At M-Pesa Africa, we are driven by a purpose that goes beyond profits — we are transforming lives through the power of technology and inclusive financial services. As the pioneer and global leader in mobile money services, M-Pesa continues to redefine how people send, save, borrow, and transact across borders. With our growing reach and commitment to financial inclusion, we have become a vital part of daily life for millions across the African continent.
In the face of increasing digital transformation and emerging cyber threats, securing the trust of our users remains at the core of our mission. As we scale our operations and systems across platforms, our investment in robust and forward-thinking cybersecurity solutions is more critical than ever.
We are therefore assembling a world-class Cyber Security team comprised of top talent across multiple disciplines. We are inviting skilled professionals passionate about cloud security, governance, compliance, risk management, security assurance, cyber defense, and preventive security to join our cyber security talent pipeline through this evergreen application.
The following key roles are currently open to applicants who are eager to make a meaningful impact by securing Africa’s most transformative mobile financial service.
Key Roles in Our Cyber Security Talent Pipeline
1. Specialist – Cloud Security
As a Cloud Security Specialist, you will take ownership of ensuring the confidentiality, integrity, and availability of our cloud-based systems and services. You will be responsible for designing, implementing, managing, and continuously improving security controls and architectures across our multi-cloud environments including AWS, Azure, and Huawei Cloud.
Key Responsibilities:
- Lead the Security and Privacy by Design Assurance (SPDA) for all cloud-related services.
- Architect and implement secure multi-cloud infrastructures with an emphasis on compliance.
- Conduct vulnerability assessments and penetration testing on cloud environments.
- Monitor threats in real-time and lead incident response in cloud-specific scenarios.
- Manage identity and access controls including IAM policies and MFA across platforms.
- Collaborate closely with DevOps teams to incorporate DevSecOps practices.
- Draft and maintain cloud security policies, standards, and guidelines.
- Keep pace with evolving cloud security threats, trends, and mitigation strategies.
2. Specialist – Cyber Security Governance, Risk & Compliance (GRC)
In this position, you will play a strategic role in embedding governance, risk, and compliance processes throughout the organization’s cybersecurity framework. You will work collaboratively to align M-Pesa Africa’s systems and procedures with local and international regulatory requirements, industry best practices, and Vodafone’s internal cybersecurity frameworks.
Key Responsibilities:
- Ensure consistent compliance with Vodafone Cyber Security Baselines and applicable laws.
- Review and update internal cyber security policies and communicate them organization-wide.
- Conduct cyber security risk assessments, track remediation, and manage related documentation.
- Coordinate internal and external audits and ensure effective resolution of audit findings.
- Maintain records and dashboards to report GRC progress to senior stakeholders.
3. Specialist – Cyber Security Architecture & Assurance
The Cyber Security Architecture & Assurance Specialist will be responsible for designing secure systems and conducting detailed assessments to identify vulnerabilities before systems go live. This role ensures all products, infrastructure, and platforms meet security standards through rigorous testing and assurance methodologies.
Key Responsibilities:
- Lead Security and Privacy by Design Assurance (SPDA) across project lifecycles.
- Conduct thorough penetration testing on applications, APIs, networks, and infrastructure.
- Perform security assessments and threat modeling for both new and existing solutions.
- Simulate attack scenarios to assess systems’ resilience and identify improvement areas.
- Document and report findings with actionable recommendations to enhance security postures.
4. Specialist – Cyber Security Defense
As a Cyber Security Defense Specialist, you will serve on the frontlines of cyber resilience. You will monitor for threats, coordinate incident response efforts, and work with internal teams and external partners to ensure fast and effective mitigation of cyber events.
Key Responsibilities:
- Optimize and manage security monitoring tools and controls.
- Lead cyber incident detection, management, and response efforts across the organization.
- Support technology and cyber audits and ensure audit recommendations are promptly addressed.
- Administer forensic tools, endpoint detection and response (EDR) platforms, and logging systems.
- Liaise with Vodacom/Vodafone Cyber Defense teams to align on global threat intelligence and response strategies.
- Proactively assess systems for weaknesses and support continuous improvement initiatives.
5. Specialist – Cyber Security Prevent
The role of a Cyber Security Prevent Specialist is to proactively identify and mitigate vulnerabilities before they become exploitable risks. You will lead implementation and optimization of technical security controls and ensure operational security practices are consistently followed across M-Pesa Africa’s infrastructure.
Key Responsibilities:
- Administer Privileged Access Management (PAM) systems and enforce least-privilege principles.
- Monitor and maintain key security infrastructure including firewalls, WAFs, IDS/IPS, antivirus, and logging systems.
- Troubleshoot security-related operational issues and ensure effective remediation.
- Drive the implementation of M-Pesa’s cyber security policies and procedures.
- Support incident response activities with technical expertise and ensure closure of audit findings.
- Promote a culture of proactive cyber hygiene and continuous improvement.
Who We’re Looking For
M-Pesa Africa is seeking cyber security professionals who are:
- Proficient in their areas of expertise with strong technical hands-on experience.
- Motivated, collaborative, and ready to work in a fast-paced, high-impact environment.
- Familiar with both international standards and African cybersecurity regulatory landscapes.
- Hold relevant certifications in cloud security, governance, penetration testing, or security operations, such as CISSP, CISM, CEH, CISA, Security+, AWS Security Specialty, Azure Security Engineer, and others.
Candidates are encouraged to provide full details of their certifications and practical experience in their applications.
Our Recruitment Process
M-Pesa Africa is conducting an evergreen recruitment process for our Cyber Security talent pipeline. This means that applications are continuously accepted and reviewed.
- Shortlisted candidates will be contacted for interviews depending on current or future openings.
- Even if not immediately selected, your profile will remain under consideration for upcoming roles.
- We welcome applications from professionals looking for a meaningful, long-term career in one of Africa’s most dynamic tech environments.
About M-Pesa Africa
M-Pesa Africa is a trailblazer in mobile financial services and a cornerstone of the region’s digital economy. Launched in 2007 as an innovative mobile money platform, M-Pesa has grown into the most successful mobile payment system in the world. With over 42 million customers and over 600,000 active agents, we serve as a key enabler of economic participation in multiple African markets.
Our parent company, Safaricom PLC, is the leading telecommunications provider in East Africa. Founded in 1997 and listed on the Nairobi Securities Exchange (NSE), Safaricom plays a pivotal role in the economic ecosystem of the region. With annual revenues nearing KES 298 billion and a total estimated economic value of KES 362 billion, our operations have a broad impact supporting over a million jobs both directly and indirectly.
Our first CEO, Michael Joseph, under the guidance of Vodafone Group PLC, championed innovation-driven growth that led to the birth of M-Pesa in 2007. Today, we continue that legacy by investing in transformative technologies and fostering secure digital infrastructure to serve our communities better.
Our mission is not just to connect people — it’s to connect lives, empower businesses, and fuel economies. Joining the M-Pesa Cyber Security team means becoming part of a greater movement, one that is shaping the future of Africa’s digital financial landscape.
Job Details
- Job Category: Cyber Security
- Job Type: Full-time
- Job Location: PO BOX 46350, Nairobi, Kenya
- Posting Date: 22 July 2025
- Application Deadline: 30 September 2025
- Job ID: 764
- Minimum Education Requirement: Bachelor’s Degree
