{"id":899119,"url":"https://alion.io/job/first-epdc-cybersecurity-lead","title":"Cybersecurity Lead","company":{"id":676039,"name":"2025 FIRST Exploration and Petroleum Development Company Ltd.","domain":"first-epdc.com","url":"https://alion.io/company/first-epdc","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Lagos, Nigeria"],"countries":["NG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":14500,"max_usd":38000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":753},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-05-12T00:00:00Z","employer_posted_date":"2026-05-12","last_verified_at":"2026-10-26T12:58:10Z","board_verified":true,"closed_at":null,"days_open":167,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":167},"description":"The Cybersecurity Lead is responsible for safeguarding the organization’s information assets, operational technology interfaces, digital platforms, and data by leading the enterprise cybersecurity and information security function. Reporting directly to the Chief Technology Officer (CTO), the role provides independent oversight of cybersecurity risk, governance, and compliance while supporting safe, reliable, and efficient business and operational outcomes.\nThe role operates within a lean technology organization and works closely with Technology Operations, Digital & Technology Innovation, and Technical Project Management teams to embed cybersecurity controls into day-to-day operations and project delivery.\nKey Accountabilities\nCybersecurity Strategy & Governance\nDefine the organization information and cybersecurity strategy together with the Digital and Technology innovation team. And execute the strategy in alignment with operational reliability, safety, and business objectives. \nEstablish and maintain cybersecurity policies, standards, and procedures aligned with global best practices and regulatory expectations. \nEnsure security considerations are integrated into infrastructure, cloud, business applications, and digital transformation initiatives. \nCyber Risk Management & IT GRC\nLead enterprise cybersecurity risk management activities, including identification, assessment, mitigation, and reporting of cyber risks. \nMaintain the cybersecurity and IT risk register and support integration with broader enterprise risk management processes. \nEnsure compliance with applicable regulatory requirements, contractual obligations, and data protection standards relevant to the oil and gas operating environment. \nCoordinate and support internal and external audits, risk assessments, and assurance activities. \nSecurity Operations & Incident Response\nProvide oversight and service assurance for outsourced Security Operations Centre (SOC) services. \nLead and coordinate cybersecurity incident response activities, including investigation, containment, remediation, and post-incident reviews. \nEnsure incident response plans, escalation procedures, and communication protocols are defined, tested, and operationally practical. \nThreat Intelligence, Vulnerability & Assurance\nOversee vulnerability management and penetration testing programs delivered by third-party providers. \nWork with Technology Operations teams to ensure timely remediation of identified vulnerabilities, prioritised based on operational and business risk. \nMonitor emerging cyber threats and industry-relevant attack patterns and translate insights into practical control improvements. \nIdentity, Access & Architecture Security \nOversee Identity and Access Management (IAM) controls, including privileged access management and user lifecycle processes. \nPromote least-privilege access, segregation of duties, and zero-trust principles across enterprise IT and digital platforms. \nProvide security input into system architecture, solution designs, and technology standards. \nThird-Party & Supply Chain Security \nAssess and manage cybersecurity risks associated with vendors, service providers, and technology partners. \nEnsure appropriate security controls and requirements are embedded within contracts and service agreements. \nSecurity Awareness & Capability Development \nDeliver security awareness and targeted training programs to improve cyber hygiene across the organization. \nProvide guidance and coaching to technology and digital delivery teams on secure practices. \nLine-manage and mentor a Cybersecurity Analyst to build internal security capability. \nReporting & Stakeholder Engagement \nReport cybersecurity risks, incidents, and overall security posture directly to the CTO. \nProvide clear, practical cybersecurity insights to technology leadership and business stakeholders. \nAct as the primary cybersecurity point of contact across the organization. \nRequirements\nThe ideal candidate must possess the following:\nBachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related discipline. \n5-8 years’ experience in cybersecurity, information security, or IT GRC roles within enterprise environments. \nPractical experience with cybersecurity governance frameworks such as ISO/IEC 27001, NIST Cybersecurity Framework, or similar. \nProven experience conducting cybersecurity risk assessments, audits, and compliance activities. \nFamiliarity with security operations concepts, incident response, vulnerability management, and third-party security oversight. \nExperience working in regulated or asset-intensive industries (e.g., oil & gas, energy, utilities, or heavy industry) is an advantage. \nRelevant professional certifications (or working towards them) such as ISO 27001, CISSP, CISM, or CRISC are desirable. \nStrong understanding of both technical cybersecurity controls and IT governance, risk, and compliance. \nPractical, risk-based approach suited to operational environments where availability, safety, and business continuity are critical","description_format":"text","description_chars":5076,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Oil & Gas"],"lifecycle":[{"event":"open","at":"2026-09-14T10:45:23Z"}],"visa":[],"liveness":{"score":5,"band":"cold","label":"Long shot","p_open":1,"p_active":0.184,"p_room":0.28,"age_days":167,"expected_fill_days":27,"reasons":["conf:1","win:tail","crowd:"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/first-epdc-cybersecurity-lead","json_url":"https://alion.io/job/first-epdc-cybersecurity-lead.json","meta":{"generated_at":"2026-10-26T21:00:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28242,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":676039},"rest":"https://alion.io/mcp/rest/get_company?id=676039"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffirst-epdc-cybersecurity-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffirst-epdc-cybersecurity-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffirst-epdc-cybersecurity-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/first-epdc-cybersecurity-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffirst-epdc-cybersecurity-lead"}]}