on:
Website changes
Content updates
Technical upgrades and integrations
Ensure websites and public platforms comply with security and uptime standards, not just content requirements.
6. Team Leadership & Vendor Management
Lead, mentor, and evaluate IT staff to build a security‑aware, accountable IT team.
Define clear roles between internal staff and external service providers.
Manage IT vendors, service contracts, SLAs, and third‑party risks.
Ensure IT services align with business priorities and risk appetite.
7. Reporting & Management Communication
Prepare regular reports to management covering:
IT performance and availability
Cybersecurity risks, incidents, and mitigation actions
Infrastructure health and improvement plans
Provide informed recommendations on technology investments, security improvements, and risk reduction initiatives.