Senior Manager - Cyber Security Assurance and Offensive Security

About the role

MTN's Internal Audit function provides forward-looking, threat-informed cyber assurance across its Group, covering telecom infrastructure, FinTech (mobile money and digital financial services) and digital infrastructure. The Senior Manager - Cyber Security Assurance and Offensive Security leads cyber security audits and offensive security oversight, reporting to the Group Executive: Internal Audit and Forensic Services.

Key responsibilities

• Cyber security assurance and audit leadership: develop and run risk-based cyber security audit plans, assess controls across identity and access management, network, cloud, application and API security, and evaluate cyber security governance frameworks.
• Integrate threat intelligence and emerging cyber risks into audit planning, review security architectures and deliver risk-based audit insights.
• Offensive security oversight: lead and coordinate red team exercises, adversary simulations and penetration testing reviews, and review third-party penetration testing outcomes.
• Incident response, cyber resilience and forensic assurance: assess risks related to AI solutions, automation and digital agents, and provide assurance on responsible AI frameworks and lifecycle governance.
• Platform business cyber risk oversight: cover connectivity infrastructure, fintech ecosystems, mobile money and digital payment environments, and review third-party integrations and APIs.
• Audit execution and quality assurance: oversee audit teams, document observations and recommendations, present outcomes to management and governance bodies, manage engagements in the eGRC platform, track management action plans and prepare regular reports.
• Comply with the International Standards for the Professional Practice of Internal Auditing and the IIA Code of Ethics.
• Advise OpCo leadership, Group Security and technology stakeholders on cyber risk and technology assurance.