GRC, Privacy & Security Awareness Manager
On-siteLekki, Lagos, Nigeria
Job Summary
Develop and implement enterprise security standards, processes, and guidelines while managing risks related to information security, physical security, and business continuity. Coordinate with technology and business teams to assess, implement, and monitor security, privacy, compliance, and AI-related risks, including performing governance and risk assessments for AI-enabled solutions and third-party services. Ensure security compliance with industry and government regulations, monitor performance against established metrics, and manage trade-offs between risk tolerance and investments. Create an information security awareness program to align staff understanding of risk and return with the "voice of the customer" and consumer technology adoption patterns. Protect personal information for customers, employees, and business partners in line with applicable privacy laws and global best practices.
Required Qualifications
- BA or MS in computer science, information systems management, business administration, or a related discipline
- Certified Information Systems Security Professional (CISSP) and/or Certified Information Security Manager (CISM)
- Minimum 8 years of experience in running the information security office analyzing and applying information security, risk management, and privacy practices
- Minimum 3 years of experience in strategic planning, budgeting, and allocation
- Minimum 5 years of experience with regulatory compliance and information security management frameworks (e.g., IS027000, COBIT, NIST 800, etc.)
Desired Qualifications
- Experience implementing or supporting AI governance, AI risk management, or emerging technology governance programmes
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.