Position Title: Sr. Cyber Security Architect
Employer: Safaricom Telecommunication Ethiopia
Employment: Full-Time | Permanent
Place of Work: Addis Ababa - Ethiopia
Posted date: 2 months ago
Deadline: Submission date is over
Responsibilities
Key accountabilities and decision ownership:
- Planning, researching and designing robust security architecture for any IT Systems and Networks (mobile and fix) project
- Developing Technology Security controls and requirements for IT Systems and Networks (mobile and fixed networks)
- Evaluate and recommend emerging security technologies (e.g., AI-driven threat detection, quantum-safe encryption).
- Ensuring financial optimization of Technology Security Solutions
- Providing Technology Security consultancy for technology and business projects
- Provide expert guidance on secure DevSecOps practices for telecom software development.
- Developing and documenting Technology Security controls and requirements for IT Systems and Networks (mobile and fixed)
- Providing technical supervision and guidance to the Technology Security team
- Providing SME input to Technology Security Policy requirements and procedures
- Supporting Technology Security awareness programs and educational efforts
- Responding timeously to Technology Security-related incidents and providing a thorough post-event analysis
- Providing accurate and timely reporting of architectural solutions, risk findings and propose remediation and mitigation options
- Develop and implement comprehensive cybersecurity strategies to protect the organization’s digital assets.
- Lead and manage a team of cybersecurity professionals, ensuring they are well-trained and equipped to handle various security challenges.
- Create and enforce cybersecurity policies and procedures to ensure compliance with industry standards and regulations.
- Develop and implement endpoint security strategies: Collaborate with cross-functional teams to define and implement effective endpoint security strategies, including antivirus software, firewalls, intrusion detection systems, encryption, and other security measures.
- Collaborate with internal security experts, third-party sources, and suppliers to understand network and endpoint security requirements, controls, policies, and threats. Identify opportunities to eliminate risk, improve service capabilities, and reduce costs
- Develop and implement incident response plans and procedures to quickly and effectively respond to security incidents and breaches.
Core competencies, knowledge and experience:
Business Competencies:
- Minimum of 5+ years of relevant experience in information security/cybersecurity, with at least 3 years in a telecom environment.
- Knowledge of common information technology management / compliance frameworks such as ISO/IEC 27001, SOC 2, SOX, ITIL, COBIT, and NIST.
- Proven experience in IT Networks and/or Systems Administration.
- Proven experience in implementing and administering Cyber Security solutions.
- Working knowledge of databases, web, virtualization, microservices technologies will be an added advantage.
- Proven experience in projects management, leading or coordinating and managing stakeholders.
- A diverse security background with knowledge in several areas, including layered security architecture; internet protocols; firewalls; VPN technologies, IDS/IPS, network access control and network segmentation, anti-malware and spam technologies; risk and vulnerability assessments, and compliance.
- Security concepts related to DNS, routing, authentication, VPN, proxy services and DDOS mitigation technologies
- Strong organizational skills and an entrepreneurial drive with a history of recruiting and developing high-performing teams
- Ability to build and manage highly motivated and innovative technical team
- Experience in working across security technologies.
- In depth understanding of the role of Information Security in network and system security.
- Proven experience based on ability to design and develop security architectures for complex multi-component systems.
- Demonstrated experience in developing conceptual, logical and physical IT security architecture deliverables.
- Practices and methods of enterprise architecture and security architecture
- Network security, architecture development and definition
- Ability to work under time and resource pressure
- An ability and desire to communicate and work with a broad set of stakeholders
- A customer-focused, responsive, and transparent attitude
- Strong analytical and organizational skills.
- Experience with securing various environments preferred.
- Experience in working across security frameworks.
Qualifications
Must have technical/professional qualifications:
- Bachelor’s degree in electrical engineering/computer science/information technology or a related technical discipline, or the equivalent combination of education, technical certifications, post post-degree qualification
- One or more these industry Cybersecurity Certifications: CISM, Azure Security Engineer, Azure Solutions Architect Expert, CISA, CISSP-ISSEP, CISSP-ISSAP, CCNA, NSE-4, NSE-6
- Experience and proficiency with the following:
- Network security
- End point security
- Cloud security and securing hybrid environments
- Experience with security frameworks such as ISO 27001, NIST, and COBIT.
- Knowledge of basic system administration and operating system hardening techniques
Desired
Relevant certifications (e.g., CISSP, Azure Solutions Architect Expert, CCNP-Security, CCIE security, NSE4, NSE6 preferred.
