Specialist - IT Security Risk Management and Controls Design.Technology

We at MTN Cameroon are a purpose and value-led organization.

At MTN Cameroon we believe that understanding our people’s needs and aspirations is key to creating experiences that delight you at work, every day. We are committed to fostering an environment where every member of our Y’ello Family is heard, understood, and empowered to live an inspired life. Our values keep us grounded and moving in the right direction. Most importantly, they keep us honest. It is not something we claim to be. It is in our DNA.

As an organisation, we consider it our mission to create an exciting and rewarding place to work, where our people can be themselves, thrive in positivity and ignite their full potential. A workplace that boosts creativity and innovation, improves productivity, and ultimately drives meaningful results. A workplace that is built on relationships and achieving a purpose that is bigger than us. This is what we want you to experience with us!

Our commitments go beyond an organisational promise. It is in our leadership and managerial ethos to meaningfully partner with our employees, customers, and stakeholders with a vision to realise our shared goals.

Our values dubbed, LIVE Y’ello, are the cornerstone of our culture.

Lead with CareCan-do with IntegrityCollaborate with AgilityServe with RespectAct with InclusionOperational Delivery:

• Conduct periodic IT risk assessments across all IS units and maintain the IT risk register

• Design, document and test IT controls to mitigate identified risks and ensure audit readiness

• Support internal and external IT audits by preparing evidence, documentation and remediation plans

• Monitor the IT controls environment and report on the status of open risks and mitigations

• Collaborate with business and IT teams to embed risk-aware practices into project and operational workflows

• Maintain the IT governance framework documentation and support compliance monitoring

Operational, Tactical and Strategic Meetings

• Provide input on all projects initiated within the unit and across the IS Division

• Review key risks, issues and dependencies and set mitigation actions

• Provide input in strategic meetings when required

• Provide inputs into risk mitigation and controls

• Provide input into the preparation of proposals on change initiatives, policies, and procedures

Escalations

• Manage and resolve escalations that have impact on critical path of service delivery

• Escalate issues that will result in significant time, scope, employee/customer or cost impact if not resolved

• Manage and provide solutions to issues that require formal resolution

Function Tactical

• Provide input into all projects initiated

• Provide input into establishing objectives, targets, and budgets for the function as applicable

• Identify and document key risks, issues and dependencies and set mitigation actions

• Prepare documentation required for sign-off / making decisions regarding tactical changes

Performance

• Review performance against agreed KPIs and their compliance to SLAs and reverse SLAs

• Review and monitor plan for continuous improvement

• Ensure execution in alignment with divisional strategy

• Continuous performance monitoring and adjust strategy and actions to deliver targets

Reporting

• Report on a periodic basis relating to progress made within the function and in accordance with the measurement metrics set by the organisation

• Report on an ad hoc basis on specific projects, as required

Budget

• Manage budget for the sub-division in line with business objectives

• Monitor expenditure and ensure cost optimization

Compliance

• All employees are the first line of compliance defense and are expected to act as Compliance Champions in their respective roles.

• Employees must comply fully with all applicable legislation, regulations, policies, standards, and procedures in the execution of their day‑to‑day responsibilities.

• Any act of negligence or non‑compliance by an employee will be addressed in accordance with the MTN Cameroon Disciplinary Policy.

• Employees are required to attend scheduled compliance training, proactively report, and escalate any compliance concerns, issues, or failures.

• With the support of the Compliance Champions and the Risk & Compliance (R&C) team, employees are expected to review and update compliance obligations, compliance risks, and control testing activities within their respective units.

Financial - Value created through enterprise-wide business growth:

• Enterprise Financial Health (Revenues, EBITDA & other financial health ratios), translating revenue growth formula & objectives into results.

• New business growth to sustain and complement traditional revenues.

• Business growth, value created & cost-effectiveness achieved by process optimization, new initiatives and improved operations/ways of work.

Internal - Value created from executing enterprise-wide operations:

• Value created through stronger sales execution, solution quality, delivery reliability and customer lifecycle governance.

• New business opportunities enabled by solution innovation, structural improvements, process reviews and disciplined tool adoption.

Customer - Value created from Customer Engagement & Ecosystem Management:

• Positive engagement outcomes through stronger onboarding, adoption, service review and value realization.

• Deliberate ecosystem management to achieve business objectives, brand value and corporate positioning.

• Improved visibility, accountability and resolution of risks and escalations.

People - Value created through positive impact on People & Culture:

• Impact includes satisfaction on Culture and Values and employee engagement dimensions.

• Attraction and retention of talent, efficient departmental structure, collaborative culture, coaching, mentoring and change management.

Education:

• Bachelor's degree in IT, Information Security, Risk Management or related field

• CRISC, CISA or ISO 31000 certification preferred

Experience:

• Minimum 3 years in IT risk management, internal audit or IT governance

Functional Knowledge:

• IT risk frameworks (COBIT, ISO 27005)

• Controls design and testing

• Audit management

• GDPR and local regulatory compliance

• IT governance standards

Skills:

• Risk assessment and analysis

• Controls documentation

• Audit support

• Reporting

• Attention to detail

Behavioural Qualities:

• Analytical thinking and problem-solving

• Customer-centric mindset

• Collaboration and teamwork

• Attention to detail

• Initiative and self-motivation

• Adaptability in a fast-changing environment

• Ethical conduct and integrity