JOB ADVERTISEMENT : Specialist - IT Security Risk Management and Controls Design - MTN Cameroon - Mobile Telecommunication Networks

Specialist - IT Security Risk Management and Controls Design.Technology
Douala, Littoral, Cameroon
Want to know more about us? We’ve got you! Please scroll to the end of the section to get to know us better.

Job Description
We at MTN Cameroon are a purpose and value-led organization.

At MTN Cameroon we believe that understanding our people’s needs and aspirations is key to creating experiences that delight you at work, every day. We are committed to fostering an environment where every member of our Y’ello Family is heard, understood, and empowered to live an inspired life. Our values keep us grounded and moving in the right direction. Most importantly, they keep us honest. It is not something we claim to be. It is in our DNA.

As an organisation, we consider it our mission to create an exciting and rewarding place to work, where our people can be themselves, thrive in positivity and ignite their full potential. A workplace that boosts creativity and innovation, improves productivity, and ultimately drives meaningful results. A workplace that is built on relationships and achieving a purpose that is bigger than us. This is what we want you to experience with us!

Our commitments go beyond an organisational promise. It is in our leadership and managerial ethos to meaningfully partner with our employees, customers, and stakeholders with a vision to realise our shared goals. 

Our values dubbed, LIVE Y’ello, are the cornerstone of our culture.

Lead with Care

Can-do with Integrity

Collaborate with Agility

Serve with Respect

Act with Inclusion

 



 

Responsibilities
Operational Delivery:

Conduct periodic IT risk assessments across all IS units and maintain the IT risk register

Design, document and test IT controls to mitigate identified risks and ensure audit readiness

Support internal and external IT audits by preparing evidence, documentation and remediation plans

Monitor the IT controls environment and report on the status of open risks and mitigations

Collaborate with business and IT teams to embed risk-aware practices into project and operational workflows

Maintain the IT governance framework documentation and support compliance monitoring

 

Operational, Tactical and Strategic Meetings

Provide input on all projects initiated within the unit and across the IS Division

Review key risks, issues and dependencies and set mitigation actions

Provide input in strategic meetings when required

Provide inputs into risk mitigation and controls

Provide input into the preparation of proposals on change initiatives, policies, and procedures

Escalations

Manage and resolve escalations that have impact on critical path of service delivery

Escalate issues that will result in significant time, scope, employee/customer or cost impact if not resolved

Manage and provide solutions to issues that require formal resolution

Function Tactical

Provide input into all projects initiated

Provide input into establishing objectives, targets, and budgets for the function as applicable

Identify and document key risks, issues and dependencies and set mitigation actions

Prepare documentation required for sign-off / making decisions regarding tactical changes

Performance

Review performance against agreed KPIs and their compliance to SLAs and reverse SLAs

Review and monitor plan for continuous improvement

Ensure execution in alignment with divisional strategy

Continuous performance monitoring and adjust strategy and actions to deliver targets

Reporting

Report on a periodic basis relating to progress made within the function and in accordance with the measurement metrics set by the organisation

Report on an ad hoc basis on specific projects, as required

Budget

Manage budget for the sub-division in line with business objectives

Monitor expenditure and ensure cost optimization

Compliance

All employees are the first line of compliance defense and are expected to act as Compliance Champions in their respective roles.

Employees must comply fully with all applicable legislation, regulations, policies, standards, and procedures in the execution of their day‑to‑day responsibilities.

Any act of negligence or non‑compliance by an employee will be addressed in accordance with the MTN Cameroon Disciplinary Policy.

Employees are required to attend scheduled compliance training, proactively report, and escalate any compliance concerns, issues, or failures.

With the support of the Compliance Champions and the Risk & Compliance (R&C) team, employees are expected to review and update compliance obligations, compliance risks, and control testing activities within their respective units.

Financial - Value created through enterprise-wide business growth:

Enterprise Financial Health (Revenues, EBITDA & other financial health ratios), translating revenue growth formula & objectives into results.

New business growth to sustain and complement traditional revenues.

Business growth, value created & cost-effectiveness achieved by process optimization, new initiatives and improved operations/ways of work.

Internal - Value created from executing enterprise-wide operations:

Value created through stronger sales execution, solution quality, delivery reliability and customer lifecycle governance.

New business opportunities enabled by solution innovation, structural improvements, process reviews and disciplined tool adoption.

Customer - Value created from Customer Engagement & Ecosystem Management:

Positive engagement outcomes through stronger onboarding, adoption, service review and value realization.

Deliberate ecosystem management to achieve business objectives, brand value and corporate positioning.

Improved visibility, accountability and resolution of risks and escalations.

People - Value created through positive impact on People & Culture:

Impact includes satisfaction on Culture and Values and employee engagement dimensions.

Attraction and retention of talent, efficient departmental structure, collaborative culture, coaching, mentoring and change management.

Qualifications
Education:

Bachelor's degree in IT, Information Security, Risk Management or related field

CRISC, CISA or ISO 31000 certification preferred

Experience:

Minimum 3 years in IT risk management, internal audit or IT governance

Functional Knowledge:

IT risk frameworks (COBIT, ISO 27005)

Controls design and testing

Audit management

GDPR and local regulatory compliance

IT governance standards

Skills:

Risk assessment and analysis

Controls documentation

Audit support

Reporting

Attention to detail

Behavioural Qualities:

Analytical thinking and problem-solving

Customer-centric mindset

Collaboration and teamwork

Attention to detail

Initiative and self-motivation

Adaptability in a fast-changing environment

Ethical conduct and integrity

HOW TO APPLY 

All applications must be submitted ONLINE at : https://ehle.fa.em2.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_1/jobs

Deadline for applications: Apply Before 11/06/2026, 11:55 PM