Senior Manager - Cyber Crime Security Incidents and Data Analytics.Group Internal Audit and Forensics

MTN operates within a complex, evolving ecosystem driven by its transformation from a telco to a technology-driven platform organisation, spanning:

• GSM / Telecom Infrastructure

• FinTech (Mobile Money and Digital Financial Services)

• Digital Infrastructure (Bayobab – fibre, wholesale, APIs and connectivity platforms)

   

This environment is characterised by:

• Increasingly sophisticated cyber threats targeting telecom and financial ecosystems

• Growth in API-based integrations and platform interdependencies

• Rise of AI-driven automation and associated security risks

• Heightened regulatory and reputational expectations

• The Internal Audit function must therefore provide forward-looking, threat-informed cyber assurance, ensuring resilience across all platforms while maintaining independence and objectivity. 

• Improving the internal control environment across the relevant markets. 

• Assisting the MTN Board and EXCO in protecting the assets, reputation and sustainability of the organisation for MTN to accomplish its objectives.

   

Organisational Mission: MTN’s vision is to lead digital transformation in Africa, ensuring widespread access to reliable, high-quality broadband services that drive social and economic development.

Organization Values: At MTN we believe that understanding our people’s needs and aspirations is key to creating experiences that delight you at work, every day. We are committed to fostering an environment where every member of our Y’ello Family is heard, understood, and empowered to live an inspired life. Our values keep us grounded and moving in the right direction. Most importantly, they keep us honest. It is not something we claim to be. It is in our DNA.

As an organisation, we consider it our mission to create an exciting and rewarding place to work, where our people can be themselves, thrive in positivity and ignite their full potential. A workplace that boosts creativity and innovation, improves productivity, and ultimately drives meaningful results. A workplace that is built on relationships and achieving a purpose that is bigger than us. This is what we want you to experience with us!

Our commitments go beyond an organisational promise. It is in our leadership and managerial ethos to meaningfully partner with our employees, customers, and stakeholders with a vision to realise our shared goals.

Our values dubbed, LIVE Y’ello, are the cornerstone of our culture.

Lead with Care

Can-do with Integrity

Collaborate with Agility

Serve with Respect

Act with Inclusion

The Senior Manager: Cyber Security Assurance & Offensive Security role will be accountable to achieve the following objectives:

Cyber Security Assurance and Audit Leadership

• Lead the development and execution of risk-based cyber security audit plans across Group and OpCo environments to provide independent assurance over the adequacy and effectiveness of cyber security controls.

• Assess the design, implementation, and operating effectiveness of information security controls across identity and access management, network security, cloud security, application security, API security, and emerging technology environments.

• Evaluate the effectiveness of cyber security governance frameworks and challenge management on control weaknesses, risk exposures, and remediation plans.

• Integrate threat intelligence, emerging cyber risks, and industry trends into audit planning and execution to maintain a forward-looking assurance approach.

• Review security architecture principles and control environments to determine whether they adequately protect critical business assets and support MTN’s risk appetite.

• Deliver actionable and risk-based audit insights that enable management to strengthen cyber resilience across the organisation.

• Provide oversight of technology audit outcomes across OpCos and support the General Manager: Technology Audit in driving audit consistency, operational effectiveness, and reporting quality.

• Lead, coordinate, and where appropriate independently perform offensive security assessments, including red team exercises, adversary simulations, and penetration testing reviews.

• Evaluate the effectiveness of security controls by assessing the real-world exploitability of critical vulnerabilities and attack pathways.

• Review third-party penetration testing outcomes to validate testing quality, findings, and remediation effectiveness.

• Collaborate with cyber security and technology teams to assess defensive capabilities against realistic threat scenarios.

• Translate highly technical testing results into business-focused risk insights for Executive Management, Audit Committees, and governance stakeholders.

• Ensure offensive security activities contribute meaningfully to risk identification, control improvement, and organisational resilience.

Incident Response, Cyber Resilience and Forensic Assurance

• Assess security, governance, ethical use, and operational risks associated with artificial intelligence solutions, intelligent automation platforms, digital agents, and emerging technologies.

• Evaluate risks relating to AI-generated content, model integrity, data leakage, algorithmic bias, and governance effectiveness.

• Provide assurance on Responsible AI frameworks, lifecycle governance controls, and compliance with applicable regulatory and ethical standards.

• Assess cyber security controls embedded within digital transformation programmes and emerging technology initiatives.

• Provide independent insights on technology innovation risks to support secure and responsible adoption across the Group.

Platform Business Cyber Risk Oversight

• Provide specialist cyber assurance over critical connectivity infrastructure, digital platforms, fintech ecosystems, and customer-facing technology environments.

• Assess cyber risks associated with signalling networks, connectivity infrastructure, and technology platforms supporting MTN operations.

• Evaluate security controls within mobile money systems, financial technology ecosystems, and digital payment environments.

• Review third-party integrations, APIs, and partner connectivity arrangements to ensure appropriate cyber risk management practices are in place.

• Assess vulnerabilities that may impact operational continuity, customer trust, business performance, and regulatory compliance.

   

Audit Execution and Quality Assurance

• Provide assurance to management regarding the effectiveness of internal controls over information security, technology operations, digital platforms, and physical technology assets.

• Review, guide, and oversee audit teams to ensure audit work is executed in accordance with approved methodology, professional standards, and quality requirements.

• Ensure audit observations, recommendations, and risk assessments are appropriately documented, evidenced, and communicated.

• Present audit outcomes, risks, and recommendations to the General Manager: Technology Audit, Group Executive: Internal Audit and Forensic Services, and other governance structures.

• Ensure all audit engagements are managed and recorded within the approved eGRC platform in accordance with Group Internal Audit methodologies.

• Monitor and track management action plans to ensure agreed audit recommendations are implemented within defined timelines.

• Maintain compliance with the International Standards for the Professional Practice of Internal Auditing and the IIA Code of Ethics.

• Prepare monthly, quarterly, and ad hoc reports that provide visibility of audit progress, risk themes, assurance outcomes, and governance matters.

Advisory and Stakeholder Engagement

• Act as a trusted cyber risk and technology assurance advisor to OpCo leadership teams, Group Security, and technology stakeholders.

• Influence management decision-making by providing objective assurance and recommendations that strengthen cyber security maturity.

• Foster productive relationships with business leaders, technology teams, and governance stakeholders to promote effective risk management.

• Support organisational preparedness for evolving threats through proactive engagement and knowledge sharing.

• Drive continuous improvement and cost-effective operation of the Technology Audit function through efficiency, innovation, and effective resource utilisation.

• Support coordination activities with External Auditors and other assurance providers where required.

Leadership

• Lead, coach, and develop a high-performing team by setting clear expectations, measurable KPIs, and continuous feedback to ensure delivery of strategic and operational objectives within working groups

• Promote an ‘MTN centric’ and ‘partnership approach’ to develop strong relationships with other working groups.

Key Deliverables

• Cyber audit plan delivered with high-quality assurance outcomes 

• Offensive security reviews and vulnerability assessments

• Technology audit governance and executive reporting

Role Dependencies

• Active support from the General Manager and Executive

• Deep understanding of the MTN business strategy 

• Understanding of the OpCo Cyber context

• Alignment of Group Technology and Information Security strategy

Education:

• Minimum 4-year degree in Accounting/Finance/Business

• MBA and/or Master’s Degree/ Chartered Accountant/ MSc Cyber Security, CIA in related field (i.e. Audit) is advantageous 

• CISA/ CISM/ CISSP would be advantageous

• Specialisation in Security and Cyber-crime domains

• Relevant certification / accreditation / membership with professional body as required for role, e.g. Cloud Security: Azure / AWS Security certifications, Offensive / Technical: OSCP / CEH / GPEN, Cyber & Governance: CISSP / CISM / CISA

• English and French (as an advantage)

Experience:

• Minimum 7 – 10 years of experience in Auditing and Accounting preferably with Security and Cyber Crime experience in Telecommunication, Financial Services or Professional Services industries

• 5 years management experience or more with at least 3 years in relevant sector / industry /area of specialisation (understanding emerging markets advantageous)

• Experience in Audit, Consulting, Advisory or related client service is essential

• Worked across diverse cultures and geographies advantageous

• Experience working in a medium to large organisation 

• Experience working in cross-functional, matrixed environments, influencing senior stakeholders, and mobilizing execution across diverse teams

• Experience in continuous improvement through the implementation of best practice

• Ability to effectively manage multiple priority projects and initiatives

Capabilities:

• Strategy Implementer, Decisive Problem Solver, Best Practice Value Creator

• Culture and Change Champion, Guiding People Leader, Relationship Builder

Functional Competencies:

• Strong information and cyber security and understanding 

• Knowledge of network, cloud, and application security and threat intelligence frameworks

• Proven success in delivery of high-quality analytics

• Demonstrated ability to drive issues and tasks through to completion

• Results orientated – ability to motivate, manage and drive consensus across diverse teams

• Project Management

• Customer Focused

   

  Competencies:

• Execution discipline: Operates with high personal accountability, driving projects through to closure

• Problem solving and prioritisation: Navigates ambiguity and prioritises competing transformation demands with clarity and focus

• Structured Communication: Communicates progress, risks, and decisions clearly through dashboards, reports, and oral briefings to senior stakeholders

• Judgement and decision-making