BUSINESS UNIT:

M-Pesa is a pioneering fintech business and global market leader in mobile money. Starting from 2007 as a convenient means by which the unbanked and underbanked could make digital payments, M-Pesa has now grown to offer over 60 million active customers Financial Services, Enterprise, Merchant and Retail solutions. We are proud of our work in enabling the digital economy in our markets, and in driving financial inclusion.
M-Pesa Africa is the largest FinTech providing services to more than 60 million customers and 5 million businesses solutions across Financial Services, Enterprise, Merchant and Retail. We are now well on our way to becoming the preferred digital payment method across the markets that we serve, for both in-store, remote and online payments. With headquarters in both Nairobi and Johannesburg, we serve markets that include Kenya, Tanzania, DRC, Lesotho, Ghana, Egypt, Ethiopia, and Mozambique.
We are a united, energetic and passionate team. A place where leaders coach, teams connect, and everyone is empowered to go further, faster. A place where heroes become superheroes; through growth, opportunity, and the chance to work with the best minds in FinTech.

SKILLS AND COMPETENCIES:

• Strong knowledge of cloud platforms (AWS, Azure Cloud) and cloud-native security features.
• Experience with security tools like firewalls, intrusion detection/prevention systems (IDS/IPS), encryption, and security information event management (SIEM).
• Expertise in IAM, multi-factor authentication (MFA), and secure cloud infrastructure design.
• Experience with automation and scripting tools (e.g., Terraform, CloudFormation, Python) to enhance cloud security.
• Proficient in cloud security best practices, including monitoring, logging, and incident response.
  Closing date for Applications: 31 March 2025.
  The base location for this role is, Vodacom Midrand Campus.
  The Company’s approved Employment Equity Plan and Targets will be considered as part of the recruitment process. As an Equal Opportunities employer, we actively encourage and welcome people with various disabilities to apply.
  Vodacom is committed to an organisational culture that recognises, appreciates and values diversity & inclusion

ROLE PURPOSE:

The Cloud Cybersecurity Principal Specialist is accountable for ensuring the security, integrity and confidentiality of Cloud-based systems and services. This role focuses on designing, implementing, managing and maintaining robust cybersecurity solutions and processes that protect cloud infrastructures, applications, and data across platforms such as AWS, Azure and Huawei Cloud.

YOUR RESPONSIBILITIES WILL INCLUDE:

• Manage the Security and Privacy by Design Assurance (SPDA) processes for MPA products and services both cloud-based.
• Design and implement cloud security architectures in alignment with best practices to protect cloud environments.
• Perform regular security assessments, vulnerability scans, and penetration testing on cloud-based systems.
• Monitor cloud environments for potential security threats and vulnerabilities.
• Develop, implement, and enforce cloud security policies and procedures.
• Ensure Secure Cloud Operations by the Cloud Team
• Manage identity and access management (IAM) controls for cloud services.
• Provide recommendations for cloud security improvements and assist in implementing security controls to meet compliance requirements.
• Collaborate with development and operations teams to integrate security throughout the cloud development lifecycle (DevSecOps).
• Respond to and mitigate cloud security incidents, performing root cause analysis and applying lessons learned.
• Maintain up-to-date knowledge of cloud security trends, risks, and solutions.

THE IDEAL CANDIDATE FOR THIS ROLE WILL HAVE:

• Minimum of Six years of experience in cybersecurity-related roles, three year of which should be specialized Cloud Security.
• Degree in Electrical Eng/Computer Science/information Technology or equivalent Technology-related degree
• Cloud certifications such as AWS Certified Security Specialty, Azure Security Engineer, or Google Professional Cloud Security Engineer.
• Security certifications like CISSP, CISM, or CEH are highly desirable.
• Hands-on experience with security