Platform Security Manager

About the role

Heirs Technologies is building a next‑generation digital banking platform for one of Africa’s largest financial institutions. The Platform Security Manager will be the dedicated security authority embedded within the software factory, ensuring the platform’s security posture is robust, auditable, and continuously improving.

Key responsibilities

• Define, enforce, and evolve end‑to‑end security standards, policies, and controls covering encryption, identity, application, network, and data protection.
• Own the platform’s Identity & Access Management framework, including MFA, short‑lived service tokens, privileged access management, just‑in‑time elevation, session recording, and automatic expiry.
• Secure the source‑control environment: repository segmentation, SSO/MFA, branch protection, CODEOWNERS approvals, secret scanning, and audit‑log export to SIEM.
• Govern the secure development lifecycle, integrating SAST, DAST, SCA, and secrets‑detection gates into all CI/CD pipelines.
• Enforce AES‑256 encryption at rest and TLS 1.2+ in transit, manage keys via Azure Key Vault and AWS KMS, and drive data classification and DLP enforcement.

Required profile

• Proven experience implementing security standards, IAM, and privileged access controls in large‑scale platforms.
• Hands‑on expertise with cloud key management (Azure Key Vault, AWS KMS) and encryption best practices.
• Deep knowledge of secure software development processes, including SAST, DAST, SCA, and CI/CD pipeline security.
• Ability to work cross‑functionally with platform engineering, DevSecOps, legal, and vendor teams.

Required skills

• Azure Key Vault
• AWS KMS
• Multi‑Factor Authentication (MFA)
• Identity & Access Management (IAM)
• Privileged Access Management (PAM)
• Session recording and just‑in‑time elevation
• SAST, DAST, Software Composition Analysis (SCA)
• CI/CD pipeline security
• Secret scanning and push protection
• SIEM integration
• AES‑256 encryption, TLS 1.2+

What we offer

• Opportunity to shape the security foundation of a continent‑scale digital banking platform.
• Collaboration with leading engineers, cybersecurity experts, and industry partners.
• Exposure to cutting‑edge cloud and DevSecOps technologies.