Description

This role is responsible for managing and reducing security risks in Systems and Products developed in Agile squads by integrating security into Vodacom inhouse DevSecOps pipelines, and through extensive security assessment and evaluation of the technology platforms deployed/built in house to ensure the expected security risk reduction

Key accountabilities and decision ownership 

• Build tactical practice to integrate and Automate Cyber Security into the organizational adoption and improvement of agile practices.
• Drive Security Chapter Leadership, train and develop security Champions in each squad, and perform on-going security testing and code review to improve software security.
• Own and drive DevSecOps related Cyber Security baselines (CSB) and ensure strategic aligned controls are implemented.
• Ensure Cyber Security requirements are documented and communicated in a manner that can be well understood and adopted by design and engineering teams.
• Act as SPOC and represent Vodacom Tanzania in all group Security Chapter meetings.    

Core competencies, knowledge, and experience:

• Security, Risk, and Compliance
• Mobile and Network Security
• Development and Integration
• External trends and insights
• Assurance / Assessment

Must have technical/professional qualifications: 

• Bachelor’s Degree in information technology, Computer Science, Cyber Security, or relevant domain
• Strong Understanding of Agile, Secure Coding, CI/CD processes, and tools.
• Knowledge of multiple Programming languages, Databases, Virtualization and Cloud technologies.
• Knowledge of application security risks like OWASP and respective security Testing Methodologies.
• An industry Security certification.  
• OSCP is strongly preferred.

Skills

• Security
• Risk and Compliance
• Monitor and Diagnose
• Mobile and Network Security
• Implementation and Integration
• Change and Adaptability
• Complexity Management
• Assurance / Assessment
• Communication
• Risk Management