Head of Information Security

About the role

We are seeking a Head of Information Security to define and lead Afriex’s security strategy, controls, incident readiness, and security culture. The role protects customer trust, systems, and data while enabling secure product growth in a fast‑moving fintech environment.

Key responsibilities

• Develop and own the company’s information security strategy and roadmap.
• Lead security governance, risk management, and control implementation across the organization.
• Oversee cloud security, endpoint security, access control, monitoring, and incident response.
• Partner with engineering teams to embed security into the SDLC, manage vulnerabilities, and conduct secure code reviews.
• Conduct third‑party risk assessments and security reviews.
• Maintain security policies, standards, awareness training, and reporting.
• Support audits, certifications, and compliance programs as needed.
• Review application architecture and design for security risks and advise on remediation.

Required profile

• 5+ years of experience in information security, cybersecurity, risk, or security engineering.
• Strong communication skills with the ability to translate security concepts into business language.
• Experience designing practical security programs in high‑growth environments.
• Preferable certifications such as CISSP or CISM and background in fintech or regulated industries.

Required skills

• Security architecture
• Identity and Access Management (IAM)
• Threat detection and incident response
• Risk management
• Cloud security
• Secure Software Development Lifecycle (SDLC)
• Vulnerability management
• OWASP Top 10 knowledge
• Secure code review
• Security governance and control implementation
• Security policies and awareness training
• Audit and compliance support