Information Security Threat and Vulnerability Consultant at MTN

Job Description

Join the MTN Group to experience the power of the MTN Brand across a global footprint, celebrating our diverse communities while unlocking your potential. The bold and inspiring leadership team that enables the achieving of performance excellence in the MTN way in everything we do, everywhere they go.

The security threat and vulnerability role will manage and oversee the vulnerability management process across the MTN environment and provide technical support and expertise to the operating companies (OpCos). The purpose of the job will also be to provide security vulnerability services, framework and tools to both internal/ external customers. The incumbent will be responsible for the central execution of the vulnerability management process against MTN’s perimeter as well as act in an advisory capacity on identified information security threats/vulnerability challenges and provide mitigation action and best-practice sharing to embed an information security business culture.

The role reports to the General Manager for Information Security Operations.

You must have the following:

Education

• 4-year Engineering/ Information Science Degree

Experience

• 5 - 8 years of relevant work experience in Information Technology (specifically security)
• 2 - 4 years of experience at the Management level in the telecom industry
• 2 - 4 years working experience in the management of information security threat and vulnerability in a large organisation would be advantageous (establishment of the process, implementation of the toolset and integration with requisite processes such as threat intelligence, CMDB and service management), driving closure of vulnerabilities to improve the profile of the organisation.
• Experience in implementing large scale information security projects
• Experience in Governance, Enterprise Risk Management and Compliance
• Experience working in Africa and Middle East and have a grasp of political, social, infrastructure and integrity challenges
• Advanced working understanding of the information technology environment of a telecom company

Additional requirements

• CISSP certification
• Other preferred certifications are: CISA, CISM, CGEIT, CRISC, CBCP
• Multi-country operations oversight experience
• Willing and flexible to travel within Africa and Middle East
• Understanding of general regulatory requirements in the telecom industry.