Information Security Officer

About the role

The Information Security Officer (ISO) is responsible for reviewing and monitoring the organization’s information security framework to protect data assets, ensure regulatory compliance, and mitigate security risks.

Key responsibilities

• Identify, assess, and report information security risks and coordinate remediation plans.
• Conduct periodic information security risk and vulnerability assessments.
• Ensure compliance with NAICOM, NDPR, CBN and other regulatory requirements.
• Collaborate with Risk and Compliance teams to embed security controls into enterprise risk frameworks.
• Monitor third‑party and vendor information security risks.
• Design and deliver periodic information security awareness programs for staff.
• Lead investigations into actual or suspected security breaches and maintain incident records.
• Provide quarterly information security reports to management and the Board Risk Committee.

Required profile

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity or a related field.
• Professional certification such as CISM, CISSP, ISO 27001 Lead Implementer/Auditor or CEH.
• Minimum of 3–5 years of relevant experience in information security, risk management or IT audit, preferably within financial services or insurance.
• Strong understanding of NDPR, NAICOM guidelines, CBN risk‑based supervision framework and global cybersecurity standards.