About The Role

About Us

At Safaricom Ethiopia, we are a purpose-led technology company dedicated to transforming lives through digital connectivity and inclusive financial services. In under four years, we have grown to serve over 10 million customers, with our network now reaching 55% of Ethiopia’s population – a testament to our bold vision and trusted partnerships.

Guided by core values such as customer obsession, innovation, integrity, and get it done together, we are building a workplace that is dynamic, inclusive, and empowering. We believe our greatest strength lies in our people. That’s why, for two consecutive years, we have proudly get earned the Top Employer Award – in recognition for our unwavering commitment to fostering a supportive, innovative, and inclusive environment to people.

Join Safaricom Ethiopia and be part of a team that is shaping the digital future of Ethiopia. Here, your work has meaning, your voice matters, and your growth is our priority. Together, we are transforming lives for a digital future

Key accountabilities and decision ownership

Develop and maintain a comprehensive data protection strategy in alignment with regulatory requirements and organizational goals.
Develop and implement cyber security policies, standards, and procedures based on industry best practices and regulatory requirements.
Ensure the organization complies with relevant data protection laws and standards, such as GDPR, CCPA, etc.
Lead the implementation and maintenance of data protection policies and procedures.
Conduct risk assessments and audits to identify and mitigate data protection risks.
Monitor data processing activities and ensure data protection impact assessments are conducted where necessary.
Develop and deliver training programs to ensure staff awareness and compliance with data protection regulations.
Provide expert advice on data protection matters to stakeholders across the organization.
Conduct risk assessments and gap analysis to identify security Gap and develop mitigation strategies.
Collaborate with internal stakeholders to ensure alignment of security controls with business objectives and regulatory compliance.
Monitor compliance with cyber security policies and standards through regular audits and assessments.
Provide guidance and recommendations on security controls, technologies, and best practices to mitigate risks.
Act as a subject matter expert on cyber security Data Protection matters, providing guidance and support to stakeholders across the organization.
Stay updated on emerging threats, vulnerabilities, and regulatory changes to proactively address security risks.

Must have technical / professional qualifications

Degree in Information Technology or Computer Science or a related field.
Deep knowledge of cybersecurity with at least 5 years of experience, including 3 years focused on GRC.
In-depth knowledge of General Data Protection Regulation (GDPR)
In-depth knowledge of cyber security principles, standards, and best practices, including NIST Cybersecurity Framework, ISO 27001, etc.
Experience with Data Protection Technologies
Ability to conduct risk assessments related to data protection and Cyber security.
Relevant certifications (e.g., CIPP, CIPM, CIPT) preferred

Eligibility Criteria

Must have assumed current Safaricom role for a minimum of 12 months period.
Employees are strongly advised to discuss their career aspirations with their line managers when they apply for vacant jobs.
Candidates are eligible to apply for roles at the same level ( possible lateral move to another function ) or one level higher (next higher immediate level)
Please be aware that promotions (band increments) may lead to changes in financial rewards. However, lateral moves only result in changes to job title and reporting lines.
For Regional roles, knowledge of the Region local language is essential