Senior Specialist - Data Protection and IAM.Technology Information

Job Title

Information Security Specialist - Identity & Access Management & Data Protection

Company/Organisation Name

MTN

Location

South Africa (with travel to Spoke Opcos)

Mission/Core purpose of the Job

This role reports into the MTN SA Hub and provides Information Security Services to identified Spoke MTN Operating Companies (Opcos). Responsibilities include designing, implementing, and maintaining identity and access management (IAM) solutions and processes, providing data protection services, and anticipating data security requirements.

Minimum Requirements

Education

• Minimum of 3 years tertiary qualification (degree/national diploma) in Information Technology/Engineering
• CISSP/CEH/CGEIT certification (one of)
• Business analysis/architecture qualifications
• Other qualifications (ITIL, TMF, COBIT) advantage

Experience

• Minimum of 5+ years of relevant work experience in Information Security
• Experience in managing and implementing large scale security projects
• Advanced working understanding of the information and technology environment of a bank or telecom company
• Understanding of emerging markets advantageous
• Worked across diverse cultures and geographies
• Pan Africa multi-cultural experience is advantageous

Functional Knowledge

• Strong knowledge of data protection software and hardware solutions
• Knowledge of data security mechanisms and cryptographic techniques
• Knowledge of data security standards
• Experience implementing solutions beyond analysis/assessment
• Experience in a technical customer-facing consulting or advisory role
• Experience implementing data security solutions for applications and databases
• Basic knowledge of DLP solutions
• Fluent in English and overall business acumen
• Ability to express complex technical security control concepts
• Ability to work well with people from different disciplines and countries
• Ability to communicate effectively with business customers and suppliers
• Knowledge of national and international regulatory compliances and frameworks

Competencies

Head - Big Picture Focus

• Strategy Implementers
• Decisive Problem Solver
• Best Practice Value Creator

Heart – Emotionally Intelligent

• Culture and Change Champion
• Guiding People Manager
• Relationship Builder

Hands – Results Focused

• Results Achiever
• Operationally Astute

General working conditions

• Target driven and cyclic in nature
• Long, irregular hours and tight deadlines during peak periods
• Working in a busy open plan environment
• Stressful, non-routine
• Tied in with legal responsibilities
• Laptop, standby, dial-in facility, mobile phone
• Full-time engagement online/telephonic with In-country teams of the Spoke Opcos
• Must be willing to travel outside of the country to Spoke Opcos if required

KPA Quality Standards

• Security settings deployed – alignment to MTN security standards and best practices
• Number of server and application systems to which the security standards are deployed
• Degree of impact to systems and users while deploying standards
• Security settings deployed counter MTN risks
• Speed with which security settings are deployed
• Implementation of security event monitoring
• Completeness and accuracy of documentation
• Sustainability of processes implemented
• Expenditure within budget
• Quality of source data
• Meeting agreed SLA’s with customers
• Objectives of area met
• Collaboration with all key stakeholders
• Drives short term actions consistent with long term goals
• User/customer satisfaction/feedback
• Capex and Opex vs budget
• Project Metrics (In time, cost + quality)
• Systems availability
• Timely delivery of information to internal customers
• High levels of automation of data processing and reporting
• Incorporation of new technologies
• Alignment to MTN Strategy

Context

• Highly pressured planning and operational environment
• ISO 27001, OWASP, NIST, SANS, and POPI
• Fast-changing, regulated business environment
• Security managed cross-functionality across Network and IT functions
• Security policies and frameworks driven from MTN Group
• Dealing with rapid advancement of systems and technology
• Highly regulated and legislated environment
• Operating in a scarce skills and highly specialized systems environment
• Outsourced partners and driving vendors through in-house knowledge
• Requirement for a single version of the truth drive across MTN South Africa
• High data volumes

Key Performance Areas

• Implement business processes and policies related to controlling access to data, protection strategies, architectures, and implementation plans
• Work closely with Privacy teams of Spoke Opcos to ensure potential and real incidents of data leakage are resolved
• Provide security guidance and review on business and technology solutions
• Implement policies and standards to protect data, applications, and the associated infrastructure in a public cloud
• Configure and implement Mobile Application/Device management policies
• Define local Opco security policies and standards for database protection
• Implement information security controls to protect databases and stored data
• Demonstrate architectures, methods, and controls required to meet stringent compliance and audit requirements
• Administer and support data loss prevention solutions
• Assist in identifying, assessing, and recommending security software, processes, and services
• Recognize and identify potential areas where existing data security policies require change
• Maintains an awareness of industry trends and emerging risks
• Provide support to manage critical issues that may affect customers
• Complete status and statistical reports in assigned area
• Provide support to Senior Manager Security Managed Services in partnering with legal, privacy, and audit departments
• Lead the daily operations of Access Provisioning
• Oversee the design, installation, configuration, and support of IAM security technologies
• Define local Spoke Opco policies, standards, and procedures for remote access and remote access security
• Assess and develop IAM roadmaps to improve the Opcos’ security posture
• Lead efforts and participate in audits covering IAM services and technologies in the Opcos
• Assist in executing upgrades to existing systems
• Activities that are not executable from the Hub Opco needs to be raised to the relevant stakeholder
• Build a strong relationship with Spoke Opco to ensure delivery
• Where there are challenges to perform tasks remotely, ensure the Spoke Opco executes actions that are in line with above mentioned activities