Information Security Governance Engineer

We are recruiting to fill the position below:

Job Title: Information Security Governance Engineer

Location: Lagos
Employment Type: Full Time

Description
Governance & Policy:

• Ensure alignment with recognized frameworks and standards (e.g. ISO/IEC 27001, PCIDSS, CBN Cybersecurity Framework).
• Develop, review, and maintain information security policies, standards, procedures, and guidelines.
• Define security governance structures, roles, and decision?making processes.

Risk Management:

• Support enterprise information security risk assessments and risk treatment plans.
• Maintain the security risk register and track remediation activities.
• Advise business units on risk acceptance, mitigation, transfer, or avoidance.

Compliance & Regulatory Assurance:

• Track and remediate audit findings and compliance gaps.
• Coordinate internal and external audits, assessments, and certifications.
• Ensure compliance with applicable laws, regulations, and contractual requirements (e.g. NDPR, CBN Cybersecurity Framework, PCI DSS, ISO 27001).

Metrics, Reporting & Assurance:

• Define and maintain security governance KPIs, KRIs, and dashboards.
• Support board?level and executive reporting on information security matters.
• Prepare security posture reports for management, risk committees, and auditors.

Third?Party & Vendor Security Governance:

• Review supplier security controls and contractual security clauses.
• Support third?party security risk assessments and due diligence processes.
• Monitor ongoing compliance of critical vendors.

Awareness & Continuous Improvement:

• Drive continuous improvement of governance and control maturity.
• Support security awareness and policy training initiatives.
• Monitor regulatory changes and emerging governance trends.

Requirements

• Experience in financial services, fintech, or telecommunications is an added advantage.
• Experience working with audits, compliance reviews, and regulatory requirements.
• Familiarity with security tools and platforms supporting governance and compliance activities.
• 5–9 years’ experience in information security governance, risk, and compliance (GRC).
• Strong understanding of risk management methodologies and control frameworks.
• Hands-on experience implementing or managing security frameworks (e.g., ISO 27001, CBN Cybersecurity Framework, NDPR, PCI DSS).
• Bachelor’s Degree in Information Security, Computer Science, Information Technology, or a related field.