Manager - Security Engineer Incident Management and Automation

<p style="margin-bottom: 6pt; text-align: justify;"><span lang="EN-ZA">The Manager - Security Engineering, Incident Management and Automation is responsible for the implementation, operation and continuous improvement of security controls, monitoring capabilities and automation solutions within the Security Operations Centre. The role drives incident management and security engineering activities to strengthen MTN’s detection, response and operational resilience capabilities while ensuring alignment with established security standards and operational requirements.</span></p><p style="margin-bottom: 6pt; text-align: justify;">&nbsp;</p><p><span lang="EN-ZA"><strong>Context</strong></span></p><p style="line-height: normal; margin: 6pt 0in; text-align: justify;"><span lang="EN-ZA">MTN's Ambition 2030 strategy is focused on leading digital solutions for Africa's progress by accelerating platform growth, advancing digital and financial inclusion, enabling sustainable connectivity, and building a resilient, future-fit organisation. As MTN continues its evolution into a digital platform business, Information Security plays a critical role in safeguarding customer trust, protecting digital services, enabling innovation, and ensuring operational resilience across MTN's diverse markets.</span></p><p style="line-height: normal; margin: 6pt 0in;"><span lang="EN-ZA">The Group Information Security function must therefore ensure the successful delivery of its mandate in the context of:</span></p><ul style="list-style-type: disc; padding-left: 70.67px;"><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Supporting MTN's Ambition 2030 vision to be the leading platform business and digital solutions provider for Africa.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Accelerating digital transformation, cloud adoption, AI enablement, fintech expansion, digital services, and platform ecosystems across the Group.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Protecting MTN's rapidly expanding digital assets, customer data, financial platforms, and critical technology infrastructure.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Managing the geographic complexity of MTN's footprint across Africa and the Middle East, encompassing varying regulatory, political and cyber risk environments.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Maintaining stakeholder confidence by meeting the expectations of customers, shareholders, regulators, partners, and communities.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Enabling sustainable growth through secure digital innovation and the adoption of emerging technologies, including Artificial Intelligence.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Achieving operational excellence through standardised security processes, automation, intelligence-led decision-making, and continuous improvement.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Addressing an increasingly sophisticated and rapidly evolving cyber threat landscape targeting telecommunications operators, financial services, digital platforms, and critical infrastructure.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Ensuring business continuity, cyber resilience, and operational stability across a highly interconnected technology ecosystem.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Delivering integrated cyber defence capabilities across network, cloud, IT, digital, financial services, and enterprise environments.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Strengthening proactive threat intelligence, threat hunting, detection, response, and cyber risk management capabilities.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Supporting regulatory compliance and data protection requirements across multiple jurisdictions.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Enhancing MTN's reputation as a trusted, secure, and responsible digital operator.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Leveraging automation, machine learning, and AI-driven security capabilities to improve cyber defence effectiveness and operational efficiency.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Embedding a culture of security awareness, accountability, and resilience across MTN Group and its Operating Companies.</span></p><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;">&nbsp;</p></li></ul><p><span style="font-family: &quot;MTN Brighter Sans&quot;;"><span lang="EN-ZA" style="font-size: 11pt; line-height: 107%;">In this environment, the Information Security function is required to provide timely, actionable, and business-relevant intelligence that enables MTN to anticipate emerging threats, proactively manage cyber risks, and support the achievement of Ambition 2030 objectives.</span></span></p><p style="line-height: normal; margin: 6pt 0in;"><span lang="EN-ZA"><strong>Values</strong></span></p><p style="line-height: normal; margin: 6pt 0in;"><span lang="EN-ZA">We at MTN are a purpose and value-led organization. At MTN, we believe that understanding our people’s needs and aspirations is key to creating experiences that delight you at work, everyday. We are committed to fostering an environment where every member of our Y’ello Family is heard, understood and empowered to live an inspired life.&nbsp;</span></p><p style="line-height: normal; margin: 6pt 0in;"><span lang="EN-ZA">Our values keep us grounded and moving in the right direction. Most importantly, they keep us honest. It is not something we claim to be. It is in our DNA.</span></p><p style="line-height: normal; margin: 6pt 0in;"><span lang="EN-ZA">As an organisation, we consider it our mission to create an exciting and rewarding place to work, where our people can be themselves, thrive in positivity and ignite their full potential. A workplace that boosts creativity and innovation, improves productivity, and ultimately drives meaningful results. A workplace that is built on relationships and achieving a purpose that is bigger than us.&nbsp;</span></p><p style="line-height: normal; margin: 6pt 0in;"><span lang="EN-ZA">Our commitments go beyond an organisational promise. It is in our leadership and managerial ethos to meaningfully partner with our employees, customers and stakeholders with a vision to realise our shared goals.</span></p><p style="line-height: normal; margin: 6pt 0in;">&nbsp;</p><p style="line-height: normal; margin: 6pt 0in;"><span lang="EN-ZA"><strong>Live Y’ello</strong></span></p><ul style="list-style-type: disc; padding-left: 46.67px;"><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Lead with Care</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Can-do with Integrity</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Collaborate with Agility</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Serve with Respect</span></p></li></ul><p><span style="font-family: &quot;MTN Brighter Sans&quot;;"><span lang="EN-ZA" style="font-size: 11pt; line-height: 107%;">Act with Inclusion</span></span></p><p style="margin: 10pt 0in 5pt;"><span lang="EN-ZA"><strong>Qualifications:</strong></span></p><ul style="list-style-type: disc; padding-left: 48px;"><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Bachelor’s degree in Computer Science, Information Technology, Engineering, Cybersecurity or a related field (or equivalent practical experience).</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">One or more relevant industry certifications (as per below)</span></p></li></ul><p style="line-height: normal; margin: 6pt 0in;"><span lang="EN-ZA"><strong>Certifications:</strong></span></p><ul style="list-style-type: disc; padding-left: 48px;"><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">CISSP, CISM or equivalent security certification advantageous</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">GIAC certifications (e.g. GCIA, GCIH, GMON, GPEN) or OSCP / CEH.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Microsoft Security certifications (SC-200, AZ-500).</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Cloud security certifications (CCSP, AWS or Azure security specialty).</span></p></li></ul><p style="margin: 10pt 0in 5pt;"><span lang="EN-ZA"><strong>Experience:</strong></span></p><ul style="list-style-type: disc; padding-left: 48px;"><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">4–6 years' experience in information security, cybersecurity operations or a related technology environment.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Experience in the following areas: Security Monitoring, Incident Response, Security Operations, or Security Tool Administration.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Experience supporting the implementation and operation of security automation solutions within enterprise environments</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Experience operating in large, complex enterprise environments; telecommunications experience is an advantage.</span></p></li></ul><p style="line-height: normal; margin: 6pt 0in;"><span lang="EN-ZA"><strong>Technical competencies:</strong></span></p><ul style="list-style-type: disc; padding-left: 48px;"><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Strong knowledge of SIEM and SOAR platforms (e.g. Microsoft Sentinel, Splunk) and EDR/XDR tooling (e.g. Microsoft Defender).</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Proficiency in scripting and automation (Python, PowerShell, KQL) and integration via REST APIs.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Practical knowledge of cloud security across Azure, AWS and/or GCP.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Familiarity with AI/ML and LLM security concepts, agentic AI, and secure AI adoption.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Working knowledge of security frameworks: MITRE ATT&amp;CK, MITRE ATLAS, NIST CSF, OWASP, Zero Trust and CIS.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Sound understanding of networking, operating systems and enterprise infrastructure.</span></p></li></ul><p style="margin-bottom: 6pt;"><span lang="EN-ZA"><strong>Behavioural competencies:</strong></span></p><ul style="list-style-type: disc; padding-left: 48px;"><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Analytical, structured problem-solver with strong attention to detail.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Self-driven and able to work independently and lead initiatives end-to-end.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Strong collaboration and stakeholder engagement skills across technical and business teams.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Excellent written and verbal communication.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Comfortable with ambiguity and a rapidly evolving technology landscape.</span></p></li><li><p style="line-height: normal; margin-bottom: 6pt; margin-right: 0in; margin-top: 6pt;"><span lang="EN-ZA">Committed to continuous learning, innovation and knowledge sharing.</span></p></li></ul><p><span lang="EN-ZA">The Manager - Security Engineering Incident Management and Automation will be responsible for the following:</span></p><p style="line-height: normal; margin: 6pt 0in;"><span lang="EN-ZA"><strong>Security Operations</strong></span></p><ul style="list-style-type: disc;"><li style="line-height: normal; margin-bottom: 6pt; margin-top: 6pt;"><span lang="EN-ZA">Manage and maintain the technical effectiveness of SOC platforms, including SIEM, SOAR, EDR/XDR, NDR, email and cloud security technologies.</span></li><li style="line-height: normal; margin-bottom: 6pt; margin-top: 6pt;"><span lang="EN-ZA">Lead the development and continuous improvement of security monitoring use cases, detection content, correlation rules and alerting aligned to the MITRE ATT&amp;CK framework.</span></li><li style="line-height: normal; margin-bottom: 6pt; margin-top: 6pt;"><span lang="EN-ZA">Provide technical leadership and engineering expertise during security incident investigations, containment and remediation activities.</span></li><li style="line-height: normal; margin-bottom: 6pt; margin-top: 6pt;"><span lang="EN-ZA">Drive the integration, optimisation and lifecycle management of security tools and log sources to enhance detection and response capabilities.</span></li><li style="line-height: normal; margin-bottom: 6pt; margin-top: 6pt;"><span lang="EN-ZA">Partner with MSS providers and internal stakeholders to improve incident detection, response effectiveness and operational resilience.</span></li><li style="line-height: normal; margin-bottom: 6pt; margin-top: 6pt;"><span lang="EN-ZA">Ensure SOC platforms, workflows and monitoring capabilities remain aligned to evolving business, threat and operational requirements.</span></li></ul><p style="line-height: normal; margin: 6pt 0in;"><span lang="EN-ZA"><strong>AI, Automation &amp; Security Engineering</strong></span></p><ul style="list-style-type: disc;"><li style="line-height: normal; margin-bottom: 6pt; margin-top: 6pt;"><span lang="EN-ZA">&nbsp;Support the implementation and operationalisation of approved AI-enabled security capabilities and automation initiatives across MTN.</span></li><li style="line-height: normal; margin-bottom: 6pt; margin-top: 6pt;"><span lang="EN-ZA">Drive the development and optimisation of SOAR playbooks, APIs, integrations and automation workflows to improve operational efficiency and response times.</span></li><li style="line-height: normal; margin-bottom: 6pt; margin-top: 6pt;"><span lang="EN-ZA">Contribute to evaluation and deploymen of emerging security technologies, including AI-driven detection, response and security copilot capabilities.</span></li><li style="line-height: normal; margin-bottom: 6pt; margin-top: 6pt;"><span lang="EN-ZA">Ensure AI-enabled security solutions are deployed and governed in accordance with approved security standards, risk requirements and architectural principles.</span></li><li style="line-height: normal; margin-bottom: 6pt; margin-top: 6pt;"><span lang="EN-ZA">Identify opportunities to automate repetitive SOC activities, reduce manual effort and improve detection and response outcomes.</span></li><li style="line-height: normal; margin-bottom: 6pt; margin-top: 6pt;"><span lang="EN-ZA">Provide technical input into integration activities of AI and automation capabilities into the Cyber Defence technology ecosystem.</span></li></ul><p style="line-height: normal; margin: 6pt 0in;"><span lang="EN-ZA"><strong>Security Project Delivery &amp; Engineering</strong></span></p><ul style="list-style-type: disc;"><li style="line-height: normal; margin-bottom: 6pt; margin-top: 6pt;"><span lang="EN-ZA">Support technical delivery of Cyber Defence projects and security engineering initiatives.</span></li><li style="line-height: normal; margin-bottom: 6pt; margin-top: 6pt;"><span lang="EN-ZA">Provide engineering expertise during the evaluation, design and deployment of new SOC technologies and security capabilities.</span></li><li style="line-height: normal; margin-bottom: 6pt; margin-top: 6pt;"><span lang="EN-ZA">Develop engineering designs, implementation guidelines and technical documentation</span></li><li style="line-height: normal; margin-bottom: 6pt; margin-top: 6pt;"><span lang="EN-ZA">Work closely with MTN entities, technology teams, MSS providers and vendors to ensure successful implementation and operationalisation of security capabilities.</span></li></ul><p style="line-height: normal; margin: 6pt 0in;"><span lang="EN-ZA"><strong>Governance, Reporting &amp; Continuous Improvement</strong></span></p><ul style="list-style-type: disc;"><li style="line-height: normal; margin-bottom: 6pt; margin-top: 6pt;"><span lang="EN-ZA">Drive continuous improvement initiatives across incident management, security engineering, monitoring and automation capabilities.</span></li><li style="line-height: normal; margin-bottom: 6pt; margin-top: 6pt;"><span lang="EN-ZA">Develop and report on SOC engineering, detection, automation and incident management performance metrics.</span></li><li style="line-height: normal; margin-bottom: 6pt; margin-top: 6pt;"><span lang="EN-ZA">Ensure security controls, monitoring capabilities and operational processes comply with MTN policies, standards and applicable regulatory requirements.</span></li><li style="line-height: normal; margin-bottom: 6pt; margin-top: 6pt;"><span lang="EN-ZA">Maintain awareness of emerging threats, technologies and industry best practices, translating relevant developments into actionable improvements for Cyber Defence.</span></li><li style="line-height: normal; margin-bottom: 6pt; margin-top: 6pt;"><span lang="EN-ZA">Provide technical input into strategic planning and roadmap development &nbsp;for SOC engineering, automation and incident response capabilities.</span></li></ul>