Background

Afia Concept Claims Settling Agency (ACS) is a forward-thinking healthcare consulting firm operating in East Africa, with headquarters in Nairobi, Kenya. Established to bridge the gap between healthcare infrastructure and accessible, high-quality services, ACS offers end-to-end solutions in healthcare facility design, health financing advisory, digital health, and operational management.

Role Purpose

The Senior Manager - ICT is responsible for providing strategic and operational leadership in the development, implementation and management of ACS's information and communication technology infrastructure, systems and digital solutions. The role ensures the availability, security, reliability and scalability of technology platforms supporting healthcare claims administration, pre-authorisation, member and provider services, data management and business operations. The Senior Manager - ICT will drive digital transformation, strengthen information security and data protection, improve systems integration and automation, and ensure that technology investments support organisational strategy, operational efficiency, service quality and business growth.

Key Accountabilities

ICT Strategy and Digital Transformation

• Develop and implement an ICT strategy aligned with ACS's business objectives and growth priorities.
• Provide strategic advice to the COO and senior management on technology investments, emerging technologies and digital transformation opportunities.
• Identify opportunities to automate manual processes, improve workflows and enhance service delivery through technology.
• Develop and maintain an ICT roadmap covering infrastructure, applications, systems integration, cybersecurity and business continuity.
• Evaluate and recommend appropriate technology solutions that support business scalability and operational efficiency.

Systems Development and Business Applications

• Oversee the implementation, maintenance and optimisation of business applications supporting claims processing, pre-authorisation, member management, provider administration and reporting.
• Ensure effective integration between business systems to improve information flow, accuracy and operational visibility.
• Drive the automation of manual processes, including claims tracking, reconciliations, reporting and workflow management.
• Oversee the management, availability and continuous improvement of member and provider portals and other digital service channels.
• Work with business stakeholders and technology vendors to define system requirements, manage implementations and resolve application issues.
• Ensure systems are fit for purpose, user-friendly, scalable and aligned with business needs.

Infrastructure and Service Delivery

• Oversee the management and maintenance of ICT infrastructure, including networks, servers, cloud services, end-user devices, communication systems and business applications.
• Ensure the availability, performance, reliability and security of ICT systems.
• Establish ICT service standards, incident management procedures and service-level agreements.
• Oversee the ICT helpdesk, ensuring timely resolution of user requests, technical incidents and system failures.
• Manage technology assets, licences, configurations and lifecycle replacements.
• Ensure adequate ICT resources, tools and support arrangements are available to employees.

Cybersecurity, Data Protection and Information Governance

• Develop and implement ICT security policies, standards and controls to protect ACS's information assets.
• Establish appropriate access controls, user authentication, privileged access management and system monitoring.
• Protect confidential member, provider, payer and scheme information against unauthorised access, loss, disclosure or misuse.
• Ensure ICT practices comply with applicable data protection legislation, regulatory requirements, contractual obligations and internal policies.
• Conduct periodic reviews of system vulnerabilities, security risks and access rights.
• Coordinate cybersecurity awareness, incident response and investigation of technology-related security breaches.
• Maintain appropriate audit trails, system logs and information retention controls.

Business Continuity and Disaster Recovery

• Develop, implement and periodically test ICT business continuity and disaster recovery plans.
• Ensure regular backups, secure backup storage and tested data restoration procedures.
• Establish system recovery priorities, recovery time objectives and recovery point objectives in consultation with business stakeholders.
• Coordinate responses to system outages, cyber incidents and other technology disruptions.
• Ensure critical business systems can be restored within agreed recovery timelines.
• Document incidents, corrective actions and lessons learned to strengthen operational resilience.

Data Management, Reporting and Analytics

• Establish appropriate standards for data integrity, data quality, accessibility and security.
• Support the development of reliable management dashboards and operational reports.
• Work with business teams to improve data availability for claims performance monitoring, service turnaround analysis, utilisation reporting and operational decision-making.
• Promote appropriate use of business intelligence, analytics and automation tools.
• Ensure data interfaces, reporting processes and system outputs are accurate, consistent and reliable.

Vendor and Contract Management

• Manage relationships with ICT service providers, software vendors, telecommunications providers and technology partners.
• Define technical requirements, service expectations and performance standards for external providers.
• Monitor vendor performance against contractual obligations and agreed service levels.
• Evaluate technology proposals and conduct technical assessments to support procurement decisions.
• Negotiate service arrangements and recommend cost-effective solutions.
• Ensure appropriate due diligence, confidentiality provisions, security requirements and exit arrangements are in place for technology vendors.

ICT Budgeting and Resource Management

• Develop and manage the annual ICT budget in consultation with the COO and Finance function.
• Monitor expenditure, technology costs and budget utilisation.
• Prepare business cases for ICT investments, demonstrating expected benefits, costs, risks and value for money.
• Optimise technology expenditure while maintaining appropriate service quality, security and resilience.
• Oversee ICT asset management, licence renewals and resource allocation.
• Lead, coach and develop ICT staff to build technical capability, accountability and service orientation.

Risk Management, Audit and Compliance

• Maintain an ICT risk register and implement appropriate mitigation measures.
• Coordinate ICT audits, vulnerability assessments, compliance reviews and closure of audit findings.
• Ensure technology changes are properly assessed, tested, approved and documented before implementation.
• Establish change management, configuration management and system documentation standards.
• Report significant ICT risks, incidents, service disruptions and remediation progress to the COO.
• Promote a culture of accountability, continuous improvement and responsible technology use.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Information Systems, Software Engineering or a related field from a recognised institution.
• A relevant master's degree in Information Technology, Information Systems, Cybersecurity, Business Information Systems or Technology Management will be an added advantage.
• Professional certification in one or more relevant areas, such as ITIL, COBIT, CISSP, CISM, CISA, cloud technologies or project management, will be an advantage.
• Relevant training in information security, data protection, enterprise systems or IT service management will be desirable.

Experience

• At least eight (8) years of relevant ICT experience, including a minimum of three (3) years in a management or leadership role.
• Demonstrable experience managing ICT infrastructure, enterprise applications, cybersecurity, systems integration and technology service delivery.
• Experience implementing or managing business systems in healthcare, insurance, health financing, claims administration or another regulated environment will be an advantage.
• Proven experience leading ICT projects, managing technology vendors and budgets, and delivering systems improvements.
• Experience in cloud services, business continuity, disaster recovery, data management and information security.
• Demonstrated ability to translate business requirements into practical, scalable technology solutions.

• Develop and implement an ICT strategy aligned with ACS's business objectives and growth priorities.
• Provide strategic advice to the COO and senior management on technology investments, emerging technologies and digital transformation opportunities.
• Identify opportunities to automate manual processes, improve workflows and enhance service delivery through technology.
• Develop and maintain an ICT roadmap covering infrastructure, applications, systems integration, cybersecurity and business continuity.
• Evaluate and recommend appropriate technology solutions that support business scalability and operational efficiency.
• Oversee the implementation, maintenance and optimisation of business applications supporting claims processing, pre-authorisation, member management, provider administration and reporting.
• Ensure effective integration between business systems to improve information flow, accuracy and operational visibility.
• Drive the automation of manual processes, including claims tracking, reconciliations, reporting and workflow management.
• Oversee the management, availability and continuous improvement of member and provider portals and other digital service channels.
• Work with business stakeholders and technology vendors to define system requirements, manage implementations and resolve application issues.
• Ensure systems are fit for purpose, user-friendly, scalable and aligned with business needs.
• Oversee the management and maintenance of ICT infrastructure, including networks, servers, cloud services, end-user devices, communication systems and business applications.
• Ensure the availability, performance, reliability and security of ICT systems.
• Establish ICT service standards, incident management procedures and service-level agreements.
• Oversee the ICT helpdesk, ensuring timely resolution of user requests, technical incidents and system failures.
• Manage technology assets, licences, configurations and lifecycle replacements.
• Ensure adequate ICT resources, tools and support arrangements are available to employees.
• Develop and implement ICT security policies, standards and controls to protect ACS's information assets.
• Establish appropriate access controls, user authentication, privileged access management and system monitoring.
• Protect confidential member, provider, payer and scheme information against unauthorised access, loss, disclosure or misuse.
• Ensure ICT practices comply with applicable data protection legislation, regulatory requirements, contractual obligations and internal policies.
• Conduct periodic reviews of system vulnerabilities, security risks and access rights.
• Coordinate cybersecurity awareness, incident response and investigation of technology-related security breaches.
• Maintain appropriate audit trails, system logs and information retention controls.
• Develop, implement and periodically test ICT business continuity and disaster recovery plans.
• Ensure regular backups, secure backup storage and tested data restoration procedures.
• Establish system recovery priorities, recovery time objectives and recovery point objectives in consultation with business stakeholders.
• Coordinate responses to system outages, cyber incidents and other technology disruptions.
• Ensure critical business systems can be restored within agreed recovery timelines.
• Document incidents, corrective actions and lessons learned to strengthen operational resilience.
• Establish appropriate standards for data integrity, data quality, accessibility and security.
• Support the development of reliable management dashboards and operational reports.
• Work with business teams to improve data availability for claims performance monitoring, service turnaround analysis, utilisation reporting and operational decision-making.
• Promote appropriate use of business intelligence, analytics and automation tools.
• Ensure data interfaces, reporting processes and system outputs are accurate, consistent and reliable.
• Manage relationships with ICT service providers, software vendors, telecommunications providers and technology partners.
• Define technical requirements, service expectations and performance standards for external providers.
• Monitor vendor performance against contractual obligations and agreed service levels.
• Evaluate technology proposals and conduct technical assessments to support procurement decisions.
• Negotiate service arrangements and recommend cost-effective solutions.
• Ensure appropriate due diligence, confidentiality provisions, security requirements and exit arrangements are in place for technology vendors.
• Develop and manage the annual ICT budget in consultation with the COO and Finance function.
• Monitor expenditure, technology costs and budget utilisation.
• Prepare business cases for ICT investments, demonstrating expected benefits, costs, risks and value for money.
• Optimise technology expenditure while maintaining appropriate service quality, security and resilience.
• Oversee ICT asset management, licence renewals and resource allocation.
• Lead, coach and develop ICT staff to build technical capability, accountability and service orientation.
• Maintain an ICT risk register and implement appropriate mitigation measures.
• Coordinate ICT audits, vulnerability assessments, compliance reviews and closure of audit findings.
• Ensure technology changes are properly assessed, tested, approved and documented before implementation.
• Establish change management, configuration management and system documentation standards.
• Report significant ICT risks, incidents, service disruptions and remediation progress to the COO.
• Promote a culture of accountability, continuous improvement and responsible technology use.

• ICT strategy development
• Digital transformation leadership
• Information security management
• Data protection
• Systems integration
• Automation
• Business process improvement
• ICT roadmap development
• Technology solution evaluation
• Business application management
• Claims processing systems
• Pre-authorisation systems
• Member management systems
• Provider administration systems
• Reporting and analytics
• ICT infrastructure management
• Network management
• Server management
• Cloud services management
• End-user device management
• Communication systems management
• ICT service delivery standards
• Incident management
• Service-level agreements (SLAs)
• Helpdesk management
• Technology asset management
• Licence management
• Cybersecurity policy development
• Access control
• User authentication
• Privileged access management
• System monitoring
• Data protection legislation compliance
• Regulatory compliance
• Vulnerability assessment
• Security risk assessment
• Access rights review
• Cybersecurity awareness training
• Incident response
• Security breach investigation
• Audit trails
• System logging
• Information retention controls
• Business continuity planning
• Disaster recovery planning
• Data backup and restoration
• System recovery planning
• Recovery time objectives (RTO)
• Recovery point objectives (RPO)
• System outage coordination
• Cyber incident coordination
• Technology disruption coordination
• Operational resilience
• Data integrity standards
• Data quality standards
• Data accessibility
• Data security
• Management dashboard development
• Operational reporting
• Business intelligence
• Analytics tools
• Automation tools
• Data interface management
• Vendor management
• Contract management
• Service provider management
• Software vendor management
• Telecommunications provider management
• Technology partner management
• Technical requirement definition
• Service expectation definition
• Performance standard definition
• Vendor performance monitoring
• Technology proposal evaluation
• Technical assessment
• Procurement support
• Service arrangement negotiation
• Cost-effective solution recommendation
• Due diligence
• Confidentiality provisions
• Security requirements
• Exit arrangements
• ICT budget development
• ICT budget management
• Expenditure monitoring
• Technology cost management
• Budget utilisation monitoring
• Business case preparation
• Investment benefit analysis
• Risk assessment for investments
• Value for money assessment
• Technology expenditure optimisation
• Service quality maintenance
• Security maintenance
• Resilience maintenance
• ICT asset management
• Licence renewal management
• Resource allocation
• Staff leadership
• Staff coaching
• Staff development
• Technical capability building
• Accountability
• Service orientation
• Risk register maintenance
• Mitigation measure implementation
• ICT audit coordination
• Compliance review coordination
• Audit finding closure
• Change management
• Configuration management
• System documentation standards
• Risk reporting
• Incident reporting
• Service disruption reporting
• Remediation progress reporting
• Culture of accountability
• Continuous improvement
• Responsible technology use

• Bachelor's degree in Information Technology, Computer Science, Information Systems, Software Engineering or a related field from a recognised institution.
• A relevant master's degree in Information Technology, Information Systems, Cybersecurity, Business Information Systems or Technology Management will be an added advantage.
• Professional certification in one or more relevant areas, such as ITIL, COBIT, CISSP, CISM, CISA, cloud technologies or project management, will be an advantage.
• Relevant training in information security, data protection, enterprise systems or IT service management will be desirable.