Cybersecurity and Compliance Expert

About the role

SterlingPRO Business Application Limited is a leading fintech innovator seeking a Cybersecurity and Compliance Expert to protect millions of financial transactions. You will lead security operations, incident response and compliance programs for payment applications across POS, ATM and agency banking solutions.

Key responsibilities

• Lead security monitoring, threat detection, incident response and SOC governance with 24/7 coverage for payment applications.
• Develop and optimise SIEM use cases, detection rules and alert management using Microsoft Sentinel, Splunk or QRadar.
• Manage MSSP and SOC providers, ensuring SLA compliance and service quality.
• Design and maintain incident response procedures, tabletop exercises and business continuity plans for POS, ATM and agency banking.
• Implement identity security controls (MFA, Conditional Access, PAM) and secure Azure/AWS cloud environments.
• Oversee data classification, protection and access controls for PII and financial data, ensuring PCI DSS v4.0 compliance.
• Conduct vulnerability assessments, penetration testing coordination and third‑party risk assessments.
• Integrate security testing (SAST, DAST, SCA) into CI/CD pipelines and promote DevSecOps practices.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, IT or related field; Master’s or MBA is a plus.
• 5+ years leading security operations in a hybrid SOC environment, preferably in fintech.
• Proven experience managing regulatory relationships (CBN, NDPC) and PCI DSS compliance.

Required skills

• SIEM platforms – Microsoft Sentinel, Splunk, QRadar.
• Incident response and threat hunting.
• Identity and access management – MFA, Conditional Access, Privileged Access Management.
• Cloud security – Azure and AWS native tools.
• Data protection – DLP, data classification, PCI DSS v4.0.
• Vulnerability management and penetration testing coordination.
• DevSecOps – SAST, DAST, SCA, CI/CD integration.
• Security tooling – Microsoft Defender (EDR/XDR), Entra ID.