Information Security Officer / Data Protection Officer

Section: About the Role Kimberly Ryan Limited is seeking an experienced Information Security Officer / Data Protection Officer to establish, maintain, and improve its Information Security Management System (ISMS), ensuring information security and data protection compliance.

Section: Key Responsibilities

• Implement information security policies, strategies, and procedures.
• Oversee data protection compliance and maintain relevant policies and procedures.
• Conduct information security risk assessments and Data Protection Impact Assessments (DPIAs).
• Manage data subject requests and liaise with regulators and internal stakeholders.
• Conduct compliance reviews, audits, and coordinate Vulnerability Assessment and Penetration Testing (VAPT).
• Ensure security controls, segregation of duties, and maker-checker controls across systems.
• Manage security incidents, system checks, and application/API testing using Swagger and Postman.
• Develop SQL queries for EOD, EOM, and EOY reports, and schedule monitoring jobs using Oracle and ACL.
• Identify process automation and security control improvements.
• Coordinate risk assessments, maintain the risk register, monitor key risk indicators, and prepare quarterly reports.
• Follow up on audit and risk action items and support internal, internal control, and financial control reviews.
• Monitor performance against targets and recommend risk mitigation measures.

Section: Requirements

• Bachelor’s degree in Accounting, Finance, Information Technology, Computer Science, or Computer Engineering, with a minimum of Second-Class Upper division.
• At least 5 years of post-qualification experience in Information Security and Data Protection, preferably within the Nigerian capital market.
• Relevant certifications such as CEH, CISA, CRISC, CISM, CIPP, CDPO, or applicable ISO certifications.
• Knowledge of cybersecurity frameworks, data protection regulations, NDPR, and applicable Nigerian data protection laws.
• Strong analytical, problem-solving, risk assessment, and reporting skills.
• Technical proficiency in vulnerability assessment, database access controls, SQL, Oracle, ACL, and application/API testing tools.
• Knowledge of Governance, Risk, and Compliance (GRC) tools and internal control frameworks.
• Excellent written and verbal communication skills.