Job Description

We at MTN Cameroon are a purpose and value-led organization.

At MTN Cameroon we believe that understanding our people’s needs and aspirations is key to creating experiences that delight you at work, every day. We are committed to fostering an environment where every member of our Y’ello Family is heard, understood, and empowered to live an inspired life. Our values keep us grounded and moving in the right direction. Most importantly, they keep us honest. It is not something we claim to be. It is in our DNA.

As an organisation, we consider it our mission to create an exciting and rewarding place to work, where our people can be themselves, thrive in positivity and ignite their full potential. A workplace that boosts creativity and innovation, improves productivity, and ultimately drives meaningful results. A workplace that is built on relationships and achieving a purpose that is bigger than us. This is what we want you to experience with us!

Our commitments go beyond an organisational promise. It is in our leadership and managerial ethos to meaningfully partner with our employees, customers, and stakeholders with a vision to realise our shared goals.

Our values dubbed, LIVE Y’ello, are the cornerstone of our culture.

Lead with Care

Can-do with Integrity

Collaborate with Agility

Serve with Respect

Act with Inclusion

Strategy Development and Implementation

• Develop and maintain MTN Cameroon’s Security Architecture Blueprint in alignment with Group Information Security framework and Enterprise Architecture frameworks.

• Lead security-by-design integration across new technologies (Cloud, AI, APIs, 5G, Big Data), ensuring that emerging digital platforms are built securely from inception.

• Translate cybersecurity requirements and risk appetite into actionable architecture patterns, reference models, and implementation guides.

• Champion modernization initiatives to replace or harden obsolete systems (vulnerability remediation).

• Champion vulnerability remediation through innovative manners (compensative controls, etc.)

• Develop and continuously update Information Security Plans continuously to support Yearly Business Plans

• Engage with Procurement for security suppliers onboarding

• Support strategic decision-making by providing clear visibility of architectural risks, technical debt, and remediation plans.

Operational Delivery

• Security and Privacy by Design: Work with Enterprise architects and the IT Risk Management and Control Design role to ensure security is considered upfront in projects management.

• Design and validate secure configurations for critical Linux, Unix, and Windows systems; automate their deployment and hardening where possible.

• Maintain the MTN Cameroon Security Architecture Blueprint

• Drive the vulnerability management lifecycle: from root cause identification to remediation support, prioritization, and sustainable closure within timelines.

• Conduct Proofs of Concept (PoCs) for security tools, configurations, or architectures, demonstrating feasibility and efficiency before large-scale rollout.

• Work hands-on with IT Operations and Network Operations teams to troubleshoot complex issues and ensure that vulnerability remediations are technically sound and operationally feasible.

• Build playbooks and guidelines to empower operational teams, scaling their ability to patch, configure, and secure systems efficiently.

• Support incident response activities by providing architectural insights and containment strategies.

• Information Security Business Plans

• Projects follow-up

• Information Security advisor for projects

• Data Protection: Maintain the data inventory and make sure appropriate measure are taken for each type of data

Governance

• Ensure architectural compliance with ISO 27001, NIST CSF, CIS Controls, Group Tech Security Standards (TSS) and with laws and regulations.

• Participate in architecture review boards and change advisory boards to assess security impact of changes and projects.

• Maintain architecture documentation, threat models, and system security baselines for audit and continuous improvement.

• Liaise with the internal and external auditors, and with ANTIC, providing evidence of secure architecture and remediation progress.

• Define and track key architecture metrics (e.g. patch coverage, architectural risk index).

• Monitor the vulnerabilities metrics and take decisive actions to improve the trend.

Staff Leadership and Management

• Source, induct, and manage talent in accordance with legislative guidelines

• Ensure open communication channels with staff and implement change management interventions where necessary

• Provide definition of roles, responsibilities, individual goals, and performance objectives for the team

• Set KPIs and provide regular performance feedback through a well-defined and implemented performance review program

• Develop and implement a training plan to build and develop skills within the team

• Actively participate in leadership team

• Support team capability development through the creation of opportunities for realizing full potential

• Promote a ‘MTN centric’ and ‘partnership approach’ to develop strong relationships with other working groups and ensure adherence to Group governance

• Work in a team and drive own and cross functional team working across various divisions

• Accountable for meeting and prioritising project team targets / deadlines

• Lead cross functional and own team meetings and contribute on specialist / technical areas when required

• Review performance metric dashboards prepared on various performance metrics

Compliance

1. All employees are the first line of compliance defense and are expected to act as Compliance Champions in their respective roles.
2. Employees must comply fully with all applicable legislation, regulations, policies, standards, and procedures in the execution of their day‑to‑day responsibilities.
3. Any act of negligence or non‑compliance by an employee will be addressed in accordance with the MTN Cameroon Disciplinary Policy.
4. Employees are required to attend scheduled compliance training, proactively report, and escalate any compliance concerns, issues, or failures.
5. With the support of the Compliance Champions and the Risk & Compliance (R&C) team, employees are expected to review and update compliance obligations, compliance risks, and control testing activities within their respective units.

Governance

Operational, Tactical and Strategic Meetings

• Provide input on all projects initiated

• Review key risks, issues and dependencies and set mitigation actions

• Provide input in strategic meetings when required

• Provide inputs into the risk mitigation and controls

• Provide input into the preparation of proposal on change initiatives, policies, and procedures

Escalations

• Manage and resolve escalations that have impact on critical path of service delivery

• Escalate issues that will result in significant time, scope, employee/customer or cost impact if not resolved

• Manage and provide solutions to issues that require formal resolution

Function Tactical

• Provide input into all projects initiated

• Provide input into establishing objectives, targets, and budgets for the function as applicable

• Identify and document key risks, issues and dependencies and set mitigation actions

• Prepare documentation required for sign-off / making decisions regarding tactical changes

Performance

• Review performance against agreed KPIs and their compliance to SLAs and reverse SLAs

• Review and monitor plan for continuous improvement

• Ensure execution in alignment with divisional strategy

• Continuous performance monitoring and adjust strategy and actions to deliver targets

Reporting

• Report on a periodic basis relating to progress made within the function and in accordance with the measurement metrics set by the organization

• Report on an ad hoc basis on specific projects, as required

Budget

• Manage sub-divisional budget in line with business objectives

• Manage project or initiative budget in line with business objectives

Education:

• Minimum 3-year degree in Computer Science, Information Security or Computer Networks
• Masters are advantageous

• Fluent in English and French language

Experience:

• 5 to 8 years of experience as a system/network administrators with security responsibilities or as an Enterprise Security Architect
• Demonstrate interest and passion in cybersecurity, scripting, automation, experimentation of new tools
• Ability to speak the language of different stakeholders (Business, Architects, Sysadmins, Managers, etc.)

Functional Knowledge

• Deep understanding of operating systems (Linux/Unix, Windows Server/Client), configuration management, and automation tools (e.g., Ansible, Puppet, PowerShell).

• Strong knowledge of network security, identity and access management, cloud security, and data protection mechanisms.

• Experience in vulnerability management tools (Qualys, Tenable, Rapid7, etc.) and patch orchestration.

• Solid grasp of architecture frameworks (TOGAF, SABSA) and security standards (ISO 27001, NIST CSF, CIS Controls).

• Capability to perform threat modeling, security design reviews, and PoCs for new technologies.

Skills

• Manage self and team performance, conflict Management, Takes and manages accountability

• Energy & Drive – Innovative, takes initiatives, result oriented and develops self consistently

• Interpersonal skills – Leadership, Customer centricity, collaborative and coaches, develops direct reports, Problem solving, vendor & stakeholder management

• Personal skills - Trustworthy, integrity and ethical in dealings, analytical mind, Oral & Written presentation

• Operating skills – Ability to focus on priorities and plans, manage and monitors work efficiently, work and remain calm under pressure, multi-tasking

• Organizational Positioning skills – Good written and verbal communication, Presentation skills & technical reporting, commitment to the organization

• Global thinker, Analytical thinking

Behavioural Competencies

• Strategic and analytical thinker with the ability to link technical risks to business impact.

• Excellent communicator who can engage both technical and non-technical audiences.

• Mentorship mindset, capable of training and empowering operational teams.

• Strong problem-solving ability and resilience when dealing with complex legacy systems or vendor dependencies.