Senior Manager - IS Governance and Technical Assurance.Technology Information

Primary Job Purpose

To implement and maintain the Information Security Management System Framework within MTNSA.

Context

• Security is managed cross functionality across NWG and IS.
• Security policies and frameworks are the responsibility of MTNgroup
• The IS area has to deal with the rapid advancement of systems and technology on within the following areas

• o OSS (Operational support systems)
• o BSS (Business support systems) layers
• o Various Network platforms enabling many Billing, VAS and ISP network functions

• Trends within the industry as being experienced and embraced internationally must be followed
• Deal with and environment that is highly regulated and legislated
• Deal with the consequences of operating in highly specialised environment where there is often a dire skills shortage
• Development is outsourced
• Support is outsourced for a lot of the areas

Key Performance Areas: Core, essential responsibilities / outputs of the position (KPA's)

Task Complexity

Strategic Input

• Develop goals, strategies, and plans needed to achieve the portfolio’s vision and build the capabilities to enable optimal delivery with input from relevant stakeholders
• Align planning against the strategic intent of the company with agreed business outcomes within the portfolio, relevant IT Architecture Enterprise principles, key approved decisions and enterprise wide programs.
• Recommend strategic business opportunities to deliver medium to long-term benefit and growth to the organisation and its customers
• Ensure the enablement of a self-service philosophy
• Influence the technology roadmap defined by Group Technology and help Enterprise Architecture within IS to define standards
• Develop and ensure implementation of a vendor sourcing strategy to manage technical delivery of requirements into the production environments as well as support and maintenance for the production environments.
• Champion and rally the IT and Network organisation around the function and educate these areas on the value of the function to enable revenue generation, cost savings and business performance measurements.
• Investigate strategic IT trends (including initiating and executing relevant proof of concepts) and provides feedback regarding the impact and alignment required
• Conduct strategic analysis of MTN system strategies to ensure that the strategic technological direction aligns and supports MTN Group objectives.
• Translate the strategic vision into operational requirements and drive the fulfilment of these technical requirements.

Tactical Planning and Operations

• Support and pro-actively drive system optimisation research
• Influence and manage SLA’s with infrastructure support to ensure high levels of availability
• Ensure that vendor and 3rd party developers are developing applications that comply with business specifications and implemented according to approved quality standards
• Provide consultation for all applications related projects so that decisions can be made as to the most appropriate delivery methodology
• Ensure incident and problem processes are in place for collaboration with the SMC and any other Help-desks within MTN and IS
• Ensure the creation and management of proof of concept environments to assist with requirements definition
• Ensure delivery of (authorised) projects according to the prioritised project list
• Facilitate the analysis of the current business environment to detect critical deficiencies and recommend solutions for the improved uses of information technology and related solutions and applications.
• Develop and maintain strategic relationships with Vendors to ensure the enablement of MTN Strategy
• Evaluate new technologies and products to determine feasibility and desirability of incorporating their capabilities into the Company’s IS systems
• Define and establish management systems, processes, policies and procedures for effective team functioning.
• Ensure the team performs the necessary analysis, design, modelling and documentation tasks necessary to pass MTN IS governance forums
• Provide consultancy to process at a project level on application, data, security, infrastructure, testing and operational designs through interactions with IS architects, and other systems owners
• Provide high level analysis and design reviews to other teams to avoid duplication efforts in solving the same application problems within different products within MTN
• Provide a quick reaction task force to attend to major IT incidents with a view to improving on systems design and stability
• Define and consistently apply world class standards to ensure solutions are technically sound and sustainable, aligned to IT best practice and suitable within the MTN context.
• Drive design of technology solution architectures with a 2 to 5 year horizon. Focus for both converging IT, Telco technologies and future ICT requirements
• Partner with business leaders and peer-level managers to assess the technological cost and impact of recommended changes, help clarify priorities, and coordinate cross-organizational consortia where common needs have been identified.
• Assess risks and the effects of specific requirements on other business processes and system priorities to ensure technologies are aligned with business strategic objectives
• Ensure implementation of best practices to achieve technical excellence taking cognisance of the impact these changes will have on the total organisation
• Provide strategic and operational leadership to the team, in line with business requirements, technology standards and best practices within the function.
• Engage with other operations to extract potential benefits and efficiencies achieved at a technical implementation and/or process layer.
• Refine the information, reporting, and analytical needs of the function
• Drive the adoption of the common business rules, metrics and measures and ensure that IS commitments, policies and procedures are adhered to
• Align the vision of MTN with the strategic objectives of IS by providing technical expertise to achieve common goals
• Identify, interpret and guide future development by using the appropriate technology to provide solutions using the available technologies
• Analyze technology industry and market trends and determine potential impact upon the business services and processes
• Assume accountability of defined services across multiple system domains
• Ensure delivery of internal business as usual projects through continual identification of

• o Capacity Upgrades that are required due to Network Traffic
• o Software Upgrades required to ensure adherence to maintenance agreements
• o Aspects of a system that have not been performing optimally that require changes to architecture
• o Hardware that is reaching end of life and requires replacement
• o Any PoC required to demonstrate some item of functionality to Business
• o These constitute all BAU project work that needs to take place in any given year and need to be executed on time and on budget

Governance

• Create and continuously review governing principles to guide information, technology, and solution decision making for the enterprise
• Support Implementation corporate governance and ensure adherence to it
• Ensure measurement frameworks are in place to verify completeness, timeliness and accuracy of data.
• Ensure that regular audits are done to ensure that developed reporting and dashboards are utilised by the organisation. Redundant reporting and dashboards to be expired by agreed process.
• Ensure that changes to the current environment are properly documented and tested before promoting into production. Post production changes should be documented and managed.
• Support the prioritisation process to drive prioritisation of requirements and initiatives in functional areas to ensure timeous delivery of requirements
• Support Revenue Assurance functions to understand issues and resolve any revenue issues or leakage
• Create visibility of changes to core systems, data and products by informing the organisation of changes to production
• Support assessment of Portfolio maturity on an annual basis
• Influence and implement aspects of data security policies
• Key areas and critical processes must always have an up to date Policy, Processes or procedure in place such that Business risk is managed which also ensures that any ISO certifications can be maintained and ensure that the team can show evidence where these are being utilised in day to day execution of jobs functions.
• Ensure compliance to MTNSA security standards

Financial

• Ensure that Budget ownership and tracking is in place in the team and that there is a method to pull this together in a central fashion for reporting
• Ensure that Yearly CAPEX Plans are put in place and that each team member provides proper input and information into these
• Compile and manage Capex and Opex budgets relating to functional activities
• Assist in the forecasting, planning and development of the portfolio’s budget and business plans for IS
• Give input into budgets that will enable delivery of area of expertise to the relevant business unit.
• Manage and optimise departmental budget, ensuring all expenditure is in line with the agreed budgets.
• Support CAPEX submissions to ensure that funds are secured.
• Ensure that Yearly CAPEX Plans are put in place and that each team member provides proper input and information into these
• Manage OPEX spend within approved annual budget
• Support the creation of the business case for initiatives and projects in functional areas
• Track infrastructure budgets related to the support of business area platforms, processes and initiatives
• Ensure that all Senior team members are engaging in Vendor Relations and find ways to Leverage the vendor as much as possible in order to manage costs and that vendors provide Quarterly reporting
• Ensure that all Senior team members are involved in Contract ownership and that they update a central location with information on what the vendor supplies and requirements on amendments needed (or on new contract) and help drive this with the IS Commercial team
• Ensure that all contract follow a fixed price model and that MTN IPR is protected

Customer

• One the primary objectives is to ensure the team delivers on requirements set by the business and make sure that changes needed on platforms owned take place on time and within budget. In addition all changes must be of a high quality such that bugs are kept to a minimum to ensure smooth testing cycles
• Ensure that the team presents the following to business on a regular basis

• o Underutilized capabilities of Systems
• o Product ideas against these capabilities
• o Future Technical Landscape and how it may influence future products

Security

• Develop, publish, and maintain comprehensive company wide information privacy and security strategy, plans, policy, procedures, and guidelines.
• Develop processes and policies on chain of trust agreements, disaster recovery plans, audit and governmental compliance.
• Develop security awareness/program and act as primary control point during significant information security incidents.
• Advise Management on risk issues that are related to information security and recommend actions to support MTNSA wider risk management programs.
• Monitor internal and external information security trends and convey relevant technical, operational and strategic security-related information to the management.
• Guide and prioritize MTNSA investments infrastructure that impact security.
• Identify potential threats, vulnerabilities, and control techniques; and advise departmental system administrators appropriately.
• Work with MTN Internal Audit to educate various departments within the organization on information security risks in both ongoing and planned operations.
• Assist MTN units to investigate security breaches and pursue associated disciplinary/legal matters.
• Work with Internal Audit/consultants as appropriate on required security audits.
• Manage the security systems to enable the desired security posture ( anti virus, DLP, websense, Aveksa)

Project Delivery

• Develop and drive the execution of agreed projects
• Drive the implementation, tracking, monitoring and compliance of Projects
• Contract management in line with Procurement Policies
• Co-ordinate project reporting
• Ensure effective implementation of the integrated project management model
• Risk management

Business Analysis

•  Perform Business Analysis MTN SA Business Analysis in line with the methodology and guidelines
•  Identify ways to fine tune policies, processes and systems in line with changing work practices
•  Determine, document, and review requirements for projects within the scope of the value stream or impacting processes and systems
•  Design, analyse and document workflow and make appropriate recommendations that will positively impact operational effectiveness
•  Identify Business Improvement and Optimisation opportunities that will result in improvement of process performance
•  Ensure that benchmarking is conducted with other companies and organizations within and outside the industry.
•  Construct business cases for initiations proposed by the business. Research and consider best practice, local conditions, trends, as well as competitor activity
•  Identify and implement innovative ways to use minimum resources to achieve maximum outputs

Supervisory / Leadership / Managerial Complexity

• Recruit, develop and retain people with outstanding skills, qualifications and potential.
• Ensure effective performance management and ensure the identification of training needs takes place
• Ensure accountability such that customer centric culture is adhered to
• Maintain good Employee relations and enhance collaborative teamwork
• Ensure that subordinates obtain the coaching and guidance that they need
• Build professionalism, loyalty and commitment to the organization
• Communicate actively and effectively resolving any potential conflicts that may arise. Also monitor disciplinary and grievance actions and trends
• Maintain morale within the teams and help improve attitude towards better service delivery
• Maintain clear roles within the team to enhance collaboration and results
• Reward practices conducive to building individuals and team confidence
• Ensure optimal resource allocation and deployment in line with strategic objectives
• Ensure knowledge sharing within teams and discourage knowledge hoarding by centralisation of knowledge
• Define the divisional KPAs and KPIs that will be cascaded down to each area and ensure team goals and core values are communicated and owned by the team members
• Build talent by identifying and developing new leaders for the respective environment.
• Manage Employment Equity and diversity.
• Display an understanding of the strategic nature of effective leadership in the organisation.
• Provide operational direction for the team (jointly setting goals and objectives in accordance to strategy)
• Create a culture of consequential thinking within discipline and actively encourage team to align their thoughts to the consequences of actions taken and decisions made

Role Complexity

• Required scope of work for MTN SA, direct reporting line to a specific functional unit.
• Management of perception that all internal clients have equal access to services.
• Being accountable for overall MTNSA security status
• Align with MTNGroup on policies and best practices

Lateral Dimensions: These indicate the areas where the individuals could contribute uniquely in addition to the indicated duties, as well as how they could be affected by others or circumstances not necessarily under their control.

Creativities (improvement/innovation inherent)

• Analyse information obtained and disseminate to relevant areas of the business in a value-adding way.
• Continuously review portfolio performance and recommend creative ways to enhance performance
• Explore creative and innovative ways to make changes to meeting an ever adapting business in order to increase efficiency and effectiveness of the organisation
• Apply market research in an optimal way to add as much value as possible to own and other areas of the business
• Proactive research and speedily communicate results and recommendations to the relevant areas to build and maintain competitive advantage
• Recommend new, innovative solutions to enhance MTN performance

Vulnerabilities (control span)

• Due to the interdependence on other areas of the business and stakeholders – deadlines may be missed if bottlenecks are not identified timeously / delays occur
• Lack of support and buy in from stakeholders and/ or poor stakeholder management
• Poor planning and forecasting to adequately meet the needs of the unit
• Lack of resources and expertise to perform the work
• Existing Legacy or sub-optimal systems and data frameworks
• Poor articulation with others in the department and other stakeholders – no timeous communication
• Scope of what is undertaken could be underestimated or under scoped
• Dependency on existing vendors chosen
• Changing priorities in the business and conflicting priorities in different areas of the business
• Balancing long term strategy with immediate business needs
• Speed of technology evolution
• Changes in regulatory and statutory environments
• Reliance on proper testing environments that are full duplications of live environments (complexity and cost)

Collaboration: Refers to formal and informal relationships

Responsibility towards

• Key customers: MTN SA Executives, General Managers and senior Managers with their functional areas
• Key suppliers: Procurement, Suppliers for Trade Marketing. Sourcing and managing suppliers; Security suppliers, External systems supporting new lines of business (Mobile Money, Media and Entertainment)
• Relations, etc.: All departments in MTNSA and Group, MTN’s business strategy, MTN IS operations and applications, Network division, Enterprise business unit (EBU)

Discretionary Space: The degree to which individuals are allowed to exercise independent thought and judgment.

Independent thought and Judgment

• Management of budgets through viewing ones landscape innovatively and prioritising work
• Determine SLAs with “internal clients” as well as external outsourced suppliers.
• Exercise the mandate, subject only to budget and legal constraints
• Implement changes on a discretionary basis
• Implement efficiencies in systems and processes
• Implement System, process and procedure fine-tuning / development to achieve business objectives
• Exploration of the market and global trends to recommend future direction in terms of business architecture and information needs.
• Lateral thought to recommend system development requirements to align with Business Plan strategy.
• Decision-making that is effective and responsible for profit and business sustainability and growth and within parameters of budget and business plan
• Make retention-based judgement calls
• Set objectives for the department

Authorities

As per delegation of authority

Minimum Requirements

• Minimum of 4 year tertiary qualification in Information Systems or Engineering (BSc IT, Bcom IT, Diploma IT)/ Masters advantageous
• Managerial courses will be an advantage
• CISSP, CISM or equivalent Information Security qualification or relevant proven working experience

Experience

• Manager track record of 5 years on more with at least 3 years in relevant sector / industry
• Experience in designing and implementing organisation wide information security framework.
• Experience in managing and implementing information security projects.
• Exposure to managing external vendor/supplier relationships and service level agreements
• Understanding of general regulatory requirements in the telecom industry
• Advanced working understanding of the information technology environment of a telecom company.
• Experience in Governance, Enterprise Risk Management and Compliance.
• Worked across diverse cultures and geographies advantageous

Training

• People management Skills
• Industry related seminars / conferences
• Systems training
• Telco-related training
• Presentation skills
• Communication (written and verbal)
• Negotiation
• Other IT Specific – Architecture, Networks & Storage infrastructure systems
• CISSP, CISM or equivalent Information Security qualification or relevant proven working experience

Competencies

• Head - Big Picture Focus (20)
• Strategy Implementers - Ensures execution of strategies through creating and implementing tactical plans for others to follow
• Decisive Problem Solver - Has the mental agility to identify business challenges and explore effective solutions through effective influencing
• Best Practice Value Creator - Encourages commercial innovation and continuous improvement for systems, processes, products and service offerings
• Heart – Emotionally Intelligent (30)
• Culture and Change Champion - Role models ethical practices by living the MTN values and vital behaviours for others to follow
• Guiding People Manager - Is self-aware and guides team capability development through opportunity creation for realising potential
• Relationship Builder - Builds relationships across the business in order to influence decision-makers and build team credibility
• Hands – Results Focused (40)
• Results Achiever - Produces sustainable divisional results through ethical practices
• Operationally Astute - Sets priorities, plans, organizes and co-ordinates the work of others

Behavioural qualities

• Influential
• Decisive
• Action-oriented
• Customer centricity
• Assertive
• Comfortable working with abstracts and concepts
• Attention to detail
• Flexible and adaptable
• Agnostic towards technology/application vendor and product choices – focus on results than in personal choices
• Has a reputation for integrity and displays a high degree of solution intellectual capacity.
• Respected leader by various business units as well as other internal IS divisions
• Future visioning
• Professional ethics
• Demonstrates Initiative
• Has foresight and can predict outcomes far into the future
• Perseverance - Copes with pressures and setbacks
• Networking abilities
• Team builder/player
• Ability to adapt to changing requirements of clients and staff members
• Excellent Interpersonal Skills
• Passion for IT and Technology and still "dabbles" to ensure effective ongoing architectural leadership
• Adaptable to change

Knowledge

• Security systems such as DLP, Antivirus
• Security standards
• Telecommunication technologies – Good understanding of the Mobile Network and related technologies
• Good understanding of relevant IT protocols such as FTP, SNMP, LDAP, HTTP, SOAP, XML, XHTML etc.
• Systems architecture & design.
• UNIX & Linux operating systems
• Good knowledge of IP technologies
• Knowledge of Planning and optimisation principles and methodologies
• Exposure and sensitivity to customer facing issues (marketing, sales etc.), and understanding the implications thereof
• Business acumen
• Knowledge of:

•  ISO9000, 9002, Six Sigma, TMM, CMMi
•  Business intelligence best practices and standards
•  Project management and Project office support and best practice
•  MTN Shared services and application strategies

• Understand system structure and architecture
• Knowledge of legislative requirements (highly regulated environment)
• Understanding of the end-to-end business
• Telecommunication sector knowledge (Now and Future)
• MTN product and services
• Core network knowledge would be advantageous (GSM, UMTS, LTE)

General working conditions (e.g. shift work, drivers license, specific tools, special clothing, environmental requirements, etc.)

• Target driven and cyclic in nature
• Long, irregular hours and tight deadlines during peak periods
• Must be willing to travel when required
• Working in busy open plan environment
• Stressful, Non routine
• Tied in with legal responsibilities

KPA Quality Standards

• Expenditure within budget
• Quality of source data in terms of completeness, accuracy and timeliness
• Meeting agreed SLA’s with customers
• Collaboration with all key stakeholders
• Drives short term actions consistent with long term goals.
• User/customer satisfaction/feedback
• Systems availability
• Sustainable architectures
• Ensure that IS commitments, policies and procedures are adhered to
• Execution of IS Enterprise Architecture frameworks, strategies, technologies, standards
• Delivery of key analytical roadmap building blocks
• Implementation of self-service roll-out plan
• High levels of automation of data processing and reporting
• Incorporation of new technologies
• Alignment to MTN Group Strategy