Chief Information Security Officer (CISO)

About the role

Remita is scaling its payments and collections platform across Africa and needs a senior security executive to define and own its information security strategy. Reporting to the Managing Director and the Board Risk & Compliance Committee, the CISO will protect infrastructure, data and reputation while enabling commercial growth.

Key responsibilities

• Define and maintain an enterprise‑wide security strategy, roadmap and operating model aligned with business goals and regulatory obligations.
• Lead the Security Operations Centre, threat intelligence programme and incident‑response framework to ensure 24/7 monitoring, detection and rapid remediation.
• Embed security into the software development lifecycle through DevSecOps, automated testing (SAST, DAST, SCA) and secure architecture reviews.
• Own infrastructure and cloud security, implementing zero‑trust, micro‑segmentation, privileged access management and data protection controls.
• Ensure compliance with CBN Cybersecurity Framework, PCI‑DSS, NDPR, ISO 27001 and Visa/Mastercard security programmes, and maintain ISO 27001 certification.

Required profile

• Minimum 15 years of progressive information security experience, including at least 5 years in a senior leadership role within financial services, fintech or payments.
• Hands‑on expertise across threat intelligence, incident response, penetration testing, application security, cloud security, IAM and cryptography.
• Proven experience securing payment switching, card processing or real‑time payment platforms.
• Familiarity with MITRE ATT&CK, NIST Cybersecurity Framework and AI/ML‑based security tooling.

Required skills

• Threat intelligence and incident response
• Penetration testing and red‑team exercises
• Application security (SAST, DAST, SCA) and secure development (DevSecOps)
• Cloud security and CSPM
• Identity & Access Management (IAM) and privileged access management (PAM)
• Cryptography, encryption and data loss prevention
• Zero‑trust network architecture, micro‑segmentation
• Regulatory compliance frameworks: PCI‑DSS, ISO 27001, NIST, MITRE ATT&CK