Manager, Information Security

• At MTN RwandaCell, we are not just an organization; we are purpose-led and value-driven. Understanding our people’s needs and aspirations is the key to creating work experiences that delight you daily at work. Our commitment to fostering an environment where every member of our Y’ello Family is heard, understood and empowered to live an inspired life is what sets us apart.
• Our values keep us grounded and moving in the right direction. Most importantly, they keep us honest. It is not something we claim to be it is in our DNA.
• As an organization, we are on a mission to create an exciting and rewarding place to work. We want our people to be themselves, thrive in a positive environment, and ignite their full potential. We believe in building a workplace founded on relationships and achieving a purpose greater than our own. This is the experience we want you to have with us.
• Our commitments go beyond an organizational promise. Our leadership and managerial ethos involve meaningfully partnering with our employees, customers, and stakeholders with a vision to realize our shared goals.
• We are delighted you are considering us as your career partner to make a mark in the world. We look forward to your application. Therefore, we are hiring a highly skilled and self-motivated candidate for the IT department position below, both internally and externally.

Mission

• Lead the strategy, governance and day-to-day operations of information and network security across MTN Rwanda’s technology environment
• Protect the confidentiality, integrity and availability of customer data, network services and mobile financial services (MoMo)
• Set the organisation’s security posture through policy, architecture standards and secure-by-design engagement on every technology initiative
• Direct round-the-clock threat monitoring, incident response and investigations so that service disruption and business impact are kept to a minimum
• Select and assure the security solutions that protect network, IT and cloud functions
• Build a security-aware culture through an organisation-wide awareness and training programme
• Ensure compliance with Rwandan law, regulator requirements and MTN Group security standards

Key performance areas

• Strategy, Governance and Compliance
• Develop, own and execute the information security strategy and roadmap, aligned with MTN Rwanda’s business goals, risk appetite and regulatory obligations.
• Develop, review and enforce security policies, standards and procedures aligned with ISO/IEC 27001, NIST CSF, PCI DSS, GSMA security guidelines and the requirements of the Rwanda Utilities Regulatory Authority (RURA) and the National Cyber Security Authority (NCSA).
• Ensure compliance with Rwanda’s data protection and privacy law and cybercrime legislation, and with GDPR where applicable, working closely with the Data Privacy / Data Governance team.
• Maintain the information security risk register, conduct regular risk assessments across network, IT, cloud and MoMo platforms, and drive mitigation plans to closure.
• Report security posture, key risk indicators and incident trends to senior management, MTN Group and regulatory bodies.
• Support internal and external audits and certification assessments; track and close audit findings on time.
• Network and Telecom Security
• Oversee the security of the core, access, transport and IP networks across mobile (2G/3G/4G/5G) and fixed-line environments, including protection of signalling interfaces (SS7, Diameter, GTP).
• Manage network security controls such as firewalls, intrusion prevention systems (IPS), DDoS mitigation tools and secure gateways.
• Ensure secure baseline configuration and hardening of routers, switches and other network elements, in coordination with the Network Operations Center (NOC) and engineering teams, including control of vendor and privileged access.
• Embed security into new services and technologies (5G, IoT, edge computing, cloud, NFV/SDN and new MoMo products) through architecture reviews, threat modelling and security sign-off before go-live.
• Ensure that lawful interception, data retention and customer data protection controls operate effectively and in line with legal requirements.
• Security Operations and Incident Response
• Establish and run Security Operations Center (SOC) processes covering continuous monitoring, threat intelligence, detection, triage and response.
• Lead the coordination of incident response for network and IT security incidents with NOC, IT, Legal, Communications and, where required, regulators and law enforcement.
• Conduct root cause analyses and post-incident reviews and track corrective actions that strengthen preventive controls.
• Run the vulnerability management and penetration testing programme, ensuring remediation within agreed timelines.
• Test incident response and crisis playbooks through regular simulations and tabletop exercises.
• Technology, Vendors and Awareness
• Evaluate, select and deploy security technologies relevant to a telecom environment, such as SIEM, network analytics, threat intelligence and zero-trust architectures, and manage the security budget.
• Manage security vendor relationships and assess third-party security risk through due diligence, contract requirements and ongoing assurance.
• Promote security awareness across all business units, especially among engineers, field operations and customer-facing teams, through training, phishing simulations and a network of security champions.
• Qualifications:

Experience

• Minimum 7 years of experience in information or network security, including at least 4 years in a supervisory or managerial position within a telecommunications operator, IT security or IT security audit environment.
• Deep, hands-on experience in TCP/IP networking and network security architecture.
• Proven experience running security operations, incident response and vulnerability management.
• Experience with audits and compliance frameworks (ISO/IEC 27001, PCI DSS) and with regulator engagement. Mobile money / financial services security experience is an advantage.

Education

• Bachelor’s degree in information security, Computer Science, Telecommunications Engineering or a related field (master’s preferred).
• At least one recognized professional certification: CISSP, CISM, CISA, CCNP Security, CEH or equivalent (ISO/IEC 27001 Lead Implementer or Lead Auditor is an advantage).

How to apply

• All interested candidates are requested to apply through the MTN website and submit their updated curriculum vitae with copies of notified academic credentials no later than 16th Nov 2026. MTN Website portal: https://careers.mtn.co.rw/career
• We strongly encourage applications from women and/or individuals with disabilities.
• Note: Should you not hear from us within 14 (fourteen) days from the closing date of this advertisement, you may consider your application unsuccessful. If you encounter any issues when completing the application, reach out to [email protected] ([…])
• At MTN Rwandacell Plc, we are committed to safeguarding your data privacy. For more information, visit our website to read our job applicants privacy notice that explains how we collect, use, disclose, and protect your data at https://www.mtn.co.rw/privacy-notice-for-job-applicants/