GRC Lead - Information Security Governance, Risk & Compliance

About the role

Renmoney is hiring a GRC Lead in Lagos (Marina) for a full-time position. The role covers information security governance, risk management and compliance assurance, including policy development, risk registers, audits, vendor oversight and reporting to management and the board.

Key responsibilities

• Develop, review and maintain information security policies, standards, procedures and guidelines, aligned with frameworks such as ISO/IEC 27001, PCI DSS and the CBN Cybersecurity Framework
• Define security governance structures, roles and decision-making processes
• Support risk assessments and risk treatment plans, maintain the security risk register and advise business units on risk acceptance, mitigation, transfer or avoidance
• Ensure compliance with laws, regulations and contracts (NDPR, CBN Cybersecurity Framework, PCI DSS, ISO 27001); coordinate internal and external audits and track remediation of findings
• Maintain security governance KPIs, KRIs and dashboards, prepare security posture reports and support board-level reporting
• Support third-party security risk assessments, review supplier controls and contractual security clauses, and monitor critical vendor compliance
• Support security awareness and policy training, monitor regulatory changes and drive continuous improvement of governance and control maturity

Required profile

• Bachelor's degree in Information Security, Computer Science, Information Technology or a related field
• Minimum of 5-9 years of experience in information security governance, risk and compliance (GRC)
• Experience implementing or managing security frameworks such as ISO 27001, CBN Cybersecurity Framework, NDPR and PCI DSS
• Experience in financial services, fintech or telecommunications is an added advantage

Required skills

• Strong understanding of risk management methodologies and control frameworks
• Experience with audits, compliance reviews and regulatory requirements
• Familiarity with security tools and platforms supporting governance and compliance activities