{"id":3666412,"url":"https://alion.io/job/heirs-holdings-practice-lead-cybersecurity","title":"Practice Lead, Cybersecurity","company":{"id":705795,"name":"Heirs Holdings","domain":"heirsholdings.com","url":"https://alion.io/company/heirs-holdings","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Breezy","truth_index":{"grade":"A","score":95,"open_postings":7,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":74,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Lagos, Nigeria"],"countries":["NG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"PCI DSS","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-11-01T20:49:52Z","employer_posted_date":"2026-11-01","last_verified_at":"2026-11-12T06:49:33Z","board_verified":true,"closed_at":null,"days_open":10,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":10},"description":"The Practice Lead, Cybersecurity is the executive leader responsible for protecting the enterprise, enabling secure business growth, and ensuring the resilience of all digital platforms, products, and infrastructure across Heirs Technologies and its ecosystem.\nThis is a strategic and operational leadership role, accountable for building a world-class, risk-driven cybersecurity capability that safeguards:\nCustomer data and digital banking platforms (e.g., RedApp)\nEnterprise platforms (e.g., Converge)\nInfrastructure, cloud environments, and integrations\nThe CISO will operate at the intersection of technology, risk, and business, ensuring security is not a blocker but a business enabler for growth, trust, and market expansion.\n1. Enterprise Security Strategy & Leadership\nDefine and execute a Group-wide cybersecurity strategy aligned to business growth and risk appetite\nPosition cybersecurity as a business enabler for revenue, client trust, and market expansion\nLead and scale a high-performing security organisation (GRC, SOC, Engineering, DevSecOps)\nProvide regular Board and EXCO reporting on cyber risk posture and mitigation\n2. Platform & Product Security (Critical for HT)\nEnsure end-to-end security of:\nDigital Banking platforms (RedApp)\nEnterprise platforms (Converge)\n\nEmbed security-by-design across all products and engineering squads\nDrive DevSecOps adoption across the SDLC\nOutcome: Secure, scalable products that support revenue and client growth\n3. Cyber Risk Management & Governance\nEstablish and enforce a risk-based cybersecurity framework\nIdentify, assess, and mitigate risks across:\nApplications\nInfrastructure\nThird-party integrations\n\nOversee data protection (PII, financial data, enterprise data)\n4. Security Operations & Incident Response\nBuild and lead a 24/7 SOC capability (in-house or managed)\nOversee:\nThreat detection (SIEM, EDR)\nVulnerability management\nPenetration testing and red teaming\n\nLead cyber incident response and crisis management\nOutcome: Rapid detection, containment, and recovery from threats\n5. Regulatory Compliance & External Engagement\nEnsure compliance with:\nNDPA / NDPR\nCBN Cybersecurity Framework\nISO 27001, PCI-DSS (where applicable)\n\nServe as primary interface with regulators (CBN, SEC, NITDA, NCC)\nDrive audit readiness and certification programmes\n6. Cloud, Infrastructure & Identity Security\nSecure cloud environments (AWS, Azure, GCP)\nImplement:\nZero Trust architecture\nIdentity & Access Management (IAM)\n\nOversee endpoint, network, and infrastructure security\n7. Third-Party & Ecosystem Security\nLead vendor and partner security risk management\nConduct security due diligence for all integrations and platforms\nEnsure ecosystem security across:\nFintech partners\nInfrastructure vendors\n\n8. Security Culture & Awareness\nDrive enterprise-wide cybersecurity awareness programmes\nEmbed security into employee behaviour, engineering culture, and leadership mindset\nLead initiatives such as:\nPhishing simulations\nSecure usage practices\n\nSKILLS/ATTRIBUTES\nTechnical\nCybersecurity architecture & enterprise security design\nCloud security (AWS, Azure, GCP)\nThreat detection & incident response\nDevSecOps & secure SDLC\nIdentity & access management (IAM)\nData protection & privacy\nLeadership\n· Executive presence & Board engagement\nStrategic thinking & business alignment\nCrisis leadership and decision-making\nStakeholder and regulatory management\nAbility to influence across engineering, product, and commercial teams\nEDUCATION/EXPERIENCE REQUIREMENTS\nExperience & Qualifications\nBachelor’s degree in Computer Science, Cybersecurity, Engineering, or related field\nMaster’s degree (MBA / MSc Cybersecurity)\n12-15+ years in cybersecurity, with 5+ years in senior leadership roles\nProven experience in:\nTechnology or financial services environments\nBuilding and scaling enterprise security programmes\n\nStrong experience engaging:\nBoards, regulators, and executive teams\n\nCertifications (Required / Preferred)\nCISSP and/or CISM (required)\nAdditional: CISA, CRISC, CEH, CCSP (advantage)\nZero critical security breaches\nReduction in vulnerabilities and incident frequency\n100% compliance with regulatory and audit requirements\nSecure delivery of all major platforms (RedApp, Converge)\nImproved incident response time and recovery capability","description_format":"text","description_chars":4293,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Family Offices","Investment Holding Companies"],"lifecycle":[{"event":"open","at":"2026-11-03T06:41:53Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":9,"expected_fill_days":74,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-11-11T05:49:22Z"},"pay":null,"html_url":"https://alion.io/job/heirs-holdings-practice-lead-cybersecurity","json_url":"https://alion.io/job/heirs-holdings-practice-lead-cybersecurity.json","meta":{"generated_at":"2026-11-12T08:13:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16549,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":705795},"rest":"https://alion.io/mcp/rest/get_company?id=705795"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fheirs-holdings-practice-lead-cybersecurity"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fheirs-holdings-practice-lead-cybersecurity"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fheirs-holdings-practice-lead-cybersecurity"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/heirs-holdings-practice-lead-cybersecurity\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fheirs-holdings-practice-lead-cybersecurity"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3666412}},{"tool":"search_jobs","arguments":{"company":"heirsholdings.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3666412},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}