Manager, Information & Cyber Security Risk

About the role

The Manager, Information & Cyber Security Risk will lead the development and execution of adaptive, business‑aligned information and cybersecurity risk management strategies for MTN Ghana. This role safeguards digital assets, infrastructure and stakeholder interests by identifying, assessing and mitigating cyber and information security risks across the enterprise.

Key responsibilities

• Continuously identify, assess and prioritize information and cybersecurity risks, including third‑party and supply‑chain risks.
• Conduct regular threat modelling and vulnerability assessments aligned with evolving threat landscapes.
• Design and implement risk mitigation strategies and security controls based on frameworks such as NIST CSF, ISO 27001 and CIS Controls.
• Maintain compliance with internal policies and external regulations (e.g., Data Protection Act, GDPR, NCA directives) and support audits.
• Oversee incident response planning, ensuring timely detection, containment and recovery from security incidents.
• Maintain and update the Information Security Risk Dashboard for executive visibility and provide regular risk reports.
• Facilitate Business Impact Analyses and align disaster recovery and continuity plans with critical business functions.
• Develop and deliver cybersecurity awareness programs to promote a risk‑aware culture.

Required profile

• Reports to Senior Manager, Security Risk Management.
• Level L3 position within the Risk & Compliance division.

Required skills

• ISO 27001
• NIST Cybersecurity Framework (CSF)
• CIS Controls
• GDPR
• Data Protection Act
• NCA directives
• Threat modelling
• Vulnerability assessment
• Incident response planning
• Business Impact Analysis (BIA)