Core Purpose of The Job:  
Responsible for developing and maintaining Information Security agenda, strategy and practice in order to minimize risks, to the level acceptable / set by MTN board / management and in alignment with the Group information security program, at the least impact on costs and schedule, while maintaining the confidentiality, integrity, and availability of MTN’s information, and technology assets.
Task Complexity:

*Prepare and obtain agreement on plans and budgets enabling the Information Security department to make an optimal contribution.

*Operate the department within the allocated budgets.

*Recruit, motivate and develop staff ensuring that objectives are established and communicated, individual performance is supported, monitored and reviewed, to ensure manpower plans are met.

*Manage the establishment and maintenance of organizational Information Security policies, processes and procedures to lay the foundation for a control environment coherent to the risk level acceptable by the organization.

*Manage and support the implementation of risk assessments exercises across the organization in order to trap and highlight information security weaknesses and advice on controls to mitigate those risks.

*Develop and manage plans for the implementation and operation of authorized information security solutions covering all aspects of information security in order to meet the defined objectives.

*Manage information security governance and monitor compliance to Information security policies, procedures and standards via a robust information security program/plan depicting continuous planned and ad-hoc audit and review exercises

*Initiate, facilitate, and promote a focused information security programs to create and maintain adequate information security awareness and encapsulate such within all organizational activities.

*Manage escalating issues (within the information security domain) along with relevant stakeholders.

*Interface with other organizational units, when needed.

*Manage change management requests (within the information security domain) in Change Advisory Board (CAB) to ensure adequate resolution. 

*Conduct knowledge transfer sessions for information security department members.

*Serve as an internal information security consultant to MTN and advise the organization with trending information security technologies/related regulatory issues.

*Coordinate the activities of the Information Security Committee.

*Ensure adequate compliance to the information security requirements of MTN.

*Identifies opportunities for improvement and makes constructive suggestions for change.