Senior Specialist – ERM Technology and IT Jobs – MTN Uganda Limited

Job Title:   Senior Specialist – ERM Technology and IT

Organisation: MTN Uganda Limited

Duty Station: Kampala, Uganda

Reports to: Senior Manager – Enterprise Risk Manager

 

About US:

MTN-Uganda is the leading telecommunications Company in Uganda, providing payphone, fixed lines, fax/data, internet and mobile services.

 

Key Duties and Responsibilities:

ERM – technology/information security

  • Supporting the implementation of the MTN group risk management strategy and framework as it relates to technology/information risk
  • Develop, manage and implement the information security risk assurance plans
  • Manage and conduct formal information security risk analyses, reviews, tests, audits and/or self-assessments;
  • Design appropriate remedial actions for identified risks, drive remediation of findings and management of risks and exemptions;
  • Provide technical advice on products and information security controls;
  • Ensure that risks envisaged in planned new systems, products & services, projects and, data migrations are flagged early, escalated as appropriate and resolved quickly.
  • Evaluate and/or test solutions/systems and ensure appropriate information security and data privacy requirements and controls have been considered and incorporated into these, where necessary support the remediation of findings;
  • Report information security risks in an appropriate way for different audiences;
  • Manage information security investigations and incident management;
  • Support for digital forensics

Data protection Officer for MTN Uganda

  • Supporting the implementation of the MTN group data privacy Programme
  • Develop, manage and implement the data privacy monitoring plan including regular assessments to ensure compliance to with the Uganda Data Protection & Privacy Act
  • Maintain records of all data processing activities conducted by MTN Uganda
  • Conduct staff training and awareness sessions in data protection and privacy
  • Ensure that data subjects’ requests with respect to personal data (collected & processed by MTN Uganda) are fulfilled including informing data subjects about how their personal data is being used, what measures MTN Uganda has put in place to protect the data
  • Serve as the point of contact between the person, institution or public body, and the Personal Data Protection Office.




Qualifications, Skills and Experience:

  • The applicant must hold a Bachelor’s degree in information technology/ systems, computer science, computer or related field with at least five years of information technology experience, with at least two years in information security governance, risk and compliance.
  • Professional risk qualification with preferably two years post-qualification experience in a complex technology and/or financial services organization e.g. CISM, CISA, CISSP
  • Membership/Affiliation with Risk Management bodies e.g. ISACA is desired.
  • Prior exposure and experience in implementation of Enterprise Risk Management frameworks with bias in technology and information risk in line with an organization’s technical and business environment.
  • Experience in developing the appropriate information security governance and compliance measures.
  • Experience in information security risk and incident management, business continuity, disaster recovery, information security incident management, auditing and conducting assessments.
  • Experience in assessments against international information security standards and/or best practice such as the ISO 27000 series, NIST 800 series, COBIT;
  • Able to analyze large volumes of data using data analytical tools e.g. ACL or SQL
  • Strong written and verbal communication skills including management reporting at both middle and top management levels.
  • Good Interpersonal skills
  • Able to present and report on complex information in an innovative and informative way.
  • Working under pressure to meet reporting deadlines
  • Consistent demonstration of excellent written and verbal communication
  • Independent attitude and team spirit.
  • Collaborative
  • Conflict handling & Resolution
  • Inquisitive skewed to research
  • Integrity
  • Persuasiveness

 

Knowledge and Trainings:

  • Corporate Governance frameworks e.g. ISO 27001, NIST, COBIT, Sarbanes Oxley, King IV, etc.
  • Data Governance
  • Information technology & security Risk;
  • Ability to gauge and manage risk.
  • Project Management abilities, including escalation of issues, analytical thinking and lateral creativity

 

MTN Uganda Limited has the obligation to safeguard its employees through providing a working environment that is safe and without risk to the health of its employees. MTN has a Vaccination policy for all its employees to be fully vaccinated against Covid-19 in order to work from its offices and premises. Female applicants are strongly encouraged to apply.

 

How to Apply:

All candidates who wish to join MTN Uganda Limited in this capacity should apply online

 

Click Here

 

Deadline: 16th August 2022

 

For more of the latest jobs, please visit https://www.theugandanjobline.com or find us on our facebook page https://www.facebook.com/UgandanJobline

Related Jobs