Safaricom Ethiopia Vacancy 2026: GRC Specialist (Internal/External)
Safaricom Ethiopia
Addis Ababa, Addis Ababa, ET
Role description
Safaricom Telecommunications Ethiopia PLC is inviting qualified candidates to apply for the position of GRC Specialist (Internal/External) in Addis Ababa, Ethiopia. The role focuses on governance, risk, and compliance (GRC), cybersecurity, data protection, regulatory compliance, and security risk management.
Ethiopia Job Market
The successful candidate will support the development and implementation of cybersecurity and data protection policies, conduct risk assessments and compliance audits, and advise stakeholders on security controls and regulatory requirements.
Job Overview
Job Title: GRC Specialist (Internal/External) Company: Safaricom Telecommunications Ethiopia PLC Job Category: Information Technology Job Location: Addis Ababa, Ethiopia Employment Type: Full-time Required Education: Bachelor's Degree Experience: Minimum experience requirements are stated in the qualifications section below. Application Deadline: October 28, 2026, at 5:30 PM
About Safaricom Ethiopia
Safaricom Ethiopia is a technology company providing digital connectivity and financial services. The company aims to expand digital access across Ethiopia through telecommunications infrastructure, innovation, and inclusive financial services.
Ethiopia Job Market
Key Responsibilities
The GRC Specialist will be responsible for the following duties:
Data Protection and Privacy
Develop and maintain a data protection strategy aligned with regulatory requirements and organizational objectives. Implement and maintain data protection policies, procedures, and controls. Monitor data processing activities and coordinate data protection impact assessments where necessary. Conduct risk assessments and audits to identify and mitigate data protection risks. Develop and deliver employee training on data protection and regulatory compliance. Advise internal stakeholders on data protection requirements and best practices.
Cybersecurity Governance, Risk, and Compliance
Develop and implement cybersecurity policies, standards, and procedures based on industry best practices and applicable regulations. Conduct cybersecurity risk assessments and gap analyses to identify control weaknesses. Develop mitigation strategies to address identified security risks. Monitor compliance with cybersecurity policies and standards through regular audits and assessments. Collaborate with internal stakeholders to align security controls with business objectives and regulatory requirements. Recommend security controls, technologies, and practices to reduce cybersecurity risks. Provide expert guidance on cybersecurity and data protection matters. Monitor emerging cyber threats, vulnerabilities, and regulatory changes to help address security risks proactively.
Qualifications and Requirements
Educational Qualification
Bachelor's degree in Information Technology, Computer Science, or a related field.
Professional Experience
A minimum of two years of cybersecurity experience and three years focused on governance, risk, and compliance (GRC).
Technical Knowledge and Skills
Applicants should have:
In-depth knowledge of the General Data Protection Regulation (GDPR). Strong knowledge of cybersecurity principles, standards, and best practices. Familiarity with the NIST Cybersecurity Framework and ISO 27001. Experience with data protection technologies. Ability to conduct cybersecurity and data protection risk assessments. Knowledge of regulatory compliance, security controls, and risk mitigation practices.
Preferred Certifications
Relevant professional certifications are preferred, including:
Browse Careers
Certified Information Privacy Professional (CIPP) Certified Information Privacy Manager (CIPM) Certified Information Privacy Technologist (CIPT)
Ethiopia Job Market
The successful candidate will support the development and implementation of cybersecurity and data protection policies, conduct risk assessments and compliance audits, and advise stakeholders on security controls and regulatory requirements.
Job Overview
Job Title: GRC Specialist (Internal/External) Company: Safaricom Telecommunications Ethiopia PLC Job Category: Information Technology Job Location: Addis Ababa, Ethiopia Employment Type: Full-time Required Education: Bachelor's Degree Experience: Minimum experience requirements are stated in the qualifications section below. Application Deadline: October 28, 2026, at 5:30 PM
About Safaricom Ethiopia
Safaricom Ethiopia is a technology company providing digital connectivity and financial services. The company aims to expand digital access across Ethiopia through telecommunications infrastructure, innovation, and inclusive financial services.
Ethiopia Job Market
Key Responsibilities
The GRC Specialist will be responsible for the following duties:
Data Protection and Privacy
Develop and maintain a data protection strategy aligned with regulatory requirements and organizational objectives. Implement and maintain data protection policies, procedures, and controls. Monitor data processing activities and coordinate data protection impact assessments where necessary. Conduct risk assessments and audits to identify and mitigate data protection risks. Develop and deliver employee training on data protection and regulatory compliance. Advise internal stakeholders on data protection requirements and best practices.
Cybersecurity Governance, Risk, and Compliance
Develop and implement cybersecurity policies, standards, and procedures based on industry best practices and applicable regulations. Conduct cybersecurity risk assessments and gap analyses to identify control weaknesses. Develop mitigation strategies to address identified security risks. Monitor compliance with cybersecurity policies and standards through regular audits and assessments. Collaborate with internal stakeholders to align security controls with business objectives and regulatory requirements. Recommend security controls, technologies, and practices to reduce cybersecurity risks. Provide expert guidance on cybersecurity and data protection matters. Monitor emerging cyber threats, vulnerabilities, and regulatory changes to help address security risks proactively.
Qualifications and Requirements
Educational Qualification
Bachelor's degree in Information Technology, Computer Science, or a related field.
Professional Experience
A minimum of two years of cybersecurity experience and three years focused on governance, risk, and compliance (GRC).
Technical Knowledge and Skills
Applicants should have:
In-depth knowledge of the General Data Protection Regulation (GDPR). Strong knowledge of cybersecurity principles, standards, and best practices. Familiarity with the NIST Cybersecurity Framework and ISO 27001. Experience with data protection technologies. Ability to conduct cybersecurity and data protection risk assessments. Knowledge of regulatory compliance, security controls, and risk mitigation practices.
Preferred Certifications
Relevant professional certifications are preferred, including:
Browse Careers
Certified Information Privacy Professional (CIPP) Certified Information Privacy Manager (CIPM) Certified Information Privacy Technologist (CIPT)