Senior Specialist – Mobile Application Management

The Senior Specialist – Mobile Application Management (MAM) is responsible for designing, implementing, and operating the organisation’s mobile device and application management capability across both corporate-owned and BYOD devices. The role secures corporate data on mobile endpoints through identity-driven access, device compliance, and application-level protection, while ensuring a smooth enrolment and activation experience for end users. Working within the Cyber Technology Assurance function, the Senior Specialist enforces data-loss-prevention controls, governs risk-based exceptions, and continuously monitors device posture, coordinating with SIEM/SOAR and UEM teams to detect, respond to, and contain threats to mobile endpoints.

• Define and document enrolment methods for both corporate-owned and BYOD devices.
• Develop onboarding guides, privacy notices, and end-user support playbooks to ensure smooth device activation.
• Configure AAD/Identity Provider integrations, Conditional Access policies, MFA settings, device compliance policies, and dynamic group rules.
• Apply policy-based targeting depending on device ownership, platform type, user persona, or risk category.
• Implement compliance-driven access controls, including device posture checks and trusted-network requirements.
• Publish required corporate applications through the management platform and ensure proper deployment.
• Configure device profiles including Wi‑Fi, VPN, certificates, SSO, email profiles, and per‑app VPN settings.
• Enforce app‑level protection such as PIN or biometric authentication and encryption of data at rest.
• Restrict copy, paste, and save‑as actions to prevent data leakage into personal storage, and block screenshots where supported.
• Ensure separation of personal and corporate data across apps and storage environments.
• Apply “Managed Open‑In/Share” restrictions and enforce appropriate per‑app VPN routing.
• Enforce jailbreak/root detection, session timeout rules, and sign‑in frequency controls to maintain device integrity.

• Apply scoped, risk‑based exceptions for specific personas, device types, or applications when justified.
• Track exception drift, notify owners before expiration, and manage recertification or timely removal.
• Continuously monitor suspicious activity, risky behaviours, or noncompliant devices.
• Coordinate with SIEM/SOAR and UEM teams for alerting, automated responses, and containment actions.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline (or equivalent practical experience).
• Minimum 5 years of experience in endpoint, mobile device, and application management, including at least 2 years in a senior or lead capacity.