Cyber Security Analyst at Vodafone Ghana

Role Purpose

• Responsible for the Cyber Prevent & Defence of the Vodafone network.
• It involves detecting, preventing, and providing timely responses to cyber-attacks or threats.
• Will ensure all detected vulnerabilities are remediated within policy timelines.
• It involves carrying out vulnerability assessment of the entire I.T Infrastructure and web application security testing of all internal web applications.
• The role will be responsible for the daily assessment of detected vulnerabilities and acknowledging all Cyber Security Action Notifications (CSANs), evaluate, rate, and perform risk assessments on assets, prioritizing critical and high vulnerabilities.
• To further provide security assurance, guidance, and support to high profile projects according to company defined policies and requirements, best practice, and local/international standards (PCI, SOX, ISO27001, GDPR, POPIA and Cyber Crime Bill of 2015) relevant to the technology security area.
• This position will also oversee penetration testing, hardening, patching and Vulnerability impact analysis, documentation, and troubleshooting. In addition, interacting with local and group teams (security, architecture, testing, application development) will be part of the remit of this role and the team.
• As a key member of the Vodafone Ghana Cyber Security team, the candidate should be comfortable with driving information security assurance ideas and communicating clearly with technical as well as non-technical audiences.

Key Accountabilities

• The Cyber Security Analyst will provide senior-level technical skills in managing and remediating vulnerabilities and patches across Network devices, storage, servers, Applications, Databases, endpoints, and other devices.
• This role will review vulnerabilities on regular basis and develop comprehensive remediation plan.
• This role will coordinate response with the business units and IT on all patch and vulnerability related topics.
• The Analyst will ensure prompt and timely remediation of all Critical and High vulnerabilities, as well as Medium vulnerabilities as required by policy and Cyber Security Baseline requirements.
• Act as the team Coordinator and ensure robust and timely response to all I.T Security incidents.
• Play lead role in S1 & S2 incident response engagement with Group Cyber Defence Incident Management team
• Effectively and transparently manage Risk within Vodafone Ghana

Core competencies, knowledge and experience

• Experience in Remediation of vulnerabilities and work/coordinate with other team/departments to assist with the remediation
• Ability to work well with a team in a fast paced, constantly changed environment and follow instructions from supervisors and senior colleagues.
• Security concepts related to DNS, routing, authentication, VPN, proxy services and DDOS mitigation technologies
• Experience in developing and maintenance of new procedural documentation including refinements to existing Patch and Vulnerability Management policies
• Ability to track vulnerability and ensure remediated vulnerabilities reflect in subsequent reports.
• Able to prepare security documentation and periodic reports.
• Knowledge in OS, Networks, Databases, Storages and patch and vulnerability management tools