Information Security Governance Engineer

About the role

The Information Security Governance Engineer will lead the development, maintenance and continuous improvement of our security governance framework. You will ensure that policies, standards and procedures align with international standards and regulatory requirements while supporting business units in managing risk.

Key responsibilities

• Develop, review and maintain information security policies, standards, procedures and guidelines.
• Define governance structures, roles and decision‑making processes.
• Support enterprise risk assessments, maintain the security risk register and track remediation activities.
• Ensure compliance with laws, regulations and contractual obligations such as NDPR, PCI DSS and the CBN Cybersecurity Framework.
• Coordinate internal and external audits, track findings and drive remediation.
• Define and maintain security KPIs, KRIs and dashboards; prepare reports for management and board committees.
• Conduct third‑party security assessments, review supplier controls and monitor vendor compliance.
• Support security awareness initiatives and monitor emerging regulatory trends.

Required profile

• Bachelor's degree in Information Security, Computer Science, IT or a related field.
• 5‑9 years of experience in information security governance, risk and compliance (GRC).
• Hands‑on experience implementing security frameworks such as ISO 27001, PCI DSS and the CBN Cybersecurity Framework.
• Strong understanding of risk management methodologies and control frameworks.
• Experience with audits, compliance reviews and regulatory requirements.
• Background in financial services, fintech or telecommunications is a plus.

Required skills

• ISO/IEC 27001
• PCI DSS
• CBN Cybersecurity Framework
• NDPR