Chief Information Security Officer (CISO) - Nigeria

About the role

JPMorgan Chase is looking for an experienced security leader to act as Chief Information Security Officer (CISO) for its Nigeria legal entity within the Cybersecurity function of the Nigeria Merchant Bank. The role owns and drives the cybersecurity programme, aligns it with local regulatory requirements and the firm's global standards, and serves as the Central Bank of Nigeria (CBN)-approved person for cybersecurity, reporting to the Managing Director and CEO of the Nigeria legal entity and with a dotted-line link to the CEEMEA Cybersecurity Country Lead.

Key responsibilities

• Oversee and implement the Board-approved cybersecurity programme and strategy, turning enterprise objectives into operational practice.
• Develop and maintain cybersecurity policies, secure business and communication practices, and performance metrics.
• Lead the end-to-end risk management lifecycle, including risk assessments, vulnerability management, penetration testing oversight and remediation tracking.
• Plan and run incident response, with loss and recovery reporting.
• Maintain data privacy posture in line with the Nigeria Data Protection Act (NDPA) 2023 and other regulations.
• Report regularly to the Board and Senior Management on risk status, programme effectiveness, incidents and compliance.
• Work with regional and group cybersecurity functions while keeping local regulatory accountability.
• Drive security awareness and training, recommend security tools and capabilities, and engage with the CBN and other regulators on supervisory reviews.

Required profile

• Formal training or certification on software engineering concepts and 5+ years of applied experience.
• Progressive experience in information security or cybersecurity, preferably in financial services or banking.
• Experience building, leading and maturing enterprise cybersecurity programmes, including incident response, vulnerability management and regulatory reporting.
• Strong knowledge of the Nigerian regulatory environment, including CBN guidelines, BOFIA 2020 and NDPA 2023.
• Ability to influence Boards, senior management, regional functions and regulators; dual-reporting structure.
• Preferred: CISSP, CISM or CCISO, advanced degree, CBN Approved Persons' Regime experience, and prior CISO experience in a multinational financial institution in an emerging market.

Appointment is subject to CBN Approved Persons' Regime approval, requiring Board endorsement and formal CBN approval before taking office.