Senior Specialist - Cyber Defence.Technology Information at MTN

Job Description
Key Deliverables - Ensure clear execution on below deliverables

• Provide security guidance and review on business and technology products/ solutions, model threats and risks as well as the controls necessary to mitigate them, on both an organisational and technical level – thinking like a malicious hacker, understanding and anticipating the moves and tactics that a hacker might use to attack MTN systems
• Define local Opco security policies and standards and operating procedures for vulnerability management
• Provide vulnerability analysis specific input to the MTN Group information security strategy
• Develop, integrate and monitor detailed business plans for vulnerability analysis in accordance with the frameworks, goals and targets
• Work with Group Cyber Defence to coordinate scans with all other parties involved in MTN, including the distribution of notices or notifications, and the management of logistical requirements
• Lead process optimisation, enhancement, efficiency and continuous improvement on initiatives and programmes within the cyber threat and vulnerability management, as well as benchmark and analyse trends to optimise internal processes
• Organise and execute periodic penetration tests to ensure that they are secure from external or internal intrusion attempts thus reducing the risk of successful intrusions against MTN Group as a whole
• Lead efforts and participate in audits covering cyber defence for the Opcos
• Perform authorized attack surface reviews and penetration tests against specific targets at the direction of the Senior Manager, Security Monitoring & Response.
• Perform vulnerability assessment on the MTN Opcos infrastructure and systems by applying knowledge of scanning tools and emerging risks.
• Conduct network and/or system monitoring for malicious activities or policy violations.
• Track and prioritise the remediation of vulnerabilities, according to their level of criticality and their potential risk to the business of the affected asset. Report on the status of the resolution of vulnerabilities on a periodic basis.
• Ensure incident identification, assessment, quantification, reporting, communication, and mitigation while confirming SLA compliance, process adherence, and process improvisation to achieve operational objectives.
• Perform threat management, threat modelling, identify threat vectors and develop use cases for security monitoring. Maintaining working knowledge of cyber threat actor tactics and techniques.
• Responsible for integration of standard and non-standard logs into the Group SIEM and review/ revise the processes to strengthen Security Operations.
• Co-ordinate with stakeholders, build and maintain positive working relationships with them.
• Work with Technology Security Leadership to implement the cyber threat and vulnerability management strategies and operational requirements
• Assist to drive strategic alignment of the Group cyber incident response operations and MTN GIS cyber incident response services
• Develop a standardised set of responses to cybersecurity breaches with responses varying according to the level of cybersecurity breaches.
• Work with the Cyber Defence team to revise and develop processes to strengthen the current Security Operations Framework, review policies and highlight the challenges in meeting the required performance targets
• Assist to drive strategic alignment of the Group cyber incident response operations and MTN cyber incident response services
• Develop a standardised set of responses to cybersecurity breaches with responses varying according to the level of cybersecurity breaches.
• Work with the Cyber Defence team to revise and develop processes to strengthen the current Security Operations Framework, review policies and highlight the challenges in meeting the required performance targets

Creativities (improvement/innovation inherent)

• Implement and enhance security disciplines
• Investigate and research best practices in Cyber Defence, Threat & Vulnerability Management and related disciplines with a view to leveraging for MTN
• Reduce complexity and streamline processes with a view to optimize technologies and reduce operational costs
• Input and leadership in analytical thinking for MTN
• Influence management decision making in security related aspects
• Pro-active
• Champion of quality and doing things right the first time
• Sharing of knowledge and security skills

Budgets

• Assist with management of departmental budgets in line with business objectives and facilitate forecasting
• Manage project initiative budgets in line with business objectives
• Drive initiatives that will ensure that the “cost of operations” are reduced, in line with a least cost operating strategy stemming from the business drivers.

Vulnerabilities (control span)

• Large amount of workload
• Operational teams’ commitments to other projects
• Complexity of the environment and the need to implement security changes in a phased manner to minimize impact
• Vendor Applications not being able to meet the security standards