MTN Cameroun is looking for a Specialist - IT Security

MTN Cameroon


Website:

MTN Cameroun is looking for a Specialist - IT Security

 

Specialist - IT Security Risk Management and Controls Design Technology

At MTN Cameroon, we are a purpose- and value-led organisation.

At MTN Cameroon, we believe that understanding our people’s needs and aspirations is key to creating experiences that delight you at work, every day. We are committed to fostering an environment where every member of our Y’ello Family is heard, understood and empowered to live an inspired life. Our values keep us grounded and moving in the right direction. Most importantly, they keep us honest. It is not something we claim to be; it is in our DNA.

As an organisation, we consider it our mission to create an exciting and rewarding place to work, where our people can be themselves, thrive in positivity and ignite their full potential. We aim to build a workplace that boosts creativity and innovation, improves productivity and ultimately drives meaningful results — a workplace built on relationships and the pursuit of a purpose greater than ourselves.

Our commitments go beyond an organisational promise. It is part of our leadership and managerial ethos to meaningfully partner with our employees, customers and stakeholders, with a shared vision of achieving our common goals.

Our values, known as LIVE Y’ello, are the cornerstone of our culture:

  • Lead with Care

  • Can-do with Integrity

  • Collaborate with Agility

  • Serve with Respect

  • Act with Inclusion

Responsibilities

Operational delivery

  • Conduct periodic IT risk assessments across all IS units and maintain the IT risk register;

  • Design, document and test IT controls to mitigate identified risks and ensure audit readiness;

  • Support internal and external IT audits by preparing evidence, documentation and remediation plans;

  • Monitor the IT controls environment and report on the status of open risks and mitigations;

  • Collaborate with business and IT teams to embed risk-aware practices into project and operational workflows;

  • Maintain the IT governance framework documentation and support compliance monitoring.

Operational, tactical and strategic meetings

  • Provide input on all projects initiated within the unit and across the IS Division;

  • Review key risks, issues and dependencies, and define mitigation actions;

  • Participate in strategic meetings when required;

  • Contribute to risk mitigation and controls;

  • Provide input into proposals relating to change initiatives, policies and procedures.

Escalations

  • Manage and resolve escalations that affect the critical path of service delivery;

  • Escalate issues that could result in significant time, scope, employee, customer or cost impact if left unresolved;

  • Manage issues requiring formal resolution and provide appropriate solutions.

Tactical function

  • Contribute to all projects initiated;

  • Provide input into establishing objectives, targets and budgets for the function, where applicable;

  • Identify and document key risks, issues and dependencies, and set mitigation actions;

  • Prepare the documentation required for sign-off or decision-making on tactical changes.

Performance

  • Review performance against agreed KPIs and their compliance with SLAs and reverse SLAs;

  • Review and monitor the continuous improvement plan;

  • Ensure execution is aligned with the Division’s strategy;

  • Continuously monitor performance and adjust strategy and actions to deliver targets.

Reporting

  • Produce periodic reports on progress within the function, in line with the measurement metrics set by the organisation;

  • Provide ad hoc reports on specific projects, as required.

Budget

  • Manage the sub-division’s budget in line with business objectives;

  • Monitor expenditure and ensure cost optimisation.

Compliance

  • All employees are the first line of compliance defence and are expected to act as Compliance Champions in their respective roles;

  • Employees must fully comply with all applicable legislation, regulations, policies, standards and procedures in carrying out their day-to-day responsibilities;

  • Any act of negligence or non-compliance will be addressed in accordance with the MTN Cameroon Disciplinary Policy;

  • Employees are required to attend scheduled compliance training and to proactively report and escalate any compliance concerns, issues or failures;

  • With the support of Compliance Champions and the Risk & Compliance (R&C) team, employees are expected to review and update compliance obligations, compliance risks and control testing activities within their respective units.

Value creation

Financial — enterprise-wide business growth:

  • Enterprise financial health (revenue, EBITDA and other financial health ratios), translating revenue growth objectives into results;

  • New business growth to sustain and complement traditional revenues;

  • Business growth, value creation and cost-effectiveness achieved through process optimisation, new initiatives and improved ways of working.

Internal — value created through enterprise-wide operations:

  • Value created through stronger sales execution, solution quality, delivery reliability and customer lifecycle governance;

  • New business opportunities enabled by solution innovation, structural improvements, process reviews and disciplined tool adoption.

Customer — value created through customer engagement and ecosystem management:

  • Positive engagement outcomes through stronger onboarding, adoption, service reviews and value realisation;

  • Deliberate ecosystem management to achieve business objectives, brand value and corporate positioning;

  • Improved visibility, accountability and resolution of risks and escalations.

People — value created through a positive impact on people and culture:

  • Impact on satisfaction across culture, values and employee engagement;

  • Talent attraction and retention, efficient departmental structure, collaborative culture, coaching, mentoring and change management.

Qualifications

Education

  • Bachelor’s degree in IT, Information Security, Risk Management or a related field;

  • CRISC, CISA or ISO 31000 certification is preferred.

Experience

  • Minimum of 3 years in IT risk management, internal audit or IT governance.

Functional knowledge

  • IT risk frameworks (COBIT, ISO 27005);

  • Controls design and testing;

  • Audit management;

  • GDPR and local regulatory compliance;

  • IT governance standards.

Skills

  • Risk assessment and analysis;

  • Controls documentation;

  • Audit support;

  • Reporting;

  • Attention to detail.

Behavioural qualities

  • Analytical thinking and problem-solving;

  • Customer-centric mindset;

  • Collaboration and teamwork;

  • Attention to detail;

  • Initiative and self-motivation;

  • Adaptability in a fast-changing environment;

  • Ethical conduct and integrity.

How to apply

All applications must be submitted online at:
https://ehle.fa.em2.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_1/jobs

Application deadline: Apply before 11/06/2026, 11:55 PM.

Postuler