Responsible for coordinating, advising and managing all operations related to M-Pesa risks, Audit & Reviews (Internal and External)
Execution of the company and Group strategy and deliverables, specifically related to Technology security, within M-Pesa systems
Overall compliance & governance management of the M-Pesa environment
To be the central point of contact for M-Pesa and related third-party systems security
Continuously monitor Mpesa and related third-party systems for security incidents that may happen and perform investigation
Monitor implementation of information security and related policies, to ensure compliance of the Mpesa and related third-party systems, with the security policies
Ensure proper implementation and change management process compliance for all planned and emergency changes in Mpesa and related third-party systems
Analyze the feasibility and applicability of new security controls that may need to be applied in the Mpesa and third-party systems, and advise Management on the effective way of implementation
Ensure all M-Pesa and third-party systems’ products, services and projects are compliant to the Vodacom minimum security requirements
Perform information security awareness and training to all users of the Mpesa and third-party systems, and monitor effectiveness of the awareness and trainings
Coordinate all internal and external audits around M-Pesa and third-party systems and processes, ensure Mpesa and third–party systems are free from known Technology audit findings and ensure all audit findings in M-Pesa and third-party systems are closed within agreed timelines
Perform and manage the vulnerability scanning and penetration tests and resolution of vulnerabilities in Mpesa and third-party systems, per the Vodacom Vulnerability management process
Ensure proper validation, timely completion and accuracy of audit checklists and user access rights review for M-Pesa and third-party systems
Perform any other task that may be assigned to him/her from Technology Security management
Bachelor of Science Degree in Telecommunications, Information technology or Computer Science
Security certifications (CISA, CISM, CGIA, CISSP or equivalent)
Minimum of three years’ experience in Technology Systems security, with at least two years’ experience obtained in financial systems security, privacy and compliance areas.
Advanced knowledge of mobile telecommunications network architectures, IT systems, networks and applications.