Never pay for any notarisation, certificate or assessment as part of any recruitment process. When in doubt, contact us
Safaricom is the leading provider of converged communication solutions in Kenya. In addition to providing a broad range of first-class products and services for Telephony, Broadband Internet and Financial services, Safaricom seeks to uplift the welfare of Kenyans through value-added services and support for community projects.
Job Description
- Reporting to the Senior Manager, Cyber Secure by Design , the Senior Officer – Cyber Secure by Design will support Safaricom’s security assurance program by embedding security into all products, platforms, and services before go-live. The role will also provide timely security assurance reports and advice to the business when required, and within very tight timelines. The Senior Officer will also support other Cyber Secure by Design practices, including Red Teaming, bug bounty, and DevSecOps.
Responsibilities
Security Assurance for Projects
- Conduct periodic security reviews, vulnerability assessments & penetration tests across all of Safaricom’s systems/infrastructure
- Ensure all new and existing systems/products/services comply with Company's security policies & standards and other industry best practices e.g. ISO27001, CIS and Kenya Data Protection Act
- Provide timely and quality security assurance reports and advice to the business when required even with very tight deadlines
- Do regular follow ups with system custodians/owners to ensure any security risks identified are addressed within the agreed timelines
- Define Cyber Security metrics and report periodically on security compliance across all networks/systems
- Bug Bounty Program Management
- Drive the remediation of the identified/reported bug bounty findings and integrate the learnings to different areas of application.
Red Teaming & Offensive Security
- Carry out red team exercises, providing input to scope, reviewing findings, and tracking remediation progress. Deliver insights on risks, while fostering purple team collaboration and continuous upskilling in offensive security.
- DevSecOps Strategy & Tooling Governance
- Ensure CI/CD pipelines integrate required security tools and practices. Carry out developer security training to embed secure coding practices.
Knowledge share
- Conduct knowledge share sessions on new areas of technology, bug bounty learning, read teaming findings within the squads and larger organization.
Research & Development
- Conduct research and development on emerging areas in security.
- Present findings for sensitization and knowledge transfer to other team members and staff.
Health & Safety
- Uphold the company code of conduct, policies and procedures, ensuring integrity and accountability in every aspect of your work
- All employees have a responsibility to adhere to safety, health, and wellbeing policies.
Qualifications
- Degree in Information Security/Computer Forensics/Computer Science/Information Technology or other relevant Technical Degree
- Information security certifications e.g. CEH/CISSP/CISM/CISA/GIAC/CPTP/OSCP
- Networking certifications: CCNA/CCNP/CCSP are also preferred
- Certifications in Microsoft Windows and Linux/Unix Operating Systems
- Demonstrate competency in the use and administration of ethical hacking tools e.g. KALI Linux, Metasploit, Nexpose, Nessus, Nmap, Burp Suite etc.
- Minimum of 3 years’ working experience in Information Systems Security – e.g. Ethical Hacking,
- Penetration Testing, Vulnerability Assessments, ICT Audits, Pre-and-Post Implementation System Reviews etc.
- Minimum of 3 years’ working experience in Networking and Operating Systems e.g. Cisco, Huawei, Windows (All), Unix, Linux etc.
- Minimum of 3 years’ working experience in Web and Mobile applications technologies e.g. Java, Python, PHP, Javascript, CSS, Apache, Nginx, IIS etc.
- Working knowledge of databases e.g. Oracle, MSSQL, MongoDB, Postgres etc. will be an added advantage
- Working knowledge of Virtualization & Microservices technologies e.g. VMware, Open shift, Kubernetes, Docker etc. will be an added advantage
- Working knowledge and experience in DevSecOps technologies and practices i.e. Jenkins, Jira, GitHub, Gitlab etc. will be an added advantage
- Working knowledge of Mobile and GSM technologies e.g. Android, IOS, 2G, 3G, LTE, USSD etc. will be an added advantage
- Experience operating within squads/tribes, driving security automation adoption across engineering, operations, cloud, and digital product teams.
- Excellent communication skills and a good team player
- Excellent time management skills i.e. getting things done in a timely manner
- Excellent report writing and presentation skills
- Very analytical and keen on details
- Customer obsessed
go to method of application »
Job Description
- Reporting to the HOD - Data AI Systems & Architecture, the Solution & Business Architecture Area Chapter Lead is responsible for providing strategic leadership and governance for the Solution Architecture and Business Analysis disciplines across the enterprise. The role develops and grows architecture and business analysis capabilities, establishes standards, methodologies, and best practices, and ensures the consistent delivery of high-quality business and solution designs that align with Enterprise Architecture principles, business strategy, and technology roadmaps.
- Reporting to the Head of Data, AI Systems & Architecture, the Chapter Area Lead provides leadership to the Engineering Managers responsible for Consumer Business, Enterprise & Public Sector, Financial Services, Technology, and Business Analysis. The role ensures consistent architecture practices across all business units while driving capability maturity, innovation, talent development, architecture governance, and continuous improvement.
- The Area Chapter Lead acts as the custodian of the Safaricom Business Architecture, System and Application roadmaps and the organization's solution architecture and business analysis practices, enabling delivery teams to build scalable, secure, reusable, and business-aligned digital capabilities.
Responsibilities
Health and Safety
- Uphold the company code of conduct, policies and procedures, ensuring integrity and accountability in every aspect of your work.
- All employees have a responsibility to adhere to safety, health, and wellbeing policies, guidelines and procedures in all actions and decisions
Practice Leadership
Define and own the Solution Architecture and Business Analysis strategy, operating model, and capability roadmap.
- Establish a unified Architecture and Business Analysis practice across the organization.
- Drive continuous improvement and maturity of both disciplines.
- Foster a culture of engineering excellence, innovation, collaboration, and customer-centric design.
- Promote reuse of architecture patterns, business capabilities, APIs, and design assets.
People Leadership
Lead and develop the Engineering Managers responsible for:
- Consumer Business Solution Architecture
- Enterprise & Public Sector Solution Architecture
- Financial Services Solution Architecture
- Technology Solution Architecture
- Business Analysis
Responsibilities include:
- Coaching and mentoring Engineering Managers.
- Performance management.
- Succession planning.
- Capability development.
- Workforce planning.
- Recruitment of senior architecture talent.
- Career progression.
- Learning and certification programmes.
Architecture & Business Analysis Governance
Own governance across all architecture and business analysis activities by:
- Establishing architecture principles and standards.
- Defining business analysis methodologies.
- Governing architecture review boards.
- Governing business requirements quality.
- Defining documentation standards.
- Ensuring compliance with Enterprise Architecture standards.
- Ensuring alignment with security, data, AI, integration, and cloud strategies.
- Managing architecture and business analysis exceptions.
Business & Technology Roadmaps
Provide oversight of Business Unit technology evolution by ensuring:
- Application roadmaps remain current.
- Technology modernization roadmaps are maintained.
- Legacy technology retirement plans exist.
- Capability roadmaps align to enterprise strategy.
- Business capability maps remain current.
- Technology investment decisions align with enterprise priorities.
Capability Development
Develop and continuously improve:
- Architecture frameworks
- Business capability models
- Reference architectures
- Solution patterns
- Business analysis templates
- Design standards
- Reusable architecture assets
- AI-assisted architecture practices
- AI-assisted business analysis practices
- Drive adoption across all delivery teams.
Quality Assurance
Provide quality oversight of:
- Business Requirements Documents
- Solution Design Documents
- Integration Designs
- Non-functional Requirements
- Architecture Decision Records
- Solution Reviews
- Architecture compliance assessments
- Ensure consistent quality before governance approval.
Enterprise Collaboration
Partner closely with:
- Enterprise Architecture
- Product Management
- Digital Engineering
- Data & AI Engineering
- Cyber Security
- Infrastructure
- Operations
- Delivery Management
- Vendor Partners to ensure end-to-end solution alignment.
Innovation & Continuous Improvement
Champion:
- AI-assisted architecture
- AI-assisted requirements engineering
- Architecture automation
- Architecture repositories
- Digital twins
- Architecture knowledge management
- Reusable solution accelerators
- Cloud, API, AI-first design
- Event-driven architecture
- Cloud-native architecture
- Business capability modelling
- Continuous architecture
Qualifications
- Bachelor's degree in Computer Science, Information Technology, Engineering, Business Information Systems, or a related discipline.
- Master's degree in Technology, Business Administration (MBA), Enterprise Architecture, or a related field is highly desirable.
- 8+ years' experience in Solution Architecture, Business Architecture, Enterprise Architecture, or Business Analysis.
- 5+ years leading architecture or business analysis practices, chapters, or centres of excellence.
- Proven experience leading senior technical leaders and multidisciplinary architecture teams.
- Demonstrated success delivering enterprise-wide digital transformation programmes.
- Strong experience in Enterprise Architecture governance, application portfolio management, business capability modelling, cloud-native architectures, API-led integration, and technology modernization.
- Experience establishing architecture and business analysis standards, governance frameworks, and capability development programmes within large, complex enterprise environments.
Professional Certifications
- TOGAF® Certified
- TM Forum Open Digital Architecture (ODA) certification
- Certified Business Analysis Professional (CBAP) or equivalent
- Cloud certifications (AWS, Microsoft Azure, or Google Cloud)
- SAFe Agilist, Scrum, or other Agile certification
- ITIL Foundation or equivalent
Functional & Technical Skills:
Leadership
- Strategic Leadership
- Practice Leadership
- People Development
- Coaching & Mentoring
- Stakeholder Management
- Organizational Design
-
Change Leadership
Business
- Business Architecture
- Business Capability Modelling
- Business Process Modelling
- Customer Journey Mapping
- Product Operating Model
- Digital Transformation
- Portfolio Management
Architecture
- Enterprise Architecture
- Solution Architecture
- Application Architecture
- Integration Architecture
- Cloud Architecture
- Security Architecture
- Data Architecture
- AI Architecture
- API Architecture
- Event-Driven Architecture
- Microservices
- Domain-Driven Design
Technical
- Cloud Platforms (AWS, Azure, GCP)
- Kubernetes
- API Management
- DevSecOps
- CI/CD
- Architecture Modelling (ArchiMate, UML, BPMN, C4)
- Integration Platforms
- AI Engineering
- Data Platforms
- Enterprise Integration Patterns
Governance
- TOGAF
- TM Forum ODA
- Architecture Review Boards
- Technology Standards
- Design Governance
- Business Analysis Frameworks
- Risk Management
Behaviors & Competencies:
- Trusted and respected as a thought leader and change agent who can influence and persuade business and IT leaders
- Organizationally savvy, and understanding of the political climate of the enterprise and how to navigate obstacles and politics
- Strong problem-solving skills and attention to detail.
- Ability to work independently and manage multiple priorities in a fast-paced environment.
- Excellent analytical, technical, and problem-solving skills, with high-levels of creativity and a practical approach that is principle-driven
- Ability to balance the long-term (“big picture”) and short-term implications of individual decisions and effective at driving short term actions that are consistent with long-term goals
- Excellent written and verbal communications skills, able to distil complex technical concepts into simple terms, with strong persuasion skills to gain support for and establish principles, standards, and change
- Excellent relationship building, teamwork, and collaboration skills that enables the provision of effective support and guidance across programs
- Designs for scalability and reuse; anticipates future data needs; aligns architecture with organizational goals.
- Vendor and technology neutral –driven primarily by long-term business outcomes rather than personal preferences
- Regularly brings forward improvements; pilots emerging tools and evaluates fit.