Senior Specialist: Information Security GRC

Job Description

Requirements

• 5+ years of experience in information security, with a focus on GRC
• Professional certifications such as CISSP, CISM, CISA, or ISO 27001 Lead Implementer/Auditor
• Strong knowledge of security frameworks including ISO 27001, PCI-DSS, NIST, and SOC 2
• Experience with risk management methodologies and tools
• Understanding of African and international data protection regulations
• Excellent analytical, communication, and report-writing skills
• Experience in fintech, banking, or payments industry preferred
• Ability to work in a fast-paced, multi-country environment

Responsibilities

• Develop, implement, and maintain information security governance frameworks, policies, and standards
• Conduct risk assessments and manage the information security risk register across all operating markets
• Ensure compliance with relevant regulatory requirements (PCI-DSS, ISO 27001, GDPR, and local data protection laws)
• Lead security audits, assessments, and third-party vendor risk reviews
• Monitor and report on the information security risk posture to senior leadership
• Develop and deliver security awareness training programmes for staff
• Coordinate incident response activities and manage security incident reporting
• Liaise with regulators, auditors, and certification bodies on compliance matters