IT Security Risk Management and Controls Design Specialist

About the role

MTN Cameroon is looking for a Specialist in IT Security Risk Management and Controls Design. The role covers periodic IT risk assessments, designing and testing IT controls, supporting audits and embedding risk awareness across the IS Division, based in Douala.

Key responsibilities

• Conduct periodic IT risk assessments across all IS units and maintain the IT risk register
• Design, document and test IT controls to mitigate identified risks and ensure audit readiness
• Support internal and external IT audits by preparing evidence, documentation and remediation plans
• Monitor the IT controls environment and report on open risks and mitigations
• Collaborate with business and IT teams to embed risk-aware practices in project and operational workflows
• Maintain IT governance documentation and support compliance monitoring
• Take part in project, strategic and tactical meetings, including input on proposals for change initiatives, policies and procedures
• Manage escalations affecting service delivery and resolve issues requiring formal resolution
• Contribute to setting objectives, targets and budgets, and prepare documentation for sign-off on tactical changes
• Review performance against KPIs, SLAs and reverse SLAs, and monitor continuous improvement
• Report periodically on progress and ad hoc on specific projects
• Manage the sub-division budget and monitor expenditure

Required profile

• Bachelor's degree in IT, Information Security, Risk Management or a related field
• Minimum 3 years in IT risk management, internal audit or IT governance
• Certifications such as CRISC, CISA or ISO 31000 are preferred

Required skills

• IT risk frameworks (COBIT, ISO 27005)
• Controls design and testing, audit management
• GDPR and local regulatory compliance
• IT governance standards
• Risk assessment, controls documentation, audit support and reporting