Role overview
What you'll be stepping into
MTN Uganda Limited is an equal opportunity employer seeking to recruit a competent and experienced individual to fill the position of Senior Specialist – Cyber Crime.
Main Purpose of the Role
The Senior Specialist – Cyber Crime will be responsible for conducting and reporting on internal investigations through the analysis and interpretation of physical and digital evidence.
The role will involve conducting investigations in accordance with professional standards, including those established by the Association of Certified Fraud Examiners (ACFE), and synthesizing investigation findings to identify loopholes, weaknesses, and vulnerabilities that may have been exploited. The successful candidate will make recommendations for improvements and support the implementation of measures designed to safeguard the business.
Key Performance Areas
Digital Evidence Collection & Preservation: Ensure the proper collection, handling, storage, and preservation of forensic data to maintain its integrity.
Forensic Analysis & Investigation: Use specialized forensic tools and techniques to uncover, interpret, and analyze digital evidence.
Incident Response & Threat Detection: Support investigations and respond effectively to security breaches and other cyber-related incidents.
Expert Testimony & Reporting: Prepare comprehensive forensic reports and provide expert testimony during legal proceedings where required.
Collaboration & Communication: Work closely with law enforcement agencies, legal teams, and other relevant professionals to support investigations.
Continuous Learning & Skills Development: Stay up to date with forensic methodologies, technologies, tools, regulatory requirements, and industry trends.
Description of Tasks
1. Data Collection and Analysis
Gather financial records, digital information, transaction histories, and other relevant data.
Plan and coordinate the effective use of proactive data analytics, including Continuous Controls Reviews.
Use data analytics tools, including SQL and ACL, to develop scripts, identify patterns, and detect anomalies.
Cross-reference data from multiple sources to verify the accuracy and reliability of information.
Conduct static and mobile surveillance where required, using covert equipment where appropriate and in accordance with applicable legislation and codes of practice.
Assess fraud trends and identify best practices relating to fraud prevention.
2. Fraud Detection
Analyze business data to detect irregularities and potential fraudulent activity.
Investigate suspicious transactions and activities of a financial, operational, digital, or cyber nature, and trace the flow of funds across FINCO and TELCO environments.
Gather, document, and securely retain evidence relating to investigations in accordance with applicable legislation and codes of practice.
Utilize forensic software to identify hidden assets and undisclosed or off-the-books accounts.
Continuously assess MTNU’s cloud architecture, application designs, Open API framework, and wider ecosystem to identify potential exploitable vulnerabilities.
3. Interviewing and Information Gathering
Conduct interviews with employees, management, and third parties as part of investigations.
Document statements and testimonies and gather supporting evidence.
Analyze interview information to identify inconsistencies, establish facts, or corroborate investigation findings.
4. Report Preparation
Prepare detailed investigation reports outlining findings, methodologies, evidence, and conclusions.
Develop visual aids, including charts and graphs, to illustrate key findings and trends.
Prepare executive summaries for senior management and other relevant stakeholders.
5. Legal Collaboration
Work closely with legal teams to prepare evidence and documentation for court proceedings.
Provide expert witness testimony during legal proceedings where required.
Liaise with law enforcement agencies to support effective legal and court processes and ensure that exhibits presented in court are returned to MTN Uganda.
Ensure all investigation documentation and evidence meet applicable legal standards and requirements.
6. Risk Assessment and Mitigation
Conduct proactive risk assessments covering financial, operational, digital, and cyber risks to identify potential fraud vulnerabilities within FINTECH and TELCO environments.
Plan and coordinate the use of proactive data analytics and Continuous Controls Reviews.
Support assurance providers and internal audit teams by providing input on fraud risks to inform audit planning and procedures.
Recommend and implement appropriate internal controls to prevent future fraud.
Monitor and assess the effectiveness of fraud prevention and mitigation measures.
7. Internal Control Environment Enhancement
Analyze and track fraud incidents and control weaknesses to identify trends, lessons learned, and opportunities to strengthen the control environment.
Conduct root-cause analysis of fraud incidents and facilitate agreed actions to ensure the improvement or resolution of identified weaknesses.
Make recommendations based on insights obtained from fraud incidents and related investigations to improve processes and internal controls.
Track agreed management actions aimed at addressing identified gaps and strengthening the control environment.
8. Continuous Learning and Adaptation
Coordinate and conduct fraud awareness and sensitization activities for MTNU staff across both Telco and Fintech operations.
Stay updated on the latest forensic investigation techniques, technologies, and industry developments.
Participate in professional development courses, training programs, and relevant industry conferences.
Adapt to new regulations, legislation, standards, and compliance requirements.
9. Ethical Standards and Confidentiality
Maintain the highest ethical standards when conducting financial, operational, digital, and cyber investigations.
Protect sensitive information and maintain strict confidentiality throughout all investigations.
Promptly report any conflicts of interest, ethical concerns, or potential breaches of professional standards.
10. Administrative Duties
Manage administrative responsibilities for the section, including training, team activities, and related coordination duties.
Track and manage the performance of the forensics team by maintaining the fraud incident tracker, monitoring performance against section KPIs, and reporting on allocated projects and assignments.
Education and Professional Qualifications
A Bachelor’s Degree in a relevant field, such as Accounting, Statistics, Telecommunications Engineering, Information Technology, or a related discipline.
Relevant professional certifications in Forensics, Fraud Examination, or Information Security, such as:
CFE – Certified Fraud Examiner
CHFI – Computer Hacking Forensic Investigator
GCFA – GIAC Certified Forensic Analyst
CISM – Certified Information Security Manager
CISA – Certified Information Systems Auditor
CEH – Certified Ethical Hacker
CISSP – Certified Information Systems Security Professional
Demonstrated experience conducting professional fraud investigations across areas such as Finance, Operations, Technology/Digital, Cybercrime, Telecom Fraud, and Fintech Fraud.
Work Experience
Minimum of 5 years of experience in fraud detection, prevention, and investigations.
At least 3 years of experience using data analytics techniques and tools, including Big Data Analytics.
Technical working experience within Fintech and Telecommunications environments.
Experience in penetration testing, financial, operational, cybercrime, and general occupational fraud investigations.
Experience working within high-transaction digital environments.
Experience using digital forensics software such as EnCase and FTK.
Experience using Computer-Assisted Audit Techniques (CAATs), preferably ACL.
Strategic understanding of the Telecommunications industry, including Fintech.
Strong analytical skills.
Excellent interviewing, interrogation, and active listening skills.
Strong data mining, data extraction, and analytics capabilities.
Demonstrated experience collecting and analyzing complex data, evaluating information and systems, and drawing logical and well-supported conclusions.
Attributes and Skills
Knowledge of industry policies, procedures, regulations, and applicable laws.
Experience conducting audits in financial management and other areas relevant to the industry and business.
Global working and collaboration skills.
Strong data analysis capabilities.
Effective people management skills.
Business risk management skills.
Internal control assessment capabilities.
Strong strategic report-writing skills.
Knowledge of risk-based methodologies.
Knowledge and understanding of the Telecommunications industry.
Strong conflict management skills.
Behavioural Attributes
Strong problem-solving abilities.
Improvement-driven mindset.
Effective relationship management.
Operationally astute.
Strong research capabilities.
Accountable and results-oriented.
Adaptable to changing environments.
Agile and responsive.
How to apply