Head, Information Risk Management

• Lead and coordinate Vulnerability Assessment and Penetration Testing (VAPT) for applications, infrastructure, and digital platforms.
• Review and test security-related changes (e.g., firewall rules, system patches, configuration updates) before deployment.
• Conduct security configuration reviews and ensure adherence to hardening and baseline standards.
• Evaluate and approve system and solution architectures to ensure alignment with security and risk requirements.
• Maintain and update the IT Risk Register and track remediation of identified issues.
• Ensure compliance with CBN regulations, NDPA/NDPR, ISO 27001, and other industry standards.
• Provide technical leadership and guidance to the IT Risk and Security Testing team.
• Report IT risk and vulnerability trends to management and governance committees.

Requirements

Education/Qualification

• BSc/Ba in Information Technology, Computer Science or a related discipline​

Experience

• 4+ years of experience in IT risk, cybersecurity, or IT audit, with hands-on VAPT or configuration review experience.​

General Knowledge and Skills

• Strong knowledge of security frameworks (ISO 27001, NIST, COBIT) and risk management practices.
• Certifications such as CEH, or OSCP is an added value.
• Excellent analytical, reporting, and stakeholder engagement skills.

Benefits

• Be at the forefront of driving financial inclusion and digital innovation.
• Work in a dynamic, forward-thinking banking environment.
• Competitive remuneration and performance-based incentives. ​