Senior Specialist - Network Security

The Network Security Senior Specialist is responsible for delivering technical security solution designs, technical reference architecture designs, and technical security configuration standards for the MTN Legacy and Cloud technology stacks. This includes third-party interfaces, the internal core network interfaces as well as capabilities across different service models of the cloud (SaaS, PaaS, IaaS). The  focus will be given to integrating, securing, isolating and protecting applications migrated into the Cloud environment. A wide understanding of Security applications and capabilities is required to ensure secure deployment and operations of MTN key applications. A mature understanding of the Hybrid cloud environment is required in order to support the legacy and cloud technology stacks and provide strategic guidance to the MTN OPCOs. A solid understanding on AI and Machine Learning and how this integrates into security solutions.

Context

MTN is entering a new phase in its lifecycle where operational and commercial excellence has become critical for success. The urgency for change has become more heightened amidst increased competitive intensity across all markets in which MTN operates. The Group’s Technology function must therefore ensure the successful delivery in context of:

• Rapidly changing ICT environment
• The geographic complexity of MTN’s foot print across Africa and the Middle East
• Management of executive and local shareholder expectations across all OPCOs
• Achievement of top quartile operating efficiency and effectiveness through scale and common processes
• Driving growth through business intelligence and standardization to maximize business impact
• Management of customer and supplier expectations 
• Enhance MTN position as a leading network and system provider
• Constant dynamics and local challenges in the economic, regulatory and legal environments

Values

We at MTN are a purpose and value-led organization. At MTN, we believe that understanding our people’s needs and aspirations is key to creating experiences that delight you at work, everyday. We are committed to fostering an environment where every member of our Y’ello Family is heard, understood and empowered to live an inspired life.

Our values keep us grounded and moving in the right direction. Most importantly, they keep us honest. It is not something we claim to be. It is in our DNA.

As an organisation, we consider it our mission to create an exciting and rewarding place to work, where our people can be themselves, thrive in positivity and ignite their full potential. A workplace that boosts creativity and innovation, improves productivity, and ultimately drives meaningful results. A workplace that is built on relationships and achieving a purpose that is bigger than us.

Our commitments go beyond an organisational promise. It is in our leadership and managerial ethos to meaningfully partner with our employees, customers and stakeholders with a vision to realise our shared goals.

Live Y'ello

• Lead with Crae
• Can-do with Integrity
• Collaborate with Agility
• Serve with Respect
• Act with Inclusion

The Network Security Senior Specialist will be accountable to achieve the following objectives:

Technical Excellence 

• Develop and design Cloud Security Architectures (e.g., people, processes, technology);
• Responsible for the implementation of technical architectures for group wide risk mitigation of key risk areas on MTN Cloud and legacy Solution Stack, including security monitoring, cloud security assurance, group policy and vulnerability management;
• Assist OPCOs with cloud and legacy technical security solution designs and implementation 
• Determine a holistic view of technical security requirements on Cloud Solution Stack by evaluating current security operations and requirements; researching security standards; studying architecture/platform; identifying integration issues and preparing cost estimates;
• Evaluate integration points to ensure they provide adequate protection for the processing, transmission, and storage of transactions
• Ensure a standardized and aligned approach driven from Group Information Security for security architecture across the MTN footprint.

Operational Delivery

• Assist Senior Management to develop and implement the overall cloud security architecture requirements and framework, overarched by the business risk strategy;
• Responsible for the development and implementation of the cloud security architecture roll-out definition and actualization via third parties;
• Roadmap definitions for cloud security systems by monitoring security environment; identifying security gaps; evaluating and implementing enhancements.
• Responsible for the implementation and ongoing compliance of key Cloud Security Solutions
• Responsible for the implementation of Cloud Firewalls, WAFs, IPS, Network Segmentation tools and related process controls to address Network Security in the cloud and Shadow IT risks, in co-operation with the Cyber Defence, GRC and programs teams.
• Perform best-practices risk assessment and Security Quality Assurance of the MTN Cloud Platforms in co-operation with the Governance Risk and Compliance teams.

Budgets

• Assist with management of divisional budgets in line with business objectives and facilitate forecasting;
• Manage project initiative budgets in line with business objectives; and
• Drive initiatives that will ensure that the “cost of operations” are reduced, in line with a least cost operating strategy stemming from the business drivers.

Role Dependencies

• Active support from the Group CTIO; Executive: Information Security
• OPCO LISO’s, Regional Coordinators, Governance Forums, Audit Committee, Internal Auditors, Business Risk, Compliance
• Deep understanding of the MTN business strategy 
• Understanding of the OPCO technology, business and regulatory context
• Timely decision making and reporting 
• Alignment of OPCO and Group strategy initiatives

Collaboration

Responsibility towards: 

• Key customers: MTN OPCOs, Group Information Security, Group Technology 
• Key suppliers: Key Technology Partners, Alliance Stakeholders, Relevant Industry Bodies

Education:

• 4 year Engineering/ Information Science Degree
• Masters in Information Science is preferred

Industry/Certifications

• CISSP, CISM, CCSP certification (one of)
• MCSE: Security (advantageous)
• MCSE: Cloud Platform and Infrastructure
• Microsoft Azure , Google Cloud courses (advantageous)

Experience:

• 5-8 years of relevant work experience in IT Security /Core Network/ IP Networks/ Cloud technologies.
• Experience in designing and implementing organization wide network security policies and features in the Telco environment. 
• Experience in managing and implementing large scale network security projects. Implementation of proactive measurements against new threats. 
• Experience working in Africa and Middle East and have a grasp of political, social, infrastructure and integrity challenges
• Advanced working understanding of the Information Technology environment of a mobile network operator.
• Experience in working across diverse cultures and geographies (advantageous)
• Experience working in a medium to large ICT / Telecommunications organisation 

Other:

Regional and International Travel obligations