IT Risk Specialist

About the role

The IT Risk Specialist will lead the identification, assessment, and mitigation of technology and cybersecurity risks across Dangote Cement’s production plants and corporate operations. This role ensures that all IT systems supporting manufacturing, logistics, and enterprise functions are secure, resilient, and aligned with the Group’s risk appetite and regulatory requirements.

Key responsibilities

• Conduct objective, fact‑based risk assessments on new and existing systems and share findings with stakeholders.
• Manage the IT risk environment, including policies, standards, and processes.
• Link risk to controls, coordinate control owners for RSCA, and document control statements.
• Provide advice on cybersecurity risk management and collaborate on emerging threats.
• Oversee the self‑identified issue process, track SIIs and audit issues to closure.
• Develop and implement cybersecurity defence strategies, business continuity, and disaster recovery procedures.
• Perform on‑site security assessments of third‑party controls.
• Maintain continuous control monitoring through Key Risk Indicators and corrective action plans.
• Report IT risks to Group Risk Board Committee and ensure alignment with risk appetite.

Required profile

• Minimum 5 years of experience in IT risk management or IT governance.
• Relevant certifications such as CRISC, CISA, CISM, or CISSP.
• Strong policy‑writing experience and ability to communicate risk to senior stakeholders.
• Proven ability to build relationships with stakeholders at all levels.

Required skills

• ISO 27001
• NIST framework
• CIS controls
• OWASP Top 10
• Security Essentials
• PCI‑DSS (or PSI‑DSS) knowledge