Information Security Governance Engineer
2xKnWVQCw1utVmojgh5fMH· Information Technology Security
About this role
Governance & Policy
- Develop, review, and maintain information security policies, standards, procedures, and guidelines.
- Ensure alignment with recognized frameworks and standards (e.g. ISO/IEC 27001, PCIDSS, CBN Cybersecurity Framework).
- Define security governance structures, roles, and decision‑making processes.
Risk Management
- Support enterprise information security risk assessments and risk treatment plans.
- Maintain the security risk register and track remediation activities.
- Advise business units on risk acceptance, mitigation, transfer, or avoidance.
Compliance & Regulatory Assurance
- Ensure compliance with applicable laws, regulations, and contractual requirements (e.g. NDPR, CBN Cybersecurity Framework, PCI DSS, ISO 27001).
- Coordinate internal and external audits, assessments, and certifications.
- Track and remediate audit findings and compliance gaps.
Metrics, Reporting & Assurance
- Define and maintain security governance KPIs, KRIs, and dashboards.
- Prepare security posture reports for management, risk committees, and auditors.
- Support board‑level and executive reporting on information security matters.
Third‑Party & Vendor Security Governance
- Support third‑party security risk assessments and due diligence processes.
- Review supplier security controls and contractual security clauses.
- Monitor ongoing compliance of critical vendors.
Awareness & Continuous Improvement
- Support security awareness and policy training initiatives.
- Monitor regulatory changes and emerging governance trends.
- Drive continuous improvement of governance and control maturity.
- Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field.
- Minimum of 5–9 years’ experience in information security governance, risk, and compliance (GRC).
- Hands-on experience implementing or managing security frameworks (e.g., ISO 27001, CBN Cybersecurity Framework, NDPR, PCI DSS).
- Strong understanding of risk management methodologies and control frameworks.
- Experience working with audits, compliance reviews, and regulatory requirements.
- Familiarity with security tools and platforms supporting governance and compliance activities.
- Experience in financial services, fintech, or telecommunications is an added advantage.
Frequently Asked Questions
Is the salary disclosed for the Information Security Governance Engineer position at 2xKnWVQCw1utVmojgh5fMH?
The salary for this Information Security Governance Engineer role at 2xKnWVQCw1utVmojgh5fMH is not publicly listed. Click "Apply Now" to learn more about the compensation package on their official careers page.
Where is the Information Security Governance Engineer position at 2xKnWVQCw1utVmojgh5fMH located?
This Information Security Governance Engineer role at 2xKnWVQCw1utVmojgh5fMH is based in Lagos, Lagos, Nigeria. The position is listed as on-site or hybrid. Check the full job description or apply directly to confirm the work arrangement.
Is the Information Security Governance Engineer role at 2xKnWVQCw1utVmojgh5fMH full-time or part-time?
This is listed as a Full time position. It is posted as a Information Security Governance Engineer role in the Information Technology Security department at 2xKnWVQCw1utVmojgh5fMH.
Which team or department does the Information Security Governance Engineer at 2xKnWVQCw1utVmojgh5fMH belong to?
This Information Security Governance Engineer position is part of the Information Technology Security department at 2xKnWVQCw1utVmojgh5fMH. See the full job description for more information about the team structure and responsibilities.
How do I apply for the Information Security Governance Engineer position at 2xKnWVQCw1utVmojgh5fMH?
Click the "Apply Now" button on this page. You will be redirected to 2xKnWVQCw1utVmojgh5fMH's official application portal hosted on workable where you can submit your application directly.
When was the Information Security Governance Engineer job at 2xKnWVQCw1utVmojgh5fMH posted?
This Information Security Governance Engineer position at 2xKnWVQCw1utVmojgh5fMH was posted on Jun 4, 2026. Apply as soon as possible — early applications are often reviewed first.
Information Security Governance Engineer
2xKnWVQCw1utVmojgh5fMH
You'll be redirected to 2xKnWVQCw1utVmojgh5fMH's official application page on workable.