Manager - Security Engineer Incident Management and Automation

The Manager - Security Engineering, Incident Management and Automation is responsible for the implementation, operation and continuous improvement of security controls, monitoring capabilities and automation solutions within the Security Operations Centre. The role drives incident management and security engineering activities to strengthen MTN’s detection, response and operational resilience capabilities while ensuring alignment with established security standards and operational requirements.

Context

MTN's Ambition 2030 strategy is focused on leading digital solutions for Africa's progress by accelerating platform growth, advancing digital and financial inclusion, enabling sustainable connectivity, and building a resilient, future-fit organisation. As MTN continues its evolution into a digital platform business, Information Security plays a critical role in safeguarding customer trust, protecting digital services, enabling innovation, and ensuring operational resilience across MTN's diverse markets.

The Group Information Security function must therefore ensure the successful delivery of its mandate in the context of:

- Supporting MTN's Ambition 2030 vision to be the leading platform business and digital solutions provider for Africa.
- Accelerating digital transformation, cloud adoption, AI enablement, fintech expansion, digital services, and platform ecosystems across the Group.
- Protecting MTN's rapidly expanding digital assets, customer data, financial platforms, and critical technology infrastructure.
- Managing the geographic complexity of MTN's footprint across Africa and the Middle East, encompassing varying regulatory, political and cyber risk environments.
- Maintaining stakeholder confidence by meeting the expectations of customers, shareholders, regulators, partners, and communities.
- Enabling sustainable growth through secure digital innovation and the adoption of emerging technologies, including Artificial Intelligence.
- Achieving operational excellence through standardised security processes, automation, intelligence-led decision-making, and continuous improvement.
- Addressing an increasingly sophisticated and rapidly evolving cyber threat landscape targeting telecommunications operators, financial services, digital platforms, and critical infrastructure.
- Ensuring business continuity, cyber resilience, and operational stability across a highly interconnected technology ecosystem.
- Delivering integrated cyber defence capabilities across network, cloud, IT, digital, financial services, and enterprise environments.
- Strengthening proactive threat intelligence, threat hunting, detection, response, and cyber risk management capabilities.
- Supporting regulatory compliance and data protection requirements across multiple jurisdictions.
- Enhancing MTN's reputation as a trusted, secure, and responsible digital operator.
- Leveraging automation, machine learning, and AI-driven security capabilities to improve cyber defence effectiveness and operational efficiency.
- Embedding a culture of security awareness, accountability, and resilience across MTN Group and its Operating Companies.

In this environment, the Information Security function is required to provide timely, actionable, and business-relevant intelligence that enables MTN to anticipate emerging threats, proactively manage cyber risks, and support the achievement of Ambition 2030 objectives.

Values

We at MTN are a purpose and value-led organization. At MTN, we believe that understanding our people’s needs and aspirations is key to creating experiences that delight you at work, everyday. We are committed to fostering an environment where every member of our Y’ello Family is heard, understood and empowered to live an inspired life.

Our values keep us grounded and moving in the right direction. Most importantly, they keep us honest. It is not something we claim to be. It is in our DNA.

As an organisation, we consider it our mission to create an exciting and rewarding place to work, where our people can be themselves, thrive in positivity and ignite their full potential. A workplace that boosts creativity and innovation, improves productivity, and ultimately drives meaningful results. A workplace that is built on relationships and achieving a purpose that is bigger than us.

Our commitments go beyond an organisational promise. It is in our leadership and managerial ethos to meaningfully partner with our employees, customers and stakeholders with a vision to realise our shared goals.

Live Y’ello

- Lead with Care
- Can-do with Integrity
- Collaborate with Agility
- Serve with Respect

Act with Inclusion

Qualifications:

- Bachelor’s degree in Computer Science, Information Technology, Engineering, Cybersecurity or a related field (or equivalent practical experience).
- One or more relevant industry certifications (as per below)

Certifications:

- CISSP, CISM or equivalent security certification advantageous
- GIAC certifications (e.g. GCIA, GCIH, GMON, GPEN) or OSCP / CEH.
- Microsoft Security certifications (SC-200, AZ-500).
- Cloud security certifications (CCSP, AWS or Azure security specialty).

Experience:

- 4–6 years' experience in information security, cybersecurity operations or a related technology environment.
- Experience in the following areas: Security Monitoring, Incident Response, Security Operations, or Security Tool Administration.
- Experience supporting the implementation and operation of security automation solutions within enterprise environments
- Experience operating in large, complex enterprise environments; telecommunications experience is an advantage.

Technical competencies:

- Strong knowledge of SIEM and SOAR platforms (e.g. Microsoft Sentinel, Splunk) and EDR/XDR tooling (e.g. Microsoft Defender).
- Proficiency in scripting and automation (Python, PowerShell, KQL) and integration via REST APIs.
- Practical knowledge of cloud security across Azure, AWS and/or GCP.
- Familiarity with AI/ML and LLM security concepts, agentic AI, and secure AI adoption.
- Working knowledge of security frameworks: MITRE ATT&CK, MITRE ATLAS, NIST CSF, OWASP, Zero Trust and CIS.
- Sound understanding of networking, operating systems and enterprise infrastructure.

Behavioural competencies:

- Analytical, structured problem-solver with strong attention to detail.
- Self-driven and able to work independently and lead initiatives end-to-end.
- Strong collaboration and stakeholder engagement skills across technical and business teams.
- Excellent written and verbal communication.
- Comfortable with ambiguity and a rapidly evolving technology landscape.
- Committed to continuous learning, innovation and knowledge sharing.