Specialist – Cyber security Architect (Internal/External)

At Safaricom Ethiopia, we are a purpose-led technology company dedicated to transforming lives through digital connectivity and inclusive financial services. In under four years, we have grown to serve over 10 million customers, with our network now reaching 55% of Ethiopia’s population - a testament to our bold vision and trusted partnerships.

Guided by core values such as customer obsession, innovation, integrity, and get it done together, we are building a workplace that is dynamic, inclusive, and empowering. We believe our greatest strength lies in our people. That’s why, for two consecutive years, we have proudly get earned the Top Employer Award - in recognition for our unwavering commitment to fostering a supportive, innovative, and inclusive environment to people have proudly get earned the Top Employer Award - in recognition for our unwavering commitment to fostering a supportive, innovative, and inclusive environment to people. Join Safaricom Ethiopia and be part of a team that is shaping the digital future of Ethiopia. Here, your work has meaning, your voice matters, and your growth is our priority. Together, we are transforming lives for a digital future

Key accountabilities and decision ownership:

• Planning, researching and designing robust security architecture for any IT Systems and Networks (mobile and fix) project

• Develop and maintain enterprise security architecture frameworks, reference models, and standards.

• Developing Technology Security controls and requirements for IT Systems and Networks (mobile and fixed networks)

• Providing Technology Security consultancy for technology and business projects

• Developing and documenting Technology Security controls and requirements for IT Systems and Networks (mobile and fixed)

• Providing technical supervision and guidance to the Technology Security team

• Ensure secure design of telecom-specific technologies including 4G/5G, SDN/NFV, IMS, and IoT platforms.

• Architect secure cloud - native environments and virtualize network functions (VNFs)

• Supporting Technology Security awareness programs and educational efforts

• Responding timeously to Technology Security-related incidents and providing a thorough post-event analysis

• Ensure architecture aligns with regulatory requirements (e.g., GDPR, ISO 27001, NIST, GSMA, ITU and Local Regulatory Bodies guidelines) and Internal Policies

• Develop and maintain enterprise security architecture frameworks, reference models, and standards.

• Providing accurate and timely reporting of architectural solutions, risk findings and propose remediation and mitigation options

• Develop and implement comprehensive cybersecurity strategies to protect the organization’s digital assets.

• Assist in creating and enforcing cybersecurity policies and procedures to ensure compliance with industry standards and regulations.

• Develop and implement endpoint security strategies: Collaborate with cross-functional teams to define and implement effective endpoint security strategies, including antivirus software, firewalls, intrusion detection systems, encryption, and other security measures.

• Collaborate with internal security experts, third-party sources, and suppliers to understand network and endpoint security requirements, controls, policies, and threats. Identify opportunities to eliminate risk, improve service capabilities, and reduce costs

• Conduct security architectural reviews of Safaricom’s systems/infrastructure.

• Work with engineering, network operations, and IT teams to embed security into solution designs and deployments

• Provide Architectural insights during security incidents and contribute to post- incident reviews

Core competencies, knowledge and experience:

Business Competencies:

• Minimum of 3 years of work experience and 2 years of relevant experience in information security/cybersecurity

• Knowledge of common information technology management / compliance frameworks such as ISO/IEC 27001, SOC 2, SOX, ITIL, COBIT, and NIST.

• Proven experience in IT Networks and/or Systems Administration.

• Proven experience in implementing and administering Cyber Security solutions.

• Experience in working across security technologies.

• In depth understanding of the role of Information Security in network and system security.

• Proven experience based on ability to design and develop security architectures for complex multi-component systems.

• Demonstrated experience in developing conceptual, logical and physical IT security architecture deliverables.

• Practices and methods of enterprise architecture and security architecture

• Network security, architecture development and definition

• Ability to work under time and resource pressure

• An ability and desire to communicate and work with a broad set of stakeholders

• A customer-focused, responsive, and transparent attitude

• Strong analytical and organizational skills.

• Experience with securing various environments is preferred.

• Experience in working across security frameworks.

Must have technical / professional qualifications:

• Bachelor’s degree in electrical engineering/computer science/information technology or a related technical discipline, or the equivalent combination of education, technical certifications

• proficiency with the following:

Network security

End point security

cloud security and securing hybrid environments

Experience with security frameworks such as ISO 27001, NIST, and COBIT.

• Desired

Relevant certifications (e.g., CISSP, Azure Solutions Architect Expert, CCNP-Security, CCIE security, NSE4, NSE6 preferred.

Eligibility Criteria:

• Must have assumed current Safaricom role for a minimum of 12 months period.
• Employees are strongly advised to discuss their career aspirations with their line managers when they apply for vacant jobs.
• Candidates are eligible to apply for roles at the same level (possible lateral move to another function) or one level higher (next higher immediate level)
• Please be aware that promotions (band increments) may lead to changes in financial rewards. However, lateral moves only result in changes to job title and reporting lines.
• For Regional roles, knowledge of the Region local language is essential