Responsibilities :

• Implement group security governance and security strategies, including the definition and delivery of OpCo-wide implementation plan, in accordance with group strategy, corporate governance and international security standards.
• Ensure implementation and adherence to the Information Security standards, guidelines & processes as prescribed by MTN Group Information Security teams and Group DigiFin Information Security teams
• Execute adoption of newly implemented security solutions to operational environment as well as in-depth security testing in order to keep security risks to the OpCo’s assets and networks / the response time to security threats at a minimum.
• Monitor all OpCo assets and take timely action in response to fraudulent activities related to the information systems
• Conduct regular threat monitoring and vulnerability & penetration tests to test IT security resilience. Prepare detailed reports and present to manager. Where gaps are identified, suggest possible remedial actions and suggest future proofing techniques
• Conduct security trainings, building of a knowledge repository and distribution of security governance documents (covering end-to-end security) as part of the overall objective of promotion and ensuring awareness of security standards, policies and procedures amongst the employees
• Support group and technology team in designing, reviewing and implementing security architecture plans and blueprints
• Execute adapting, testing (UAT, performance, functions) and piloting of new/extended security services/systems as well as their implementation with the view to minimise the negative impact on operations
• Support in the creation of long- and short-term implementation roadmaps to meet all identified security requirements
• Develop business continuity and disaster recovery plans for security systems, in collaboration with the Ethics, Risk and Compliance team, so as to implement action plans that respond quickly and effectively to potential disasters
• Execute the deployment, configuration and on-going administration of Identity management and Authentication products in the OpCo
• Ensure that all information / data is accessed only by rightful users and no data leakage / pilferage happens in the OpCo
• Institute mechanisms such as Single sign-on (SSO), multifactor authentication etc to ensure that proper mechanisms for preserving identity and user access is enforced
• Lead the development and maintaining of relations with government representatives, as required
• Where required, escalate unsolvable issues to Manager Information Security in a timeous manner.

Education / Business Degree :

• A Degree in Computer Science, Software Engineering, Information Systems, Information Technology or related field
• Relevant post graduate qualification is an advantage

Work Experience :

• A minimum of 2 to 3 years’ total experience in Information Security or allied field is required
• Experience in Fintech, banking or Mobile Money is preferred
• Experience working in a global/multinational enterprise with a good understanding emerging markets is preferred.

Knowledge :

• IT Security assessment
• IT Security compliance
• Security Engineering
• Identity & Access controls
• Vulnerability & Penetration testing
• Threat management
• Privacy controls.

Skills :

• Analytical thinking
• Continuous improvement
• Data interpretation
• Delivery focused
• Presentation
• Relationship building.