IT Systems & Security Manager at Lafiya Nigeria

Position Overview

• As Lafiya grows from roughly 25 staff today to a projected 45 by December, we're building our IT function
• We're looking for a hands-on IT Generalist to build this out and then run it day to day: specifying and procuring devices, standing up basic cybersecurity controls, and being the person staff go to when something breaks.
• Your first major deliverable is to equip and secure the organisation ahead of our all-staff retreat in December: defining device specifications for different roles, building and securing sign-off on a procurement budget, and getting hardware into people's hands in time.
• From there, you'll own IT support day to day, managing user accounts and provisioning as staff join and leave, administering our subscriptions and platforms (Slack, SurveyCTO, Personio, Airtable, Capsule, Squarespace, Xero, Claude, Microsoft Excel, and others), teaching staff to use new platforms during onboarding, and troubleshooting issues as they come up. You'll also lead a cybersecurity assessment of where we stand today and put the right controls in place.
• This is a generalist role for someone who does the work themselves rather than managing a team: you'll be equally comfortable scoping a device procurement budget, configuring MFA, and walking a non-technical colleague through a password reset.

What You'll Do
Device & Infrastructure:

• Build and maintain device specifications for different types of staff roles
• Build and get sign-off on device procurement budgets, in coordination with the COO and Finance
• Source, procure, and configure staff and Lafiya Sister devices
• Establish a device inventory and replacement/refresh cycle

Cybersecurity:

• Lead an organisation-wide cybersecurity assessment of our current tools, devices, and practices
• Design and implement baseline security controls (MFA, endpoint protection, password management, access controls) appropriate to Lafiya's size and risk profile that meet ISO 27001 requirements
• Draft IT and security policies for staff (acceptable use, device policy, data handling)
• Monitor for and respond to security incidents
• Lead periodic security awareness trainings

User & Account Management:

• Manage staff accounts and system access as staff join, change roles, or leave the organisation
• Administer user permissions on Google Workspace, Slack, and other core platforms
• Manage software subscriptions and licenses, tracking costs and removing unused seats

IT Support:

• Serve as the first point of contact for staff IT issues: troubleshoot hardware, software, connectivity, and account problems
• Provide IT onboarding for new staff (device setup, account provisioning, platform access)
• Document common issues and solutions to build institutional knowledge over time

Systems Strategy & Adoption:

• Identify and pilot new IT systems and tools that could improve organizational productivity, evaluating fit before recommending wider rollout
• Lead organization-wide rollout of adopted systems, including training and change management to build staff buy-in
• Monitor adoption after rollout and troubleshoot the gap between a system being deployed and a system actually being used
• Support other departments' migrations to new platforms they've selected (e.g., a new CRM for Growth), including data migration, system integration, and access setup, as needed

Field & Systems Support:

• Oversee the distribution and management processes of mobile devices for Lafiya Sisters (our community-based health workers), as needed.
• Support the deployment of new organisational systems as Lafiya adopts them (e.g., an electronic Logistics Management Information System (eLMIS)), as needed.

Who You Are
You're someone who:

• Is a true IT generalist. Comfortable moving between hardware procurement, user support, systems administration, and security without needing to hand off to a specialist.
• Communicates clearly with non-technical staff. You can walk a colleague through an MFA setup or a password reset without jargon or frustration on either side.
• Thinks in risk, acts practically. You understand cybersecurity principles like least privilege and defense in depth, but you know how to phase implementation to fit a small nonprofit's budget and capacity, not gold-plate it.
• Builds systems from scratch. You're comfortable creating structure where none exists yet: device specs, onboarding/offboarding checklists, security policies.
• Is responsive and reliable. Staff need timely support when something breaks; you treat that as core to the job, not an interruption to it.
• Works autonomously. You report to a non-technical supervisor and won't have an IT team around you; you're comfortable making technical judgment calls and flagging the ones that need sign-off.
• Delivers on deadlines. The device rollout has a hard date tied to a company-wide retreat; you can manage a time-bound project without dropping day-to-day support in the meantime.
• Is flexible. You are comfortable working across multiple countries and time zones.

Education, Experience & Skills

• Bachelor's Degree or HND in Computer Science, Information Systems, IT, or a related field; or equivalent practical experience and relevant certifications.
• 3–5 years of experience in IT support or systems administration, ideally as a generalist in a small organisation or NGO context
• Experience managing a device fleet of 20+ devices (Windows and/or Mac) for a small-to-midsize organisation is mandatory
• Experience administering Google Workspace user accounts and permissions is mandatory
• Experience administering Slack or similar collaboration platforms, including license/subscription management
• A recognized cybersecurity certification (e.g., CompTIA Security+, ISC2 Certified in Cybersecurity, or equivalent) plus demonstrated experience implementing baseline security controls (MFA, endpoint protection, access management, patch management) is mandatory. This function will only grow in importance as Lafiya scales, so we're prioritizing candidates who can show real security credentials, not just familiarity.
• Experience conducting or supporting a cybersecurity risk assessment is a plus
• Experience with mobile device management (MDM) or endpoint management tools (e.g., Google Endpoint Management, Jamf, Intune) is a plus
• Vendor management experience (device suppliers, ISPs, SaaS vendors) is a plus
• Professional fluency in English is mandatory
• You don't need to check every box here. If this role excites you and you meet the mandatory qualifications, we'd love to hear from you.

Why should you apply:

• You will be joining an ambitious and supportive organisation that is growing quickly.
• We are serious about impact and serious about investing in our people.
• There will be room to take initiative, make decisions, and leave your mark on a critical stage of Lafiya’s growth.
• We don’t have layers of approval or slow processes, so if something makes sense, we’ll try it.

Benefits
Benefits include:

• 40 days of combined holiday and paid annual leave.
• Paid parental leave.
• Flexibility in where, when and how you work.
• Working closely with a team of senior leaders who are collaborative, ambitious and serious about impact.
• HMO insurance cover via AXA, travel reimbursements.
• Annual team retreat with all expenses paid.