M-Pesa Africa: Technology Governance Manager at Vodafone Global Enterprise

Role Purpose:

• The Technology Governance Manager lead the strategic design, implementation, and oversight of MPESA Group’s integrated Governance and Assurance (GRA) framework, ensuring operational integrity, regulatory compliance, and technology resilience across all markets.
• This role spans MPESA’s on-premise, hybrid-cloud, and AWS, HCS, GCP and Azure environments, driving standardisation across Service Management, Security, Data, and Infrastructure Governance.
• The incumbent will serve as the single point of accountability for governance strategy, internal control effectiveness, and assurance alignment across MPESA’s technology ecosystem.

Your responsibilities will include:

Governance Strategy & Framework

• Lead the end-to-end assurance lifecycle, including internal audits, control testing, remediation tracking, and management reporting.
• Ensure alignment of MPESA’s governance activities with Vodacom, Safaricom, and regulatory oversight structures.
• Oversee the Technology Control Environment (TCE) — monitoring compliance, control effectiveness, and continuous improvement.
• Drive implementation of automated control monitoring and AI-assisted assurance to enhance risk visibility and decision-making.

Assurance & Risk Management

• Lead the end-to-end assurance lifecycle, including internal audits, control testing, remediation tracking, and management reporting.
• Ensure alignment of MPESA’s governance activities with Vodacom, Safaricom, and regulatory oversight structures.
• Oversee the Technology Control Environment (TCE) — monitoring compliance, control effectiveness, and continuous improvement.
• Drive implementation of automated control monitoring and AI-assisted assurance to enhance risk visibility and decision-making.

Compliance & Regulatory Alignment

• Ensure full compliance with all applicable regulatory, privacy, and cybersecurity frameworks, including ISO/IEC 27001, PCI DSS, GDPR, and POPIA.
• Develop and maintain a Compliance Map linking regulatory obligations to control implementations across all environments.
• Coordinate with Legal, Internal Audit, and Risk functions to ensure alignment of assurance efforts and reporting structures.
• Lead periodic compliance audits and self-assessments, ensuring audit readiness and timely remediation of findings.

Operational Assurance

• Oversee Service Assurance, ensuring availability, continuity, capacity, and incident management controls are in place and measurable.
• Define assurance metrics and dashboards to track performance, compliance, and maturity across service and infrastructure layers.
• Collaborate with Platform Engineering and Operations to ensure control enforcement in CI/CD, MLOps, and cloud deployment processes.
• Champion the adoption of Zero-Trust frameworks, ensuring governance extends from network to data and identity layers.

Cross-Functional Leadership & Collaboration

• Partner with CMDB & Asset Management, Data Governance, Cyber Security, and Service Management teams to ensure integrated governance coverage.
• Engage with market CIOs, Risk Officers, and Regulatory Liaisons to harmonize local governance models with the MPESA Group blueprint.
• Provide strategic guidance to the Governance and Assurance Council, aligning initiatives across markets, functions, and domains.

Audit, Reporting & Continuous Improvement

• Produce executive dashboards and board reports highlighting governance posture, audit results, and risk trends.
• Embed a continuous improvement cycle, using audit outcomes and incident learnings to strengthen future control design.
• Drive maturity assessments against industry benchmarks (e.g., CMMI, COBIT Maturity Model) to guide roadmap evolution.

The ideal candidate for this role will have:

• Bachelor’s Degree in Computer Science, Information Systems, or Business Administration.
• Minimum 12–15 years’ experience in Governance, Risk, Compliance, or IT Assurance leadership roles.
• Certified in COBIT, ITIL v4, ISO 27001 Lead Implementer/Auditor, or CISA/CISM.
• Deep understanding of regulatory environments across African markets and cloud-based compliance frameworks.
• Proven experience in managing multi-country technology governance, ideally within telco, fintech, or regulated financial services.
• Excellent analytical, communication, and stakeholder management skills, with board-level presentation experience.

Core Competencies,knowledge and experience:

• Strategic Leadership & Influence: Ability to define governance vision and embed it across executive, operational, and regional levels.
• Holistic Governance Mindset: Expertise spanning IT, Data, and Security Governance, with the ability to integrate them into one unified control framework.
• Risk & Assurance Expertise: Strong command over risk management, internal controls, audit readiness, and assurance automation.
• Change Leadership: Proven ability to lead transformation across diverse markets, embedding compliance culture and operational discipline.
• Stakeholder Alignment: Exceptional communication and negotiation skills to drive collaboration across business, audit, and technology domains.

Closing date for Applications: 03 December 2025.