Chief Information Security Officer at Rand Merchant Bank

Purpose:

• As the Chief Information Security Officer at Rand Merchant Bank Nigeria Limited, the candidate will play a pivotal role in shaping and implementing our cybersecurity strategy.
• The candidate will be responsible for the implementation of the Information Security Management System (ISMS) of the bank and ensuring that the bank is fully compliant with the Cybersecurity framework of the Central Bank of Nigeria.
• The successful candidate should have a proven track record of implementing effective cybersecurity measures, mitigating risks, and fostering a culture of security awareness within the organization.

Responsibilities:

The successful candidate will:

• Manage the implementation of the bank’s Information Security Management System (ISMS). Ensure that the bank is compliant with ISO 27001 and 27032 standards.
• Develop and implement a comprehensive cybersecurity strategy aligned with business objectives.
• Oversee the design and execution of security policies, procedures, and technical measures to protect company assets.
• Lead incident response and manage the resolution of security incidents, ensuring minimal business impact.
• Cultivate and manage objective working relationships with a variety of stakeholders by providing expert advice and consulting on all aspects of security.
• Participate in the development and implementation of appropriate and effective controls to mitigate identified threats and risks.
• Provide specialist advise and consultation to safeguard information systems through the identification and management of security risks, audits and vulnerabilities.
• Determine acceptable security risk appetite levels to adequately protect the business from potential risks and threats while aligning to the Group CISO vision, mission and strategy.
• Ensure that the bank is fully compliant with all regulatory and legal requirement relating to information and Cybersecurity.
• Ensure all Information Security analysis and research are captured, recorded and reported on to ensure correct actions are implementation are executed, and fall within Group CISO vision, mission and strategy.
• Maintain relationship with industry peers and manage the sharing of information on emerging threats and other events that can impact the organization.

Qualifications & Experience:

• First degree in Computer Science, Information Technology or any other related discipline. Master’s degree is an advantage.
• Relevant certifications such as CISSP, CISM, or equivalent.
• Minimum of 10 years’ experience with 5 years in a financial institution

Key Competencies:

• Working knowledge of ISO 27001 and ISO 27032 implementation.
• Strong understanding of regulatory requirements related to information security.
• Excellent communication and leadership skills.
• In-depth knowledge of cybersecurity principles, technologies, and best practices.