About this role

Open — Accepting Applications

Premium Human Resource Solution Limited

🔥 Hot New

💼Senior Level 💰₦550,000 – ₦700,000/mo 📍Lagos Island, Lagos 🕒Posted 3 minutes ago

Accepting Applications

Job Highlights

🎓Senior Level

💰₦550,000 – ₦700,000/mo

🏢On-site

Job Description

Department: Technology

Reports To: Chief Executive Officer

Job Grade: Experienced Analyst – Associate

Location: Lagos, Nigeria

Job Summary

Premium Human Resource Solution Limited is recruiting, The Information Security Officer/Data Protection Officer will be responsible for developing, implementing, and maintaining the organisation’s information security management system and data protection framework. The role involves identifying and mitigating information security risks, ensuring compliance with applicable data protection regulations, managing security incidents, and safeguarding the confidentiality, integrity, and availability of the organisation’s information assets.

Key Responsibilities

Implement and monitor information security policies, strategies, standards, and procedures.
Develop and maintain data protection policies in compliance with applicable regulations, including the Nigeria Data Protection Act (NDPA).
Conduct periodic information security risk assessments, data protection impact assessments (DPIAs), and vulnerability assessments.
Monitor compliance with information security policies and regulatory requirements through audits and periodic reviews.
Manage data subject requests and serve as a point of contact for regulatory authorities and internal stakeholders on data protection matters.
Coordinate the identification, reporting, investigation, escalation, and resolution of security incidents.
Maintain security controls, risk registers, risk treatment plans, and continuous improvement initiatives.
Ensure appropriate access controls, segregation of duties, and maker-checker controls across business applications and IT infrastructure.
Collaborate with internal auditors, risk management teams, and business units to implement effective risk mitigation controls.
Support vulnerability assessment and penetration testing (VAPT), IT audits, and other security assurance exercises.
Monitor key risk indicators and prepare periodic risk and compliance reports.
Conduct application and API testing, develop SQL queries and scripts, and automate reports using relevant tools.
Monitor application servers for unauthorised changes and potential security, capacity, and service continuity risks.
Support end-of-day, end-of-month, and end-of-year reporting processes using Oracle, ACL, and other relevant systems.
Ensure security controls are incorporated into the system development and acquisition life cycle.
Perform other duties as assigned by the Chief Executive Officer.

Requirements

Bachelor's degree in Accounting, Finance, Information Technology, Computer Science, Computer Engineering, or a related discipline, with a minimum of Second-Class Upper division.
At least five years of post-qualification experience in information security and data protection roles, preferably within the Nigerian capital market.
Professional certifications such as CEH, CISA, CRISC, CISM, CIPP, CDPO, or relevant ISO certifications are an advantage.
Strong knowledge of information security frameworks, cybersecurity, risk management, and governance, risk, and compliance (GRC) practices.
Good understanding of applicable data protection legislation, particularly the Nigeria Data Protection Act (NDPA) and relevant regulatory requirements.
Experience with vulnerability assessments, security audits, incident management, access controls, and risk assessments.
Technical proficiency in SQL, Oracle, ACL, application testing, and API testing tools such as Postman and Swagger.
Excellent analytical, problem-solving, documentation, and communication skills.
Key Competencies
Information security and data protection management
Risk assessment and mitigation
Regulatory compliance and audit support
Cybersecurity incident management
Governance, risk, and compliance (GRC)
Technical analysis and reporting
Stakeholder engagement and collaboration
Attention to detail and continuous improvement

About the Company