Senior – Cyber Security Architect (Internal /External)

About Us

At Safaricom Ethiopia, we are a purpose-led technology company dedicated to transforming lives through digital connectivity and inclusive financial services. In under four years, we have grown to serve over 10 million customers, with our network now reaching 55% of Ethiopia’s population - a testament to our bold vision and trusted partnerships.

Guided by core values such as customer obsession, innovation, integrity, and get it done together, we are building a workplace that is dynamic, inclusive, and empowering. We believe our greatest strength lies in our people. That’s why, for two consecutive years, we have proudly get earned the Top Employer Award - in recognition for our unwavering commitment to fostering a supportive, innovative, and inclusive environment to people.

Join Safaricom Ethiopia and be part of a team that is shaping the digital future of Ethiopia. Here, your work has meaning, your voice matters, and your growth is our priority. Together, we are transforming lives for a digital future

Key accountabilities and decision ownership:

• Planning, researching and designing robust security architecture for any IT Systems and Networks (mobile and fix) project

• Developing Technology Security controls and requirements for IT Systems and Networks (mobile and fixed networks)

• Evaluate and recommend emerging security technologies (e.g., AI-driven threat detection, quantum-safe encryption).

• Ensuring financial optimization of Technology Security Solutions

• Providing Technology Security consultancy for technology and business projects

• Provide expert guidance on secure DevSecOps practices for telecom software development.

• Developing and documenting Technology Security controls and requirements for IT Systems and Networks (mobile and fixed)

• Providing technical supervision and guidance to the Technology Security team

• Providing SME input to Technology Security Policy requirements and procedures

• Supporting Technology Security awareness programs and educational efforts

• Responding timeously to Technology Security-related incidents and providing a thorough post-event analysis

• Providing accurate and timely reporting of architectural solutions, risk findings and propose remediation and mitigation options

• Develop and implement comprehensive cybersecurity strategies to protect the organization’s digital assets.

• Lead and manage a team of cybersecurity professionals, ensuring they are well-trained and equipped to handle various security challenges.

• Create and enforce cybersecurity policies and procedures to ensure compliance with industry standards and regulations.

• Develop and implement endpoint security strategies: Collaborate with cross-functional teams to define and implement effective endpoint security strategies, including antivirus software, firewalls, intrusion detection systems, encryption, and other security measures.

• Collaborate with internal security experts, third-party sources, and suppliers to understand network and endpoint security requirements, controls, policies, and threats. Identify opportunities to eliminate risk, improve service capabilities, and reduce costs

• Develop and implement incident response plans and procedures to quickly and effectively respond to security incidents and breaches.

Core competencies, knowledge and experience:

Business Competencies:

• Minimum of 5+ years of relevant experience in information security/cybersecurity,with at least 3 years in a telecom environment.
• Knowledge of common information technology management / compliance frameworks such as ISO/IEC 27001, SOC 2, SOX, ITIL, COBIT, and NIST.
• Proven experience in IT Networks and/or Systems Administration.
• Proven experience in implementing and administering Cyber Security solutions.
• Working knowledge of databases, web, virtualization, microservices technologies will be an added advantage.

• Proven experience in projects management, leading or coordinating and managing stakeholders.

• A diverse security background with knowledge in several areas, including layered security architecture; internet protocols; firewalls; VPN technologies, IDS/IPS, network access control and network segmentation, anti-malware and spam technologies; risk and vulnerability assessments, and compliance.

• Security concepts related to DNS, routing, authentication, VPN, proxy services and DDOS mitigation technologies

• Strong organizational skills and an entrepreneurial drive with a history of recruiting and developing high-performing teams

• Ability to build and manage highly motivated and innovative technical team

• Experience in working across security technologies.
• In depth understanding of the role of Information Security in network and system security.
• Proven experience based on ability to design and develop security architectures for complex multi-component systems.
• Demonstrated experience in developing conceptual, logical and physical IT security architecture deliverables.

• Practices and methods of enterprise architecture and security architecture

• Network security, architecture development and definition

• Ability to work under time and resource pressure
• An ability and desire to communicate and work with a broad set of stakeholders
• A customer-focused, responsive, and transparent attitude
• Strong analytical and organizational skills.
• Experience with securing various environments preferred.
• Experience in working across security frameworks.

Must have technical / professional qualifications:

• Bachelor’s degree in electrical engineering/computer science/information technology or a related technical discipline, or the equivalent combination of education, technical certifications, post degree qualification
• One or more these industry Cybersecurity Certifications: CISM, Azure Security Engineer, Azure Solutions Architect Expert, CISA, CISSP-ISSEP, CISSP-ISSAP, CCNA, NSE-4, NSE-6
• Experience and proficiency with the following:
  • Network security
  • End point security
  • Cloud security and securing hybrid environments
• Experience with security frameworks such as ISO 27001, NIST, and COBIT.
• Knowledge of basic system administration and operating system hardening techniques

Desired

Relevant certifications (e.g., CISSP, Azure Solutions Architect Expert, CCNP-Security, CCIE security, NSE4, NSE6 preferred.

How to Apply

• If you feel that you are up to the challenge and possess the necessary qualification and experience, kindly proceed to create/ update your candidate profile on the recruitment portal and then Click on the apply button. Remember to attach your resume