Job Description
ole purpose:
The Secure by Design Specialist is responsible for protecting customer privacy by providing the best-in-class technical security and consultancy to Safaricom Ethiopia across a wide range of IT, network & telecoms solutions. The candidate will assist in identifying potential cyber security risks for new products, services, and operations and identify controls to minimize, mitigate or remove those privacy and security risks.
Responsibilities
Key accountabilities and decision ownership
:
Conduct security reviews, vulnerability assessments & penetration tests across all of Safaricom’s systems/infrastructure.
Ensure all new and existing systems/products/services comply with the Company’s security policies & standards and other industry best practices e.g. ISO27001, CIS and Ethiopia Data Protection Laws.
Review Design and implementation of the identified controls to ensure they are built into the product (at the Design & Build stages).
Provide timely and quality security assurance reports and advice to the business when required even with very tight deadlines
Do regular follow-ups with system custodians/owners to ensure any security risks identified are addressed within the agreed timelines
Define Cyber Security metrics and report periodically on security compliance across all networks/systems
Research on new threats/technologies/vulnerabilities/security design principles etc..
Working knowledge of Virtualization & Microservices technologies e.g. VMware, Open shift, Kubernetes, Docker etc will be an added advantage
Working knowledge and experience in DevSecOps technologies and practices i.e. Jenkins, Jira, Github, Gitlab etc will be an added advantage.
Core competencies, knowledge and experience:
Business Competencies:
Written and verbal communication
Technology Awareness
Strategic Planning
Leadership
Creativity and Innovation
Data Analysis
Business Know how
Business Continuity
Risk Management
Telecommunications
Project and Programme Management
Client Relationship Management
Collaboration
Functional Competencies:
Knowledge Vulnerability assessment tools.
Knowledge of end-to-end system security assurance process.
Knowledge of operating systems like Windows, Linux, and UNIX.
Expertise in ethical hacking tools, techniques and methodologies.
Cloud security
Network security
Software development and DevSecOps.
Scripting language
Web and Mobile Application Penetration testing.
Qualifications
Must have technical / professional qualifications:
Bsc Degree in Electrical Engineering, Computer Engineering, Software Engineering or Computer Science or closely related field of study
Desired
Professional security training and certifications like Security+, CEH, Pentest+, CCIE, and CISSP
Eligibility Criteria:
Must have assumed current Safaricom role for a minimum of 12 months period.
Employees are strongly advised to discuss their
career aspirations
with their line managers when they apply for vacant jobs.
Candidates are eligible to apply for roles at the same level (
possible lateral move to another function
) or one level higher (next higher immediate level)
Please be aware that promotions (band increments) may lead to changes in financial rewards. However, lateral moves only result in changes to job title and reporting lines.
For Regional roles, knowledge of the Region local language is essential
https://egjd.fa.us6.oraclecloud.com/hcmUI/CandidateExperience/en/sites/STEP/job/1505/easy-apply/email?sortBy=POSTING_DATES_DESC
Apply Now
Job Info