Job Summary :

Implements MTN security controls, risk assessment framework, and program that align to regulatory requirements, ensuring documented and sustainable compliance that aligns and advances MTN business objectives.  Evaluates risks and develops security standards, procedures, and controls to manage risks and improves security positioning through process improvement, policy, automation, and the continuous evolution of capabilities.  Updates security controls and provides support to all stakeholders on security controls covering internal assessments, regulations, protecting Personally Identifying Information (PII) data, and Payment Card Industry Data Security Standards (PCI DSS).  Performs and investigates internal and external information security risk and exceptions assessments as well as assess incidents, vulnerability management, scans, patching status, secure baselines, penetration test result, phishing, and social engineering tests and attacks.

Responsiblities :

*Continuously co-ordinate with relevant functional teams to implement information security as defined by MTN across the organization

*Perform IS assessments and compliance exercises (both technical and procedural) in order to ensure that information security controls are adequately implemented to effectively achieve the targeted objectives and compliance with MTN information security requirements.

*Assist relevant stakeholders in setting and maintaining the required functional and technical information security controls details.

*Provide adequate technical support for any escalated information security issues.

*Perform any additional tasks assigned from Senior Manager (LISO) in the context of information security function

*Identify any additional /missing security controls to be implemented

*Manage PPPs validity

*Execute PPPs regular reviews

*Execute IS awareness programs

*Follow up IS correspondence with external parties

*Create situational awareness for company

*Provide consultancy and clarifications for security risks and requirements

*Execute technical security R&D

*Sensitively and high attention to details.

*Dealing with strict PPPs.Instability and equipment/system failure.

*Provide information/data support’s management decisions making.

*High-speed rhythm and pop-up immediate problem solving.

*Highly regulated laws and complex regulations.