CISO (Fintech/Payments)

• Experience with information security governance, risk and compliance experience for a global organization
• Knowledge of technical infrastructure, networks, databases and systems in relation to IT Security and IT Risk
• A strategic business partner with the ability to articulate complex security concepts and risks in business terms to non-technical stakeholders, including the executive team and the board
• Possesses the capacity to effectively lead, manage, and inspire a team, enabling them to achieve both strategic and functional objectives
• Experience developing and publishing company-wide policies, standards, and other governance documents
• Ability to work very well cross-functionally and are able to think rigorously and make hard decisions and tradeoffs
• Ability to demonstrate initiative, operate autonomously, and assume complete responsibility for tasks
• In-depth knowledge of cybersecurity principles, industry standards, frameworks, and best practices
• Ability to manage key customer relationships, including with senior management across business units
• Proven experience scaling a security program in a high-growth, fast-paced technology or fintech environment
• Excellent written and verbal communication skills

• Develop and implement a scalable information security strategy aligning with the company's business objectives.
• Ensure compliance with relevant laws, regulations, and industry standards, including PCI DSS, GDPR, and local Nigerian data protection laws (e.g., NDPR).
• Ensure security architecture can adapt to and support the company's growth trajectory.
• Educate staff in the organization on the best IT practices and regulatory requirements.
• Work closely with other high-level executives to develop all-encompassing security strategies within the organization's context and goals.

• Own and manage the end-to-end security risk management framework.
• Identify, assess, and prioritize security risks across the organization, translating them into a clear risk posture for executive leadership and the board.
• Align security initiatives with the company's defined risk appetite.

• Recruit, mentor, and lead a high-performing, multi-disciplinary security team.
• Foster a culture of continuous learning and development to stay ahead of emerging threats and technologies

• Establish and mature a robust threat intelligence program to proactively identify, analyze, and mitigate emerging threats, particularly those targeting the African fintech ecosystem.
• Design, operationalize, and regularly test our incident response, business continuity, and disaster recovery plans to ensure organizational resilience.

• Oversee the design of secure systems and review application and infrastructure security architectures, ensuring scalability and adherence to security by design principles.
• Implement proactive security measures and controls to prevent security breaches and minimize potential impact, including managing and implementing various security technologies and tools (e.g., SIEM, IDS/IPS, vulnerability scanners).
• Lead the cloud security strategy, ensuring robust configuration, monitoring, and protection of our client's cloud infrastructure and services.

• Develop business cases that support information security program investments.
• Obtain management support for information security program investments highlighted in the endorsed business cases.
• Manage the security budget and forecast costs.

• Disseminate the organization's information security goals and objectives to business units and senior management.
• Represent the organization in security-related matters with external parties and stakeholders.
• Manage key customer relationships, including with senior management across business units.
• Influence cross-functional and cross-business units to accomplish strategic goals.

• Design and implement security awareness training programs for all staff.

• Develop and track relevant Key Performance Indicators (KPIs) such as incident response times, compliance audit results, and vulnerability management metrics.

• Work closely with the Engineering team and other technical departments to ensure security is integrated into all development and operational processes.

Black Pen Recruitment