Cybersecurity Officer

Role Overview

We're looking for a Cybersecurity Officer who treats security as a way of thinking rather than a checklist. You'll protect platforms that handle sensitive financial, insurance and identity data, and you'll help shape how security is built into our products from the first line of code. This isn't a role where you sit in a corner and wait for alerts. You'll work with engineers, compliance staff and leadership, and sometimes you'll be the person saying "not yet" when everyone else wants to ship. We want someone who can say that clearly and kindly, and explain why.

Responsibilities

• Design, implement and maintain the security architecture across our cloud infrastructure, applications and internal systems.
• Monitor for threats, investigate incidents and lead our response when something goes wrong.
• Run vulnerability assessments and penetration tests, then work with developers to actually fix what you find.
• Keep us aligned with the Nigeria Data Protection Act 2023, NAICOM guidelines, the CBN Risk-Based Cybersecurity Framework and relevant international standards.
• Manage identity and access controls, encryption and key management across our platforms.
• Review code and system designs for security weaknesses before they reach production.
• Build and test our incident response, business continuity and disaster recovery plans.
• Assess the security posture of third-party vendors and partners.
• Train staff so that security becomes everyone's habit, not just your job.
• Report regularly to management on risks, incidents and progress.

Requirements

• A bachelor's degree in Computer Science, Cybersecurity, Information Technology or a related field.
• At least one recognised certification such as CISSP, CISM, CEH, OSCP, CompTIA Security+ or ISO 27001 Lead Implementer. More is welcome, though we care more about what you can do.
• A minimum of 4 years in cybersecurity, ideally within fintech, insurance, banking or another regulated sector.
• Hands-on work with cloud security (AWS, Azure or GCP), SIEM tools, firewalls, IDS/IPS and endpoint protection.
• Practical experience with penetration testing and vulnerability management tools.
• Familiarity with secure API design, since much of what we build talks to other systems.
• A solid grasp of Nigerian data protection and financial regulations, plus frameworks like ISO 27001, NIST and PCI DSS.
• Understanding of KYC/AML systems and the particular risks around identity data is a strong advantage.
• Scripting ability in Python, Bash or similar.

Nice to Have

• Calm judgement under pressure. Incidents rarely happen at convenient times.
• The ability to explain a technical risk to a non-technical director without making them feel lost.
• Integrity. Maybe that goes without saying, but in this role it really can't.
• Curiosity. Threats change constantly, and the people who do well here are the ones who genuinely want to keep learning.

What We Offer

• Competitive salary, commensurate with experience
• Funding for professional certifications and training
• Real ownership over security at a company building national-scale infrastructure
• A team that takes the work seriously without taking itself too seriously