About The Role

ole purpose

The Secure by Design Specialist is responsible for protecting customer privacy by providing the best-in-class technical security and consultancy to Safaricom Ethiopia across a wide range of IT, network & telecoms solutions. The candidate will assist in identifying potential cyber security risks for new products, services, and operations and identify controls to minimize, mitigate or remove those privacy and security risks.

Key accountabilities and decision ownership

Conduct security reviews, vulnerability assessments & penetration tests across all of Safaricom’s systems/infrastructure.
Ensure all new and existing systems/products/services comply with the Company’s security policies & standards and other industry best practices e.g. ISO27001, CIS and Ethiopia Data Protection Laws.
Review Design and implementation of the identified controls to ensure they are built into the product (at the Design & Build stages).
Provide timely and quality security assurance reports and advice to the business when required even with very tight deadlines
Do regular follow-ups with system custodians/owners to ensure any security risks identified are addressed within the agreed timelines
Define Cyber Security metrics and report periodically on security compliance across all networks/systems
Research on new threats/technologies/vulnerabilities/security design principles etc..
Working knowledge of Virtualization & Microservices technologies e.g. VMware, Open shift, Kubernetes, Docker etc will be an added advantage
Working knowledge and experience in DevSecOps technologies and practices i.e. Jenkins, Jira, Github, Gitlab etc will be an added advantage.

Core competencies, knowledge and experience

Business Competencies

Written and verbal communication
Technology Awareness
Strategic Planning
Leadership

Creativity and Innovation

Data Analysis

Business Know how

Business Continuity
Risk Management
Telecommunications

Project and Programme Management

Client Relationship Management
Collaboration

Functional Competencies

Knowledge Vulnerability assessment tools.
Knowledge of end-to-end system security assurance process.
Knowledge of operating systems like Windows, Linux, and UNIX.
Expertise in ethical hacking tools, techniques and methodologies.
Cloud security
Network security
Software development and DevSecOps.
Scripting language
Web and Mobile Application Penetration testing.

Must have technical / professional qualifications

Bsc Degree in Electrical Engineering, Computer Engineering, Software Engineering or Computer Science or closely related field of study

Desired

Professional security training and certifications like Security+, CEH, Pentest+, CCIE, and CISSP

Eligibility Criteria

Must have assumed current Safaricom role for a minimum of 12 months period.
Employees are strongly advised to discuss their career aspirations with their line managers when they apply for vacant jobs.
Candidates are eligible to apply for roles at the same level ( possible lateral move to another function ) or one level higher (next higher immediate level)
Please be aware that promotions (band increments) may lead to changes in financial rewards. However, lateral moves only result in changes to job title and reporting lines.
For Regional roles, knowledge of the Region local language is essential