What Information Security Jobs are in Nigeria?

• Lead the design, development, and deployment of enterprise-wide information security infrastructure.
• Oversee the implementation and maintenance of security controls, including firewalls, IDS/IPS, VPNs, and endpoint security solutions.
• Develop and execute comprehensive incident response plans, ensuring rapid and effective mitigation of security incidents.
• Conduct advanced threat intelligence analysis and vulnerability assessments to identify and prioritize security risks.
• Mentor and guide junior security engineers and analysts, fostering their professional growth.
• Collaborate with cross-functional teams to integrate security best practices into the software development lifecycle (SDLC) and infrastructure projects.
• Develop and maintain security architecture documentation, policies, and procedures.
• Manage relationships with security vendors and service providers.

• Master's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
• At least 7 years of progressive experience in information security engineering and architecture.
• Proven experience leading security engineering teams and projects.
• Deep understanding of network protocols, operating systems, and cybersecurity frameworks (e.g., NIST, ISO 27001).
• Hands-on experience with security technologies such as SIEM, SOAR, firewalls, WAFs, and cloud security solutions (AWS, Azure, GCP).
• Excellent leadership, communication, and presentation skills.
• Experience in developing and executing incident response procedures.
• Relevant industry certifications like CISSP, CISM, or GIAC are preferred.

• Highly competitive salary and performance-based bonuses.
• Comprehensive medical, dental, and optical coverage.
• Generous retirement savings plan.
• Continuous learning and professional development opportunities, including funding for certifications and conferences.
• Relocation assistance may be provided.
• A challenging and rewarding work environment with a focus on innovation.

Our client is seeking a dedicated Information Security Specialist with a focus on cloud security to enhance their security posture. This hybrid role requires a presence in Yola, Adamawa , complemented by remote work flexibility. You will be responsible for implementing, monitoring, and managing security controls within cloud environments, as well as on-premises systems. The ideal candidate possesses a strong understanding of cloud security best practices, threat detection, and incident response within AWS, Azure, or GCP. This position is crucial for protecting our client's data and applications in a rapidly evolving digital landscape. Your expertise will be vital in securing our cloud infrastructure and ensuring compliance.

• Implement and manage security solutions for cloud platforms (AWS, Azure, GCP).
• Monitor cloud and network infrastructure for security threats and vulnerabilities.
• Respond to security incidents in cloud environments.
• Conduct security assessments of cloud configurations and applications.
• Develop and enforce cloud security policies and best practices.
• Collaborate with IT and DevOps teams to integrate security into the CI/CD pipeline.
• Stay updated on cloud security trends and emerging threats.
• Assist in security audits and compliance checks for cloud environments.
• Manage security tools for cloud environments, such as CASB, WAF, and SIEM.
• Provide technical guidance on cloud security best practices.

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 3-5 years of experience in information security, with a significant focus on cloud security.
• Hands-on experience with cloud security controls and services in AWS, Azure, or GCP.
• Understanding of cloud networking, identity and access management (IAM), and data encryption.
• Familiarity with container security and DevOps security practices.
• Strong analytical and problem-solving skills.
• Excellent communication and teamwork abilities.
• Willingness to work a hybrid schedule in Yola, Adamawa .
• Relevant cloud security certifications (e.g., AWS Certified Security - Specialty, Azure Security Engineer Associate) are highly desirable.

Our client offers a competitive salary, comprehensive health benefits, and generous paid time off. This hybrid role provides a balanced approach to work and life, with the opportunity to collaborate in person in Yola, Adamawa and work remotely. You will have access to cutting-edge cloud security tools and technologies, along with significant opportunities for professional development and certifications. Our client fosters a collaborative team environment focused on innovation and continuous learning in the dynamic field of cloud security.

Our client, a leading logistics company operating in **Onitsha, Anambra**, is seeking a dedicated Information Security GRC Specialist. This role is crucial for establishing and maintaining robust governance, risk management, and compliance frameworks to protect the company's information assets. You will be responsible for developing, implementing, and overseeing policies and procedures that ensure adherence to industry standards and regulatory requirements. The ideal candidate will possess a strong understanding of GRC principles, excellent analytical skills, and the ability to translate complex requirements into practical security measures. You will work closely with various departments to assess risks, conduct audits, and drive compliance initiatives. We are looking for a detail-oriented professional committed to strengthening our client's security posture and fostering a culture of compliance within the **Onitsha** operations. This position requires a consistent presence in our **Onitsha** office to engage effectively with internal teams and stakeholders.

• Develop, implement, and maintain information security policies, standards, and procedures.
• Conduct risk assessments and develop mitigation strategies for identified risks.
• Ensure compliance with relevant regulations and industry frameworks (e.g., ISO 27001, PCI DSS, data privacy laws).
• Manage internal and external security audits and assessments.
• Develop and deliver security awareness and compliance training.
• Monitor the effectiveness of GRC controls and recommend improvements.
• Manage third-party risk assessments and vendor security reviews.
• Maintain GRC documentation, including policies, procedures, and audit evidence.
• Stay updated on evolving GRC requirements and best practices relevant to the **Anambra** region.
• Collaborate with IT and business units to integrate GRC principles into daily operations.

• Bachelor's degree in Information Security, Computer Science, Law, or a related field.
• 2-4 years of experience in information security, with a focus on GRC.
• Strong knowledge of information security principles, risk management methodologies, and compliance requirements.
• Familiarity with major security frameworks and standards (e.g., ISO 27001, NIST).
• Experience conducting risk assessments and managing compliance activities.
• Excellent analytical, problem-solving, and documentation skills.
• Strong communication and interpersonal skills to collaborate with diverse teams.
• Proficiency with GRC tools is a plus.
• Ability to interpret and apply regulatory requirements.
• Understanding of the business environment in **Onitsha** is advantageous.

• Competitive annual salary of 7,800,000 NGN.
• Comprehensive health, dental, and vision insurance.
• Opportunities for professional development and GRC certifications.
• Retirement savings plan.
• Paid annual leave and public holidays.
• Chance to work with a key player in the logistics sector.
• A professional and structured work environment in **Onitsha**.

• Integrate security best practices into the software development lifecycle (SDLC).
• Conduct security reviews of application designs and code.
• Perform static application security testing (SAST) and dynamic application security testing (DAST).
• Identify and help remediate application vulnerabilities, including injection flaws, broken authentication, and cross-site scripting (XSS).
• Develop and maintain security guidelines for developers.
• Work closely with development teams to foster a security-aware culture.
• Evaluate and implement security tools and technologies for application security.
• Respond to and investigate application security incidents.
• Stay up-to-date with the latest application security threats and mitigation techniques.
• Contribute to threat modeling exercises for new applications.

• Bachelor's degree in Computer Science, Software Engineering, Information Security, or a related field.
• Minimum of 4 years of experience in application security or a closely related role.
• Strong understanding of common web application vulnerabilities and attack vectors (OWASP Top 10).
• Experience with SAST and DAST tools (e.g., Checkmarx, Veracode, Burp Suite).
• Knowledge of secure coding principles and practices across various programming languages (e.g., Java, Python, C#).
• Familiarity with API security concepts.
• Excellent analytical and problem-solving skills.
• Strong communication and collaboration abilities, essential for working with development teams in **Makurdi**.
• Ability to explain technical security concepts clearly to both technical and non-technical audiences.
• Relevant certifications like CSSLP or CEH (AppSec track) are a plus.

• Plan, execute, and report on information security audits across various IT systems and business units.
• Assess compliance with internal security policies, industry standards, and regulatory requirements (e.g., NDPR, GDPR).
• Identify security control deficiencies and provide practical recommendations for remediation.
• Evaluate the effectiveness of existing security measures, including access controls, data protection, and incident response capabilities.
• Review IT general controls and application controls for security-related risks.
• Collaborate with IT, risk management, and business units to understand their security needs and challenges.
• Document audit findings, observations, and recommendations clearly and concisely.
• Track the implementation of audit recommendations and verify their effectiveness.
• Stay informed about evolving compliance requirements and security threats relevant to our client's industry.
• Assist in developing and refining audit methodologies and tools.

• Bachelor's degree in Accounting, Information Systems, Computer Science, or a related field.
• Minimum of 3 years of experience in information security auditing, risk assessment, or IT compliance.
• Solid understanding of information security principles, frameworks (ISO 27001, NIST CSF), and audit methodologies.
• Knowledge of data privacy regulations and compliance requirements.
• Experience with risk assessment techniques and control testing.
• Excellent analytical and problem-solving skills with a keen attention to detail.
• Strong report writing and presentation skills.
• Ability to manage multiple audit projects simultaneously.
• Professional certifications such as CISA, CRISC, or CISSP are highly desirable.
• Proactive attitude and ability to work both independently and collaboratively in **Ado-Ekiti, Ekiti, NG**.

• Design and implement secure cloud architectures that align with business objectives and security requirements.
• Develop and enforce cloud security policies, standards, and guidelines.
• Implement and manage cloud security controls, including identity and access management (IAM), encryption, and network security groups.
• Perform security reviews of cloud deployments and architectures to identify risks and vulnerabilities.
• Develop strategies for data protection, threat detection, and incident response in cloud environments.
• Collaborate with cloud engineering and DevOps teams to embed security throughout the development lifecycle (DevSecOps).
• Stay current with emerging cloud security threats, best practices, and technologies.
• Provide expert guidance and consultation on cloud security best practices to project teams.
• Develop and maintain documentation for cloud security architecture, policies, and procedures.
• Lead security initiatives related to cloud adoption, migration, and optimization.

• Bachelor's degree in Computer Science, Information Security, or a related field; Master's degree preferred.
• Minimum of 7 years of experience in information security, with at least 4 years focused on cloud security architecture.
• Proven experience designing and implementing security solutions in AWS, Azure, and/or GCP.
• Deep understanding of cloud security principles, including IAM, network security, data encryption, and compliance.
• Experience with cloud security tools and services (e.g., Security Hub, Azure Security Center, Cloudflare).
• Knowledge of infrastructure as code (IaC) and security automation.
• Strong understanding of networking concepts and security protocols.
• Excellent analytical, problem-solving, and architectural design skills.
• Exceptional communication and leadership skills, capable of influencing stakeholders in a remote setting.
• Relevant cloud security certifications (e.g., AWS Certified Security - Specialty, Azure Security Engineer Associate, CISSP-ISSAP) are highly desirable.

• Develop, implement, and maintain the information security governance framework, policies, standards, and procedures.
• Conduct regular information security risk assessments and develop risk mitigation plans.
• Monitor and ensure compliance with relevant industry regulations, legal requirements, and internal policies.
• Manage the information security incident response program, including planning, testing, and execution.
• Oversee the security awareness training program for all employees.
• Act as a point of contact for internal and external auditors regarding security matters.
• Evaluate and manage third-party security risks.
• Stay abreast of evolving threats, vulnerabilities, and regulatory changes impacting information security.
• Collaborate with legal, compliance, and business units to ensure a unified approach to risk management.
• Develop and maintain security metrics and reporting for senior management.

• Bachelor's degree in Information Security, Computer Science, Business Administration, or a related field.
• Minimum of 5 years of experience in information security, with a significant focus on governance, risk management, and compliance (GRC).
• Strong understanding of information security frameworks such as ISO 27001, NIST, COBIT.
• Proven experience in conducting risk assessments and developing security policies and procedures.
• Knowledge of data privacy regulations (e.g., GDPR, CCPA, NDPR).
• Experience with incident response planning and management.
• Excellent analytical, problem-solving, and decision-making skills.
• Strong communication, presentation, and interpersonal skills, crucial for a remote role.
• Ability to work independently, manage multiple priorities, and meet deadlines.
• Relevant certifications such as CISSP, CISM, CISA, or CRISC are highly desirable.

• Monitor and assess the organization's compliance with information security policies, standards, and regulatory requirements (e.g., HIPAA, GDPR, NDPR).
• Conduct regular compliance audits and gap analyses to identify areas for improvement.
• Assist in the development and implementation of corrective action plans for identified compliance issues.
• Support the review and update of security policies and procedures to align with evolving regulations and best practices.
• Collaborate with IT and business units to ensure security controls are effectively implemented and maintained.
• Participate in security risk assessments and help manage the risk register.
• Assist in preparing for and responding to external audits and regulatory inquiries.
• Track and report on compliance metrics and key performance indicators.
• Stay informed about changes in relevant laws, regulations, and industry standards.
• Provide guidance and support to staff on information security compliance matters.

• Bachelor's degree in Information Technology, Computer Science, Law, or a related field.
• 2-4 years of experience in information security, compliance, risk management, or audit.
• Knowledge of healthcare regulations such as HIPAA is highly desirable; experience with other data privacy regulations is also valuable.
• Familiarity with information security frameworks and best practices (e.g., ISO 27001, NIST).
• Strong analytical and problem-solving skills with attention to detail.
• Excellent written and verbal communication skills.
• Ability to work effectively in a hybrid work environment and collaborate with cross-functional teams.
• Proficiency in using standard office software and familiarity with compliance management tools is a plus.
• Understanding of IT controls and security principles.
• Proactive attitude and a commitment to maintaining high standards of compliance.

• Design and develop secure enterprise architectures, ensuring security requirements are met.
• Evaluate and recommend security technologies and solutions to enhance the organization's security posture.
• Develop security standards, patterns, and best practices for infrastructure and application development.
• Lead security design reviews for new projects and systems.
• Provide technical guidance and mentorship to IT and security teams on security architecture matters.
• Collaborate with stakeholders to understand business requirements and translate them into security solutions.
• Develop and maintain security architecture documentation, including diagrams and policies.
• Stay abreast of emerging security threats, technologies, and industry trends.
• Contribute to risk assessments and the development of mitigation strategies.
• Ensure compliance with relevant security regulations and standards.

• Master's degree or equivalent experience in Computer Science, Cybersecurity, Information Technology, or a related field.
• Minimum of 8 years of experience in information security, with a significant focus on security architecture and design.
• Proven experience in designing and implementing complex security solutions across enterprise environments.
• Deep understanding of security domains including network security, cloud security (AWS, Azure), application security, cryptography, and identity management.
• Experience with security frameworks (ISO 27001, NIST) and best practices.
• Proficiency in architectural modeling tools and methodologies.
• Excellent analytical, problem-solving, and strategic thinking skills.
• Strong communication and presentation skills, with the ability to influence stakeholders.
• Relevant certifications such as CISSP-ISSAP, SABSA, or TOGAF are highly desirable.
• Experience working in a hybrid environment and managing multiple complex projects.

• Highly competitive annual salary of NGN.
• Hybrid work model offering excellent work-life balance.
• Comprehensive health, dental, and vision insurance.
• Significant opportunities for professional development and career advancement.
• Performance bonuses and long-term incentive plans.
• Access to state-of-the-art security technologies.
• Collaborative and innovative work culture in Enugu .
• Generous paid time off and company holidays.
• Retirement savings plan.
• Company-provided resources for continuous learning.