Chief Information Security Officer (CISO)

Capitalfield Investment Group Limited is seeking a strategic and results-oriented professional for the position of Chief Information Security Officer (CISO). Located in Lagos, this executive role is responsible for leading and strengthening the enterprise-wide cybersecurity program. The CISO will design information security strategies, manage cyber risks, ensure strict regulatory compliance, and safeguard the organization's information assets, digital platforms, and customer data.

• Strategy & Roadmaps: Develop and execute the Group's Information Security Strategy and comprehensive cybersecurity roadmap.

• Governance & Risk: Lead cybersecurity governance, policy development, and compliance monitoring while establishing enterprise cyber risk management frameworks and risk assessments.

• Security Architecture: Oversee security architecture and ensure security-by-design principles are fully integrated across all technology initiatives.

• Operations Oversight: Provide strategic oversight for security operations, active threat monitoring, incident response, and vulnerability management.

• Access Control: Govern Identity and Access Management (IAM), including RBAC, PAM, and MFA controls.

• Regulatory Compliance: Ensure alignment with critical regulatory and industry standards, including NDPA, CBN Guidelines, PCI-DSS, and ISO 27001.

• Vendor & Executive Reporting: Manage third-party security risk assessments and vendor reviews, and regularly report cybersecurity risks and security posture to Executive Management and Board Committees.

• Degree: Bachelor's Degree in Computer Science, Information Security, ICT, Engineering, or a related field. A Master's Degree is considered an added advantage.

• Professional Certifications: Candidates must possess at least two of the following certifications: CISSP, CISM, CRISC, ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CCSP, or CEH.

• Tenure: Minimum of 10 years of professional experience in Information Security.

• Leadership: At least 5 years operating in a senior cybersecurity leadership role.

• Industry Domain: Proven track record of experience within banking, fintech, payments, insurance, or general financial services.

• Domain Expertise: Demonstrated expertise across cybersecurity governance, risk management, security operations, regulatory compliance, and audit management.

• Compensation: Remuneration is designated as Very Attractive.

• Organization: Join a prominent financial framework with an established corporate ecosystem.