Senior Specialist - Security Architecture.Technology

Job Description

Requirements

• Deep understanding of operating systems (Linux/Unix, Windows Server/Client), configuration management, and automation tools (e.g., Ansible, Puppet, PowerShell).
• Strong knowledge of network security, identity and access management, cloud security, and data protection mechanisms.
• Experience in vulnerability management tools (Qualys, Tenable, Rapid7, etc.) and patch orchestration.
• Solid grasp of architecture frameworks (TOGAF, SABSA) and security standards (ISO 27001, NIST CSF, CIS Controls).
• Capability to perform threat modeling, security design reviews, and PoCs for new technologies.

Responsibilities

• Develop and maintain MTN Cameroon’s Security Architecture Blueprint in alignment with Group Information Security framework and Enterprise Architecture frameworks.
• Lead security-by-design integration across new technologies (Cloud, AI, APIs, 5G, Big Data), ensuring that emerging digital platforms are built securely from inception.
• Translate cybersecurity requirements and risk appetite into actionable architecture patterns, reference models, and implementation guides.
• Champion modernization initiatives to replace or harden obsolete systems (vulnerability remediation).
• Champion vulnerability remediation through innovative manners (compensative controls, etc.)
• Develop and continuously update Information Security Plans continuously to support Yearly Business Plans
• Engage with Procurement for security suppliers onboarding
• Support strategic decision-making by providing clear visibility of architectural risks, technical debt, and remediation plans.
• Security and Privacy by Design: Work with Enterprise architects and the IT Risk Management and Control Design role to ensure security is considered upfront in projects management.
• Design and validate secure configurations for critical Linux, Unix, and Windows systems; automate their deployment and hardening where possible.
• Maintain the MTN Cameroon Security Architecture Blueprint
• Drive the vulnerability management lifecycle: from root cause identification to remediation support, prioritization, and sustainable closure within timelines.
• Conduct Proofs of Concept (PoCs) for security tools, configurations, or architectures, demonstrating feasibility and efficiency before large-scale rollout.
• Work hands-on with IT Operations and Network Operations teams to troubleshoot complex issues and ensure that vulnerability remediations are technically sound and operationally feasible.
• Build playbooks and guidelines to empower operational teams, scaling their ability to patch, configure, and secure systems efficiently.
• Support incident response activities by providing architectural insights and containment strategies.
• Information Security Business Plans
• Projects follow-up
• Information Security advisor for projects
• Data Protection: Maintain the data inventory and make sure appropriate measure are taken for each type of data
• Ensure architectural compliance with ISO 27001, NIST CSF, CIS Controls, Group Tech Security Standards (TSS) and with laws and regulations.
• Participate in architecture review boards and change advisory boards to assess security impact of changes and projects.
• Maintain architecture documentation, threat models, and system security baselines for audit and continuous improvement.
• Liaise with the internal and external auditors, and with ANTIC, providing evidence of secure architecture and remediation progress.
• Define and track key architecture metrics (e.g. patch coverage, architectural risk index).
• Monitor the vulnerabilities metrics and take decisive actions to improve the trend.
• Source, induct, and manage talent in accordance with legislative guidelines
• Ensure open communication channels with staff and implement change management interventions where necessary
• Provide definition of roles, responsibilities, individual goals, and performance objectives for the team
• Set KPIs and provide regular performance feedback through a well-defined and implemented performance review program
• Develop and implement a training plan to build and develop skills within the team
• Actively participate in leadership team
• Support team capability development through the creation of opportunities for realizing full potential
• Promote a ‘MTN centric’ and ‘partnership approach’ to develop strong relationships with other working groups and ensure adherence to Group governance
• Work in a team and drive own and cross functional team working across various divisions
• Accountable for meeting and prioritising project team targets / deadlines
• Lead cross functional and own team meetings and contribute on specialist / technical areas when required
• Review performance metric dashboards prepared on various performance metrics
• Provide input on all projects initiated
• Review key risks, issues and dependencies and set mitigation actions
• Provide input in strategic meetings when required
• Provide inputs into the risk mitigation and controls
• Provide input into the preparation of proposal on change initiatives, policies, and procedures
• Manage and resolve escalations that have impact on critical path of service delivery
• Escalate issues that will result in significant time, scope, employee/customer or cost impact if not resolved
• Manage and provide solutions to issues that require formal resolution
• Provide input into all projects initiated
• Provide input into establishing objectives, targets, and budgets for the function as applicable
• Identify and document key risks, issues and dependencies and set mitigation actions
• Prepare documentation required for sign-off / making decisions regarding tactical changes
• Review performance against agreed KPIs and their compliance to SLAs and reverse SLAs
• Review and monitor plan for continuous improvement
• Ensure execution in alignment with divisional strategy
• Continuous performance monitoring and adjust strategy and actions to deliver targets
• Report on a periodic basis relating to progress made within the function and in accordance with the measurement metrics set by the organization
• Report on an ad hoc basis on specific projects, as required
• Manage sub-divisional budget in line with business objectives
• Manage project or initiative budget in line with business objectives