M-PESA Africa _ Senior Specialist Cloud Security

The Cloud Cybersecurity Principal Specialist is accountable for ensuring the security, integrity and confidentiality of Cloud-based systems and services. This role focuses on designing, implementing, managing and maintaining robust cybersecurity solutions and processes that protect cloud infrastructures, applications, and data across platforms such as AWS, Azure and Huawei Cloud.

Responsibilities

• Manage the Security and Privacy by Design Assurance (SPDA) processes for MPA products and services both cloud-based;
• Design and implement cloud security architectures in alignment with best practices to protect cloud environments;
• Perform regular security assessments, vulnerability scans, and penetration testing on cloud-based systems;
• Monitor cloud environments for potential security threats and vulnerabilities;
• Develop, implement, and enforce cloud security policies and procedures;
• Ensure Secure Cloud Operations by the Cloud Team;
• Manage identity and access management (IAM) controls for cloud services;
• Provide recommendations for cloud security improvements and assist in implementing security controls to meet compliance requirements;
• Collaborate with development and operations teams to integrate security throughout the cloud development lifecycle (DevSecOps);
• Respond to and mitigate cloud security incidents, performing root cause analysis and applying lessons learned;
• Maintain up-to-date knowledge of cloud security trends, risks, and solutions.

Qualifications

Skills and Competencies:

• Strong knowledge of cloud platforms (AWS, Azure Cloud) and cloud-native security features.
• Experience with security tools like firewalls, intrusion detection/prevention systems (IDS/IPS), encryption, and security information event management (SIEM).
• Expertise in IAM, multi-factor authentication (MFA), and secure cloud infrastructure design.
• Experience with automation and scripting tools (e.g., Terraform, CloudFormation, Python) to enhance cloud security.
• Proficient in cloud security best practices, including monitoring, logging, and incident response.

Technical / professional qualifications:

• Minimum of six (6) years of experience in cybersecurity-related roles, three years (3) of which should be specialized Cloud Security.
• Degree in Electrical Eng/Computer Science/information Technology or equivalent Technology-related degree.
• Cloud certifications such as AWS Certified Security Specialty, Azure Security Engineer, or Google Professional Cloud Security Engineer.
• Security certifications like CISSP, CISM, or CEH are highly desirable.
• Hands-on experience with security tools and platforms in cloud environments.