GRC Specialist ( Internal/External)

About Us

At Safaricom Ethiopia, we are a purpose-led technology company dedicated to transforming lives through digital connectivity and inclusive financial services. In under four years, we have grown to serve over 10 million customers, with our network now reaching 55% of Ethiopia’s population - a testament to our bold vision and trusted partnerships.

Guided by core values such as customer obsession, innovation, integrity, and get it done together, we are building a workplace that is dynamic, inclusive, and empowering. We believe our greatest strength lies in our people. That’s why, for two consecutive years, we have proudly get earned the Top Employer Award - in recognition for our unwavering commitment to fostering a supportive, innovative, and inclusive environment to people.

Join Safaricom Ethiopia and be part of a team that is shaping the digital future of Ethiopia. Here, your work has meaning, your voice matters, and your growth is our priority. Together, we are transforming lives for a digital future

Key accountabilities and decision ownership:

• Develop and maintain a comprehensive data protection strategy in alignment with regulatory requirements and organizational goals.

• Develop and implement cyber security policies, standards, and procedures based on industry best practices and regulatory requirements.

• Ensure the organization complies with relevant data protection laws and standards, such as GDPR, CCPA, etc.

• Lead the implementation and maintenance of data protection policies and procedures.

• Conduct risk assessments and audits to identify and mitigate data protection risks.

• Monitor data processing activities and ensure data protection impact assessments are conducted where necessary.

• Develop and deliver training programs to ensure staff awareness and compliance with data protection regulations.

• Provide expert advice on data protection matters to stakeholders across the organization.

• Conduct risk assessments and gap analysis to identify security Gap and develop mitigation strategies.

• Collaborate with internal stakeholders to ensure alignment of security controls with business objectives and regulatory compliance.

• Monitor compliance with cyber security policies and standards through regular audits and assessments.

• Provide guidance and recommendations on security controls, technologies, and best practices to mitigate risks.

• Act as a subject matter expert on cyber security Data Protection matters, providing guidance and support to stakeholders across the organization.

• Stay updated on emerging threats, vulnerabilities, and regulatory changes to proactively address security risks.

Must have technical / professional qualifications:

• Degree in Information Technology or Computer Science or a related field.

• Deep knowledge of cybersecurity with at least 5 years of experience, including 3 years focused on GRC.

• In-depth knowledge of General Data Protection Regulation (GDPR)

• In-depth knowledge of cyber security principles, standards, and best practices, including NIST Cybersecurity Framework, ISO 27001, etc.

• Experience with Data Protection Technologies

• Ability to conduct risk assessments related to data protection and Cyber security.

• Relevant certifications (e.g., CIPP, CIPM, CIPT) preferred

How to Apply

• If you feel that you are up to the challenge and possess the necessary qualification and experience, kindly proceed to create/ update your candidate profile on the recruitment portal and then Click on the apply button. Remember to attach your resume