Head, Information Security, Nigeria

A leading pan-African financial services institution with a strong presence across key African markets and an expanding international footprint. The organisation provides a comprehensive range of banking and financial solutions, with a focus on innovation, digital transformation and financial inclusion. Committed to driving sustainable economic growth, the institution combines local market expertise with international best practices, maintaining a strong emphasis on operational excellence, corporate governance and customer-centric solutions. The institution is currently seeking an experienced Information Security leader for its Nigerian banking operations. Reports to: Deputy Managing Director Nigeria and Group Head, Information Security The Head of Information Security will develop and lead the bank’s information security strategy, safeguarding its systems, customer data and banking services against cyber threats. The role will oversee cybersecurity governance, risk management, security operations and incident response, ensuring robust controls that support regulatory compliance and operational resilience. The Head of Information Security will embed security across banking operations and digital initiatives, while building a strong culture of security awareness and accountability. Cyber Security Operations and Incident Management
· Lead security monitoring, threat detection and incident response across the institution.
· Coordinate major cyber incidents, ensuring timely containment, recovery and communication.
· Strengthen security operations and improve incident response effectiveness.
· Oversee vulnerability management and resolution of critical security weaknesses.
· Improve the effectiveness of security monitoring and response processes. Information Security Governance and Compliance
· Maintain robust security policies, standards and regulatory compliance.
· Ensure adherence to Nigerian banking security and data-protection requirements.
· Strengthen identity and access management across systems and applications.
· Report material security risks to senior management, the Board and regulators. Technology Security and Risk Management
· Ensure new technology and digital products meet security requirements before launch.
· Oversee cloud, application, infrastructure and third-party security risks.
· Work with Technology, Risk and Operations teams to reduce security exposure.
· Manage security improvement initiatives, suppliers and budgets. Leadership and Organisational Resilience
· Lead and develop high-performing information security teams, building leadership capability and accountability across the function.
· Strengthen cyber resilience through effective controls and response capabilities.
· Build specialist talent and successors for critical security roles.
· Promote security awareness, accountability and continuous improvement. Requirements Experience & Qualifications
· Minimum 12 years’ experience in information or cyber security, including five years in a highly regulated sector and three years leading a security function or major team.
· Proven experience leading a substantial information security function or security operations at scale, including oversight of significant cyber incidents.
· Nigerian regulatory experience required; multi-country security oversight advantageous.
· A good first degree in a technical, scientific or numerate discipline; CISSP, CISM or CISA certification required.
· CEH, GIAC, CCSP, CRISC or a relevant master’s degree is advantageous.
· Membership of a recognised information-security professional body and strong knowledge of Nigerian security and data-protection requirements. Skills, Capabilities & Personal attributes
· Strong expertise in security operations, threat detection and incident response.
· Sound knowledge of vulnerability management, identity and access controls, and cloud security.
· Proven ability to manage complex cyber risks and security improvement programmes.
· Credibility and communication skills to advise executive management, engage regulators and present material cyber risks to senior stakeholders.
· Excellent communication skills with executives, regulators and technology teams.
· Calm, decisive leadership and sound judgement during major security incidents.
· Ability to lead specialist teams and collaborate across technology and business functions.
· High professional integrity, accountability and commitment to cyber resilience. Benefits Competitive executive remuneration and benefits package, commensurate with experience and the seniority of the appointment.