Senior Manager - Cyber Crime Security Incidents and Data Analytics

The Senior Manager: Cyber Security Assurance & Offensive Security role will be accountable to achieve the following objectives: Cyber Security Assurance and Audit Leadership Lead the development and execution of risk-based cyber security audit plans across Group and OpCo environments to provide independent assurance over the adequacy and effectiveness of cyber security controls. Assess the design, implementation, and operating effectiveness of information security controls across identity and access management, network security, cloud security, application security, API security, and emerging technology environments. Evaluate the effectiveness of cyber security governance frameworks and challenge management on control weaknesses, risk exposures, and remediation plans. Integrate threat intelligence, emerging cyber risks, and industry trends into audit planning and execution to maintain a forward-looking assurance approach. Review security architecture principles and control environments to determine whether they adequately protect critical business assets and support MTN’s risk appetite. Deliver actionable and risk-based audit insights that enable management to strengthen cyber resilience across the organisation. Provide oversight of technology audit outcomes across OpCos and support the General Manager: Technology Audit in driving audit consistency, operational effectiveness, and reporting quality. Lead, coordinate, and where appropriate independently perform offensive security assessments, including red team exercises, adversary simulations, and penetration testing reviews. Evaluate the effectiveness of security controls by assessing the real-world exploitability of critical vulnerabilities and attack pathways. Review third-party penetration testing outcomes to validate testing quality, findings, and remediation effectiveness. Collaborate with cyber security and technology teams to assess defensive capabilities against realistic threat scenarios. Translate highly technical testing results into business-focused risk insights for Executive Management, Audit Committees, and governance stakeholders. Ensure offensive security activities contribute meaningfully to risk identification, control improvement, and organisational resilience. Incident Response, Cyber Resilience and Forensic Assurance Assess security, governance, ethical use, and operational risks associated with artificial intelligence solutions, intelligent automation platforms, digital agents, and emerging technologies. Evaluate risks relating to AI-generated content, model integrity, data leakage, algorithmic bias, and governance effectiveness. Provide assurance on Responsible AI frameworks, lifecycle governance controls, and compliance with applicable regulatory and ethical standards. Assess cyber security controls embedded within digital transformation programmes and emerging technology initiatives. Provide independent insights on technology innovation risks to support secure and responsible adoption across the Group. Platform Business Cyber Risk Oversight Provide specialist cyber assurance over critical connectivity infrastructure, digital platforms, fintech ecosystems, and customer-facing technology environments. Assess cyber risks associated with signalling networks, connectivity infrastructure, and technology platforms supporting MTN operations. Evaluate security controls within mobile money systems, financial technology ecosystems, and digital payment environments. Review third-party integrations, APIs, and partner connectivity arrangements to ensure appropriate cyber risk management practices are in place. Assess vulnerabilities that may impact operational continuity, customer trust, business performance, and regulatory compliance. Audit Execution and Quality Assurance Provide assurance to management regarding the effectiveness of internal controls over information security, technology operations, digital platforms, and physical technology assets. Review, guide, and oversee audit teams to ensure audit work is executed in accordance with approved methodology, professional standards, and quality requirements. Ensure audit observations, recommendations, and risk assessments are appropriately documented, evidenced, and communicated. Present audit outcomes, risks, and recommendations to the General Manager: Technology Audit, Group Executive: Internal Audit and Forensic Services, and other governance structures. Ensure all audit engagements are managed and recorded within the approved eGRC platform in accordance with Group Internal Audit methodologies. Monitor and track management action plans to ensure agreed audit recommendations are implemented within defined timelines. Maintain compliance with the International Standards for the Professional Practice of Internal Auditing and the IIA Code of Ethics. Prepare monthly, quarterly, and ad hoc reports that provide visibility of audit progress, risk themes, assurance outcomes, and governance matters. Advisory and Stakeholder Engagement Act as a trusted cyber risk and technology assurance advisor to OpCo leadership teams, Group Security, and technology stakeholders. Influence management decision-making by providing objective assurance and recommendations that strengthen cyber security maturity. Foster productive relationships with business leaders, technology teams, and governance stakeholders to promote effective risk management. Support organisational preparedness for evolving threats through proactive engagement and knowledge sharing. Drive continuous improvement and cost-effective operation of the Technology Audit function through efficiency, innovation, and effective resource utilisation. Support coordination activities with External Auditors and other assurance providers where required. Leadership Lead, coach, and develop a high-performing team by setting clear expectations, measurable KPIs, and continuous feedback to ensure delivery of strategic and operational objectives within working groups Promote an ‘MTN centric’ and ‘partnership approach’ to develop strong relationships with other working groups. Key Deliverables Cyber audit plan delivered with high-quality assurance outcomes Offensive security reviews and vulnerability assessments Technology audit governance and executive reporting Role Dependencies Active support from the General Manager and Executive Deep understanding of the MTN business strategy Understanding of the OpCo Cyber context Alignment of Group Technology and Information Security strategy Education: Minimum 4-year degree in Accounting/Finance/Business MBA and/or Master’s Degree/ Chartered Accountant/ MSc Cyber Security, CIA in related field (i.e. Audit) is advantageous CISA/ CISM/ CISSP would be advantageous Specialisation in Security and Cyber-crime domains Relevant certification / accreditation / membership with professional body as required for role, e.g. Cloud Security: Azure / AWS Security certifications, Offensive / Technical: OSCP / CEH / GPEN, Cyber & Governance: CISSP / CISM / CISA English and French (as an advantage) Experience: Minimum 7 - 10 years of experience in Auditing and Accounting preferably with Security and Cyber Crime experience in Telecommunication, Financial Services or Professional Services industries