Manager - IP Network Security Operations at MTN Nigeria

MTN Nigeria is part of the MTN Group, Africa\'s leading cellular telecommunications company. On May 16, 2001, MTN became the first GSM network to make a call following the globally lauded Nigerian GSM auction conducted by the Nigerian Communications Commission earlier in the year. Thereafter the company launched full commercial operations beginning with Lagos, Abuja and Port Harcourt. MTN paid $285m for one of four GSM licenses in Nigeria in January 2001. To date, in excess of US$1.8 billion has been invested building mobile telecommunications infrastructure in Nigeria. Since launch in August 2001, MTN has steadily deployed its services across Nigeria. It now provides services in 223 cities and towns, more than 10,000 villages and communities and a growing number of highways across the country, spanning the 36 states of the Nigeria and the Federal Capital Territory, Abuja. Many of these villages and communities are being connected to the world of telecommunications for the first time ever. The company\'s digital microwave transmission backbone, the 3,400 Kilometre Y\'elloBahn was commissioned by President Olusegun Obasanjo in January 2003 and is reputed to be the most extensive digital microwave transmission infrastructure in all of Africa. The Y\'elloBahn has significantly helped to enhance call quality on MTN network.

Reports To: Senior Manager - IP Security

Division: Information Technology

Mission:

• Responsible for supporting and maintenance of day-to-day IP Network security operations of the Perimeter security, Datacenter security, Enterprise security, Internet Upstream security IP Edge/Access Security and all IP Network security technologies, across the MTNN ecosystem, in line with MTNN Business objectives
• Responsible for the definition of MTN Nigeria information security policy, embedding security policy into operation and leading security risk assessment efforts and associated controls & reporting in line with MTN Nigeria policies.
• Drive effective coordination and closure of all Information Security compliance activities, including control tracking and actual submissions for closure.

Description:

• Implementation and troubleshooting of security technologies such as firewalls, anti-DDoS, F5, VPNs, etc. as per the change management process
• IP network security plans integration with the existing and new networks, with an emphasis on getting it right on the first attempt.
• Monitor and maintain set KPI’s for IP networking security technologies using software tools.
• Identify, assess, and evaluate risk to enable the execution of the enterprise risk management strategy.
• Determine a holistic view of security requirements by evaluating current security operations and requirements; researching network security standards; studying architecture and platforms; identifying integration issues; and preparing cost estimates.
• Deployment and implementation of countermeasures or mitigating controls
• Analyze user needs and requirements to plan a system architecture supporting cybersecurity operations.
• Propose new technologies or procedures that could be used to advance the ability to detect and mitigate malicious activity.
• Participates in special security projects such as RFPs, RFQs, etc. as required.
• Investigate, log, and report security incidents, resolving them timely and advising management on emerging vulnerabilities and remediations.
• Perform problem, change, and release and configuration management as it pertains to network security. 
• Develop and update security metrics for framework maturity, security posture governance, and reporting.
• Perform network security engineering activities for the deployment of new enterprise cyber security technologies.
• Analyze logs and reports and interpret the implications. Participates in investigations into problematic activity and assists with plans for appropriate resolution.
• Collect and disseminate actionable threat intelligence.
• Manage the development of security architectural and development standards for all network components (radio, core, IP, etc.).
• Making sure that network segments, network security elements such as firewalls and anti-DDoS, load balancers, IPS, SS7, VPN, two-factor authentication, TACASS, WAF, syslog, etc. are designed, deployed, and implemented optimally to secure MTN infrastructure perimeters, data centers, and entry points
• Determine a holistic view of security requirements by evaluating current security operations and requirements, researching network security standards, studying architecture and platforms, identifying integration issues, and preparing cost estimates.
• Train and develop the competencies of direct reports, and organize relevant trainings where applicable.
• Ensure a standardized and aligned approach driven from Group Information Security for security architecture across MTN, including OPCO’s.
• Integration of designs into enterprise solutions such as response, monitoring, authentication, compliance, etc.
• Provide periodic feedback to management about IP network security programs.
• Support the implementation of local and Group wide procedures, processes, and awareness of security measures, as well as other security solutions, to ensure the security of all data, networks, and new products and services.
• Coordinate the security Incident response for the organization
• Interface with support teams (infrastructure, NWG, applications, and IT) to resolve security vulnerabilities within enterprise systems and applications.
• Coach and train the team to ensure understanding of the objectives and goals of the department, awareness of set targets and requirements, and regular review of their training needs.
• Review the performance of individual team members and complete appraisals in accordance with the employee performance appraisal procedures and time schedules.
• Identify the training requirements of team members and develop a program to address knowledge gaps and enrich the knowledge repository within the department.

Education:

• First degree in Computer Science, Information Technology/Systems or related field.
• Master’s degree in related field will be an added advantage.
• CCCIE Security, NSE 4, CCNP/CGEIT/CISSP / ITIL/
• Fluent in English

Experience:

6-13 years’ experience which includes: 

• Minimum of 3 years’ experience in an area of specialization; with experience in supervising/managing others 
• Extensive experience in ICT & Telecoms Service Provider network. 
• Minimum of 3 years’ experience in an area of specialization; with experience in supervising/managing others.
• Experience working in a medium to large organization.
• Three years’ experience in IP Networking Security Environment, including VPNs, Cisco ASA firewalls/Checkpoint firewalls/Palo Alto, VPN solutions, IPsec, Fortinet, Tacacs+ and Access-Lists, Load Balancing, Patch Management
• Proven network security architecture knowledge across multiple security domains.
• Experience in multi-vendor network operations
• Solid security experience essential.
• Advanced knowledge of risk assessment design and delivery
• Understanding of PCIDSS, ISO 27001:2019 and Cybersecurity Frameworks including but not limited to NIST, CIS etc

Method of Application