Manager, Information & Cyber Security Risk (Full-Time)

Location: MTN Ghana, Accra, Ghana
Employment Type: Full-Time
Application Deadline: 15 August 2026

Company Profile

MTN Ghana is the leading telecommunications and digital solutions provider in Ghana, committed to delivering innovative products and services that connect people and businesses. Guided by our ambition to lead digital solutions for Africa’s progress, we foster a culture of innovation, collaboration, inclusion, and integrity while empowering our employees to create meaningful impact.

We are seeking an experienced and strategic Manager, Information & Cyber Security Risk to strengthen our cybersecurity risk management framework and safeguard the organization’s digital assets, technology platforms, and critical business operations.

Position Summary

The Manager, Information & Cyber Security Risk will lead the identification, assessment, mitigation, monitoring, and reporting of information and cybersecurity risks across the enterprise. The successful candidate will work closely with business and technology stakeholders to strengthen cyber resilience, ensure regulatory compliance, and embed security into business operations while supporting MTN Ghana’s digital transformation agenda.

Key Responsibilities

Cyber Risk Management

• Identify, assess, evaluate, and prioritise information and cybersecurity risks across the enterprise, including third-party and supply chain risks.
• Conduct threat modelling, cyber risk assessments, and vulnerability assessments to address emerging threats.
• Maintain a comprehensive enterprise cyber risk register and recommend appropriate treatment plans.
• Monitor changes in the cyber threat landscape and proactively assess business impact.

Security Governance and Compliance

• Develop, implement, and continuously improve the Information Security Risk Management Framework.
• Ensure compliance with internal security policies, MTN Group standards, regulatory requirements, and international security frameworks.
• Support regulatory inspections, internal audits, and external assurance reviews.
• Promote governance practices that strengthen cybersecurity maturity across the organisation.

Risk Mitigation and Security Controls

• Design, implement, and monitor effective security controls based on recognised frameworks such as ISO/IEC 27001, NIST Cybersecurity Framework, CIS Controls, and COBIT.
• Integrate cybersecurity controls into technology projects, digital transformation initiatives, and business processes.
• Evaluate the effectiveness of existing controls and recommend continuous improvements.

Security Monitoring and Incident Response

• Lead cyber incident response planning, coordination, and continuous improvement initiatives.
• Oversee incident investigations, root cause analysis, and lessons learned activities.
• Support security operations teams in strengthening detection, containment, recovery, and response capabilities.
• Ensure cybersecurity incidents are appropriately documented and reported.

Business Continuity and Operational Resilience

• Facilitate Business Impact Assessments (BIA) for critical business functions.
• Support the development, testing, and maintenance of disaster recovery and business continuity plans.
• Strengthen organisational resilience against cyber threats and operational disruptions.

Risk Reporting and Executive Engagement

• Develop and maintain executive cybersecurity dashboards, key risk indicators (KRIs), and key performance indicators (KPIs).
• Prepare comprehensive cyber risk reports for executive leadership, governance committees, and Board sub-committees.
• Provide strategic recommendations to improve enterprise cyber resilience and risk posture.

Security Awareness and Culture

• Develop and implement enterprise-wide cybersecurity awareness programmes.
• Partner with Human Resources and Corporate Communications to embed security awareness into employee onboarding and ongoing learning.
• Promote a culture of cybersecurity ownership and responsible digital behaviour across the organisation.

Technology and Security Advisory

• Provide cybersecurity input into enterprise architecture, technology selection, and digital transformation initiatives.
• Evaluate emerging security technologies and recommend innovative solutions that strengthen organisational resilience.
• Support secure-by-design and Zero Trust principles across technology environments.

Stakeholder Management and Collaboration

• Collaborate with MTN Group Risk, Technology, Compliance, Internal Audit, and business units to align cybersecurity initiatives.
• Build strong relationships with regulators, industry partners, and external security stakeholders.
• Share best practices and contribute to enterprise-wide cybersecurity capability development.

Qualifications

Education

• Bachelor’s degree in Information Security, Computer Science, Information Technology, Risk Management, Business Information Systems, or a related discipline.
• A postgraduate qualification will be an advantage.

Professional Certifications

Applicants must possess one or more recognised cybersecurity certifications, including:

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)
• Certified Ethical Hacker (CEH)
• Other relevant cybersecurity or risk management certifications will be an added advantage.

Experience

• Minimum of five (5) years’ relevant experience in information security, cybersecurity risk management, IT risk, or enterprise risk management.
• At least three (3) years’ experience leading teams or supervising cybersecurity initiatives.
• Experience within the telecommunications, financial services, technology, or highly regulated industries is highly desirable.

Technical Knowledge

The successful candidate should demonstrate strong knowledge of:

• Information Security Management Systems (ISO/IEC 27001 and ISO 27005)
• NIST Cybersecurity Framework (CSF) and Risk Management Framework (RMF)
• CIS Critical Security Controls
• COBIT Governance Framework
• Enterprise Risk Management methodologies
• Cyber risk quantification and reporting
• Threat intelligence and threat hunting
• MITRE ATT&CK Framework and Cyber Kill Chain
• Business Continuity and Disaster Recovery frameworks
• Cloud security technologies, including AWS and Microsoft Azure
• Network security architecture and Zero Trust principles
• Data privacy regulations including the Ghana Data Protection Act, GDPR, and National Communications Authority (NCA) requirements
• Governance, Risk and Compliance (GRC) platforms
• Microsoft Power BI, Power Apps, Power Automate, and other reporting tools
• Project management methodologies such as Agile, PRINCE2, or PMP

Core Competencies

Leadership

• Strategic leadership
• Coaching and mentoring
• Stakeholder engagement
• Team development
• Cross-functional collaboration

Technical Competencies

• Cybersecurity risk management
• Security governance
• Incident response
• Security architecture
• Risk analysis
• Regulatory compliance
• Technology risk assessment

Business Competencies

• Strategic thinking
• Business acumen
• Analytical and critical thinking
• Decision-making
• Project and programme management
• Communication and presentation skills
• Executive reporting
• Problem-solving
• Continuous improvement

Behavioural Expectations

The successful candidate must consistently demonstrate the MTN Values:

• Lead with Care
• Collaborate with Agility
• Serve with Respect
• Can Do with Integrity
• Act with Inclusion

The successful candidate must also demonstrate the MTN Vital Behaviours:

• Complete Candor
• Complete Accountability
• Active Collaboration
• Get It Done

Working Conditions

• Operate effectively within MTN Ghana’s flexible Anywhere/Anytime work environment.
• Demonstrate personal accountability, adaptability, and the ability to manage competing priorities in a dynamic business environment.

How to Apply

Apply online by clicking on the Application button.