All jobs
Security & Technology Risk Analyst
About this role
Moniepoint is seeking a Security & Technology Risk Analyst to join its Information Security Assurance Team. The role involves identifying, monitoring, and reporting security and technology operational risks across the fintech ecosystem, translating risk data into actionable intelligence for executive leadership, and ensuring regulatory compliance and operational resilience. It will support Moniepoint's ability to safely expand into new markets, launch innovative products, and maintain the confidence of customers and stakeholders.
What you would do
- Conduct comprehensive risk assessments across security and technology domains (cloud, network, infrastructure, product, endpoint, third-party) using NIST, FAIR, and qualitative/quantitative methods.
- Perform Business Impact Analysis to determine Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO), in collaboration with process owners.
- Administer and maintain the security risk register with current and historical records for regulatory examinations and audits.
- Guide development and documentation of risk treatment plans aligned with enterprise risk appetite, collaborating with cross-functional stakeholders on prioritisation and integration into product development and operations.
- Track and validate execution of risk treatment plans, monitor completion, escalate delays, and adjust plans as needed based on mitigation progress.
- Design and maintain measurable risk metrics and dashboards for executive decision-making, monitoring against risk appetite thresholds.
What they are asking for
- Bachelor’s degree in Computer Science, Information Security, Risk Management, Engineering, or related field.
- 5+ years of professional experience in operational risk management, cybersecurity risk, or technology risk assessment.
- Demonstrated experience conducting risk assessments, threat analysis, or vulnerability management.
- Experience developing risk metrics, KPIs, or dashboards for executive audiences.
- Familiarity with risk management frameworks (e.g., NIST Cybersecurity Framework, ISO 27001 or similar).
- Knowledge of business continuity and disaster recovery planning principles.
Listing details are summarised from the source. Always confirm the role and the employer on the original posting before applying, and never pay to apply for a job.