Cybersecurity Manager in a Pension Company - HR-WIT

About this role

A full-time Cybersecurity Manager role based in Lagos for a pension sector employer. The role leads the organisation’s cybersecurity and information security functions, manages cyber risks, protects pension data and critical systems, and ensures regulatory compliance and business continuity in line with PenCom requirements and recognised standards. Responsibilities include developing business continuity and disaster recovery plans, assessing third-party security risks, safeguarding sensitive information, promoting security awareness, overseeing standards such as ISO 27001, monitoring threats and managing incidents, and reporting risk findings to senior management and the board. The position requires leadership experience, relevant certifications, and a background in cybersecurity or information security within a regulated environment.

What you would do

• Lead the organisation's cybersecurity and information security functions.
• Manage cyber risks and protect pension data and critical systems.
• Develop and maintain business continuity and disaster recovery plans (ISO 22301).
• Assess security risks from vendors, cloud providers, outsourced services, and third parties.
• Ensure safeguards protect sensitive information against unauthorised access, disclosure, alteration or loss.
• Promote information-security awareness and conduct staff training.
• Oversee compliance with regulatory requirements and ISO/IEC 27001 implementation.
• Develop secure communication practices and recommend security tools.
• Oversee threat monitoring, vulnerability management, investigations, and incident response.
• Coordinate incident response, containment, recovery, and regulatory notification; report findings to senior management and the board.

What they are asking for

• Minimum of six years in cybersecurity or information security with at least two years in a leadership role.
• Familiarity with information-security management systems, especially ISO/IEC 27001.
• Recognised information-security certification (e.g., CISSP, CISM, or CRISC).
• Bachelor’s degree or Higher National Diploma in Cybersecurity, Risk Management, Computer Science or related field.
• Understanding of information-security risks with emerging technologies (cloud computing, AI).
• Familiarity with business-continuity management systems, particularly ISO 22301.

Listing details are summarised from the source. Always confirm the role and the employer on the original posting before applying, and never pay to apply for a job.