Safaricom Ethiopia
Safaricom Telecommunications Plc is a company supporting Ethiopia’s digital transformation.
Log In
Sign Up
Job Description
ole purpose:
The Secure by Design Specialist is responsible for protecting customer privacy by providing the best-in-class technical security and consultancy to Safaricom Ethiopia across a wide range of IT, network & telecoms solutions. The candidate will assist in identifying potential cyber security risks for new products, services, and operations and identify controls to minimize, mitigate or remove those privacy and security risks.
Responsibilities
Key accountabilities and decision ownership:
- Conduct security reviews, vulnerability assessments & penetration tests across all of Safaricom’s systems/infrastructure.
- Ensure all new and existing systems/products/services comply with the Company’s security policies & standards and other industry best practices e.g. ISO27001, CIS and Ethiopia Data Protection Laws.
- Review Design and implementation of the identified controls to ensure they are built into the product (at the Design & Build stages).
- Provide timely and quality security assurance reports and advice to the business when required even with very tight deadlines
- Do regular follow-ups with system custodians/owners to ensure any security risks identified are addressed within the agreed timelines
- Define Cyber Security metrics and report periodically on security compliance across all networks/systems
- Research on new threats/technologies/vulnerabilities/security design principles etc..
- Working knowledge of Virtualization & Microservices technologies e.g. VMware, Open shift, Kubernetes, Docker etc will be an added advantage
- Working knowledge and experience in DevSecOps technologies and practices i.e. Jenkins, Jira, Github, Gitlab etc will be an added advantage.
Core competencies, knowledge and experience:
Business Competencies:
- Written and verbal communication
- Technology Awareness
- Strategic Planning
- Leadership
Creativity and Innovation
- Data Analysis
Business Know how
- Business Continuity
- Risk Management
- Telecommunications
Project and Programme Management
- Client Relationship Management
- Collaboration
Functional Competencies:
- Knowledge Vulnerability assessment tools.
- Knowledge of end-to-end system security assurance process.
- Knowledge of operating systems like Windows, Linux, and UNIX.
- Expertise in ethical hacking tools, techniques and methodologies.
- Cloud security
- Network security
- Software development and DevSecOps.
- Scripting language
- Web and Mobile Application Penetration testing.
Qualifications
Must have technical / professional qualifications:
- Bsc Degree in Electrical Engineering, Computer Engineering, Software Engineering or Computer Science or closely related field of study
Desired
- Professional security training and certifications like Security+, CEH, Pentest+, CCIE, and CISSP
Eligibility Criteria:
- Must have assumed current Safaricom role for a minimum of 12 months period.
- Employees are strongly advised to discuss their career aspirations with their line managers when they apply for vacant jobs.
- Candidates are eligible to apply for roles at the same level (possible lateral move to another function) or one level higher (next higher immediate level)
- Please be aware that promotions (band increments) may lead to changes in financial rewards. However, lateral moves only result in changes to job title and reporting lines.
- For Regional roles, knowledge of the Region local language is essential