Practice Lead, Cybersecurity

Heirs Technologies Limited empowers Africa’s Digital Transformation through innovative and locally tailored solutions. We partner to help build your business on technology designed for Africa and benchmarked against global standards, whether you are modernizing operations, strengthening resilience, or accelerating growth.

We are recruiting to fill the position below:

Job Title: Practice Lead, Cybersecurity

Location: Lagos
Job Type: Full-Time

Job Description

• This is a strategic and operational leadership role, accountable for building a world-class, risk-driven cybersecurity capability that safeguards:
  • Enterprise platforms (e.g., Converge)
  • Customer data and digital banking platforms (e.g., RedApp)
  • Infrastructure, cloud environments, and integrations
• The Practice Lead, Cybersecurity is the executive leader responsible for protecting the enterprise, enabling secure business growth, and ensuring the resilience of all digital platforms, products, and infrastructure across Heirs Technologies and its ecosystem.
• The CISO will operate at the intersection of technology, risk, and business, ensuring security is not a blocker but a business enabler for growth, trust, and market expansion.

Enterprise Security Strategy & Leadership:

• Provide regular Board and EXCO reporting on cyber risk posture and mitigation
• Position cybersecurity as a business enabler for revenue, client trust, and market expansion
• Lead and scale a high-performing security organisation (GRC, SOC, Engineering, DevSecOps)
• Define and execute a Group-wide cybersecurity strategy aligned to business growth and risk appetite

Platform & Product Security (Critical for HT):

• Ensure end-to-end security of:
  • Digital Banking platforms (RedApp)
  • Enterprise platforms (Converge)
• Drive DevSecOps adoption across the SDLC
• Embed security-by-design across all products and engineering squads

Outcome: Secure, scalable products that support revenue and client growth:
Cyber Risk Management & Governance:

• Oversee data protection (PII, financial data, enterprise data)
• Identify, assess, and mitigate risks across:
  • Infrastructure
  • Applications
  • Third-party integrations
• Establish and enforce a risk-based cybersecurity framework

Security Operations & Incident Response:

• Build and lead a 24/7 SOC capability (in-house or managed)
• Oversee:
  • Vulnerability management
  • Threat detection (SIEM, EDR)
  • Penetration testing and red teaming
• Lead cyber incident response and crisis management

Outcome: Rapid detection, containment, and recovery from threats:
Regulatory Compliance & External Engagement:

• Ensure compliance with:
  • NDPA / NDPR
  • ISO 27001, PCI-DSS (where applicable)
  • CBN Cybersecurity Framework
• Serve as primary interface with regulators (CBN, SEC, NITDA, NCC)
• Drive audit readiness and certification programmes

Cloud, Infrastructure & Identity Security:

• Oversee endpoint, network, and infrastructure security
• Implement:
  • Identity & Access Management (IAM)
  • Zero Trust architecture
• Secure cloud environments (AWS, Azure, GCP)

Third-Party & Ecosystem Security:

• Lead vendor and partner security risk management
• Conduct security due diligence for all integrations and platforms
• Ensure ecosystem security across:
  • Infrastructure vendors
  • Fintech partners

Security Culture & Awareness:

• Embed security into employee behaviour, engineering culture, and leadership mindset
• Drive enterprise-wide cybersecurity awareness programmes
• Lead initiatives such as:
  • Secure usage practices
  • Phishing simulations

Experience & Qualifications

• Master’s degree (MBA / MSc Cybersecurity)
• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or related field
• Proven experience in:
  • Technology or financial services environments
  • Building and scaling enterprise security programmes
• 12–15+ years in cybersecurity, with 5+ years in senior leadership roles
• Strong experience engaging:
  • Boards, regulators, and executive teams

Certifications (Required / Preferred):

• CISSP and/or CISM (required)
• 100% compliance with regulatory and audit requirements
• Zero critical security breaches
• Reduction in vulnerabilities and incident frequency
• Improved incident response time and recovery capability.
• Secure delivery of all major platforms (RedApp, Converge)
• Additional: CISA, CRISC, CEH, CCSP (advantage)

Skills / Attributes:
Technical:

• Threat detection & incident response
• Cybersecurity architecture & enterprise security design
• Identity & access management (IAM)
• DevSecOps & secure SDLC
• Cloud security (AWS, Azure, GCP)
• Data protection & privacy

Leadership:

• Executive presence & Board engagement
• Ability to influence across engineering, product, and commercial teams.
• Stakeholder and regulatory management
• Strategic thinking & business alignment
• Crisis leadership and decision-making

How to Apply
Interested and qualified candidates should:
Click here to apply online