Cyber Defence Operations Manager
Role purpose:
Cyber Defence Operations (CDO) is Vodacom Tanzania’s Cyber Defence Operations Centre of Excellence.
CDO’s mission is to protect Vodacom customers against cyber risks. CDO is specifically accountable for delivering:
• Cyber Defence operational leadership within Vodacom Tanzania.
• Cyber Defence operational capabilities to Vodacom Tanzania, to enhance Vodacom’s cyber defence posture and reduce its cyber risks.
The purpose of this role is to provide the Vodacom Tanzania element of the Cyber Defence Operations (CDO) ‘follow the sun’ security incident management operational model. This role is responsible for picking up security incidents, managing and coordinating them to resolution. This includes management of; incident analytics and triage, response and mitigation activities, and the coordination between the various involved parties for service restoration and root cause investigations. This includes as well vulnerabilities identified in the Vodacom systems, through various sources such as tools scanning and external sources
Key accountabilities and decision ownership:
Impact on the business
• Responsible for the set-up, execution and maintenance of the security incident management and coordination process in conjunction with incident management capabilities
• Support the global implementation of Vodafone’s and Vodacom Group cyber incident management operating model, frameworks, processes and tools.
• Management of the vulnerability scanning, patching and penetration tests and tracking resolution of vulnerabilities and patches in Vodacom systems, per the relevant Vodacom security policies
• Continuously monitor Vodacom systems for security incidents, threats and malware that may happen and perform investigation
• Coordinate all internal and external audits around Technology systems and processes, ensure these systems are free from known Technology audit findings and ensure all audit findings in these systems are closed within agreed timelines
• Perform risk assessments across Technology areas, provide risk reports (including risk management committee reports and audit committee reports) to management as and when requested
Customers, supplier and third parties
• Managing the incident processes between all relevant parties (Vodafone, Operating Companies, Suppliers, etc.)
• Coordination of analytical processes and incident response measures
• Act as a Vodacom Tanzania cyber incident management expert, using his/her personal experience and judgment to quickly determine the right treatment of cyber events and incidents.
• Co-ordinate the technical & non-technical responses to live cyber events and incidents across resolver teams.
Leadership and teamwork
• Functional lead for managed incident handling as well as underlying processes and tools
• Contribute to the overall performance and success of the Cyber Defence Operations
• Team up with other teams, departments and customers for problem and incident resolution
• Build and manage relationships with key stakeholders to disseminate information and drive mitigating actions.
• Work with other cyber teams to identify significant threats/actors posing a potential risk to Vodacom.
Innovation and change
• Set-up of analytics framework and tools
• Taking ownership for incident management processes
• Drive and improve incident management capabilities
Communication
• Strong communication skills in order to drive the various operationally required incident communication processes with the Cyber Defence Operations environment towards Vodacom and non-Vodacom staff, internal and external customers as well as partners and suppliers
• Managing the incident process communication and provisioning of appropriate technical media (e.g. on demand conference call lines)
• Driving incident emergency communication processes
• Provide oral and written reporting and analytics on all cyber security incidents.
• Be included in our out of hours on call schedules, providing 24/7 support.
• Coordinate the information security awareness and trainings to all users, and monitor effectiveness of the awareness and trainings
• Responsible for clear, accurate and punctual communications to internal stakeholders and customer facing teams
• Responsible for chairing and driving Management and/or Technical conference calls and discussions, and escalations, up to Director level
Perform any other task that may be assigned to him/her from Cyber Security management
Core competencies, knowledge and experience
Must have technical / professional qualifications:
• Bachelor of Science Degree in Telecommunications, Information/Cyber Security, Information technology or Computer Science
• Security certifications (CEH, GCIA, CISM, CISA, CISSP or equivalent)
• Minimum of three years’ experience in Technology Systems security and/or Cyber security field
• Advanced knowledge of mobile telecommunications network architectures, IT systems, networks and applications.
• Experience in Penetration Testing / Ethical Hacking
• Experience in Databases and servers management
• Experience in Networking
• Experience in Web Applications
• Experience in scripting and programming languages
• Experience in working on international projects
• A reputation for self-motivation, integrity, cultural sensitivity and strong interpersonal skills
Skills
• Good communication skills
• Excellent interpersonal skills;
• High level negotiation skills;
• Extensive computer user knowledge and skills essential; in Word, Power point and Excel
• Strong analytical skills;
• Excellent planning and organizing skills.
• Good business acumen
• Project Management skills
• Conflict resolution skills
• Ability to work independently and under pressure.
Personal Attributes
• Integrity
• Strategic orientation balanced with operational imperatives
• Ability to deal with issues of a complex nature
• Ability to work under constant and changing pressure.
• Assertiveness
• Results oriented
• Team player;
• Resilient individual
• Action Orientation and high energy level
• Interpersonal sensitivity.
TO APPLY CLICK HERE
Job Title: System Administrator-PPFE Systems – Tanzania
Posting date: 03 Jun, 2019
Job ID: VDITB35
Type: Full Time
Category: IT/Technology
Role purpose:
• PPFE Systems availability
• PPFE products /service configuration
• PPFE Products/service development support
• PPFE Systems Security and compliance
Key accountabilities and decision ownership
• Perform daily PPFE systems monitoring
• Attend product/services implementation meeting and guide business on feasibilities
• Accurately perform product/service configuration/change as per business need or change requirements
• Perform FSTS review and FAT of product/services and changes made on PPFE systems
• Perform system security checklist and user review as per security policy Core competencies, knowledge and experience
• Excellent analytical, problem solving and logical reasoning skills
• Knowledge of software development life cycle
• Must be able to work effectively for long and irregular hours (within and after business hours).
• Must have good communications and presentation skills and ability to work well in a team.
• Must be able to work and deliver under pressure.
Must have technical/professional qualifications:
• 2+ years’ experience in Mobile communication industry or other strong IT industry.
• Bachelor degree in Computer Science, computer Engineering, communication or Telecommunication• Knowledge of Unix/Linux systems
• Knowledge of Relational Database management systems
• Knowledge of HP Nonstop systems is an added advantage
• Project knowledge and experience would be advantageous.
TO APPLY CLICK HERE
Cyber Security Demand & Delivery Specialist
Role purpose:
Demand and delivery are key aspects to a continuous and sustainable security landscape, in efforts to ensure safe and secure Vodacom services to our customers
This role is responsible for effective, efficient and careful planning of Vodacom Tanzania cyber security projects and operations, to ensure very minimal business operations. This includes identification of security needs (demands), coordinating delivery of the needs and ensuring security operations are running as designed. Capacity growth and trends, management reports and presentations are also key responsibilities of this role
Key accountabilities and decision ownership:
Impact on the business
• Own demand planning and forecasting for Technology security, for all systems, services and processes within the portfolio, working together with vendors and internal customers
• Coordinate delivery and assessment of cyber security baselines (CSBs) across all Vodacom relevant business areas and processes
• Perform internal controls self-assessment (CSAs) to validate compliance to security policies, such as user access management, information security and Technology security policies
Customers, supplier and third parties
• Monitor compliance of the Technology security managed services contract, to ensure it is within agreed SLA
• Ensure proper implementation and change management process compliance for all planned and emergency changes in Technology systems
Leadership and teamwork
• Monitor and minimize licenses utilization charges as a result of excess usage of un-needed services
• Owner of the Technology security Incidents, Requests, Changes and Escalation processes, ensuring high levels of performance in these processes, accurate reporting and establishing service improvement activities when required
• Be accountable for the quality of Service and performance; ensuring future demand from growth and projects is understood and factored into capacity plans for all associated
Technology security systems
• Provide regular and accurate management reporting on Technology security service performance. This includes management KPIs reports and SLA reports
• Ensure proper validation, timely completion and accuracy of audit checklists and user access rights review for Technology areas
Innovation and change
• Delivery of Technology security services and operations to ensure operational metrics are optimized
• Drive continuous improvement through simplification of key cyber security processes
Communication
• Drive internal and third party service review meetings covering performance, service improvements, quality and processes
• Make recommendations for Technology security service Improvement Plans and ensure actions are followed through to completion in a timely manner
• Responsible for chairing and driving Management and/or Technical conference calls and discussions, and escalations, related to cyber defence and delivery
• Ensure licenses and support renewals for all security products are performed well in advance of expiry, to avoid service interruptions
Perform any other task that may be assigned to him/her from Cyber Security management
Core competencies, knowledge and experience
Must have technical / professional qualifications:
• Bachelor of Science Degree in Telecommunications, Information/Cyber Security, Information technology or Computer Science
• Security certifications (CEH, GCIA, CISM, CISA, CISSP or equivalent) will be an added advantage
• Minimum of three years’ experience in Technology Systems security and/or Cyber security field
• Advanced knowledge of mobile telecommunications network architectures, IT systems, networks and applications.
• A reputation for self-motivation, integrity, cultural sensitivity and strong interpersonal skills
Skills
• Good communication skills
• Excellent interpersonal skills;
• Extensive computer user knowledge and skills essential; in Word, Power point and Excel
• Strong analytical skills;
• Excellent planning and organizing skills.
• Good business acumen
• Project Management skills
• Conflict resolution skills
• Ability to work independently and under pressure.
• Personal Attributes
• Integrity
• Strategic orientation balanced with operational imperatives
• Ability to deal with issues of a complex nature
• Ability to work under constant and changing pressure.
• Resilient individual
• Action Orientation and high energy level
• Interpersonal sensitivity.
Demand and delivery are key aspects to a continuous and sustainable security landscape, in efforts to ensure safe and secure Vodacom services to our customers
This role is responsible for effective, efficient and careful planning of Vodacom Tanzania cyber security projects and operations, to ensure very minimal business operations. This includes identification of security needs (demands), coordinating delivery of the needs and ensuring security operations are running as designed. Capacity growth and trends, management reports and presentations are also key responsibilities of this role
Key accountabilities and decision ownership:
Impact on the business
• Own demand planning and forecasting for Technology security, for all systems, services and processes within the portfolio, working together with vendors and internal customers
• Coordinate delivery and assessment of cyber security baselines (CSBs) across all Vodacom relevant business areas and processes
• Perform internal controls self-assessment (CSAs) to validate compliance to security policies, such as user access management, information security and Technology security policies
Customers, supplier and third parties
• Monitor compliance of the Technology security managed services contract, to ensure it is within agreed SLA
• Ensure proper implementation and change management process compliance for all planned and emergency changes in Technology systems
Leadership and teamwork
• Monitor and minimize licenses utilization charges as a result of excess usage of un-needed services
• Owner of the Technology security Incidents, Requests, Changes and Escalation processes, ensuring high levels of performance in these processes, accurate reporting and establishing service improvement activities when required
• Be accountable for the quality of Service and performance; ensuring future demand from growth and projects is understood and factored into capacity plans for all associated
Technology security systems
• Provide regular and accurate management reporting on Technology security service performance. This includes management KPIs reports and SLA reports
• Ensure proper validation, timely completion and accuracy of audit checklists and user access rights review for Technology areas
Innovation and change
• Delivery of Technology security services and operations to ensure operational metrics are optimized
• Drive continuous improvement through simplification of key cyber security processes
Communication
• Drive internal and third party service review meetings covering performance, service improvements, quality and processes
• Make recommendations for Technology security service Improvement Plans and ensure actions are followed through to completion in a timely manner
• Responsible for chairing and driving Management and/or Technical conference calls and discussions, and escalations, related to cyber defence and delivery
• Ensure licenses and support renewals for all security products are performed well in advance of expiry, to avoid service interruptions
Perform any other task that may be assigned to him/her from Cyber Security management
Core competencies, knowledge and experience
Must have technical / professional qualifications:
• Bachelor of Science Degree in Telecommunications, Information/Cyber Security, Information technology or Computer Science
• Security certifications (CEH, GCIA, CISM, CISA, CISSP or equivalent) will be an added advantage
• Minimum of three years’ experience in Technology Systems security and/or Cyber security field
• Advanced knowledge of mobile telecommunications network architectures, IT systems, networks and applications.
• A reputation for self-motivation, integrity, cultural sensitivity and strong interpersonal skills
Skills
• Good communication skills
• Excellent interpersonal skills;
• Extensive computer user knowledge and skills essential; in Word, Power point and Excel
• Strong analytical skills;
• Excellent planning and organizing skills.
• Good business acumen
• Project Management skills
• Conflict resolution skills
• Ability to work independently and under pressure.
• Personal Attributes
• Integrity
• Strategic orientation balanced with operational imperatives
• Ability to deal with issues of a complex nature
• Ability to work under constant and changing pressure.
• Resilient individual
• Action Orientation and high energy level
• Interpersonal sensitivity.
TO APPLY CLICK HERE
