Information Security Officer / Data Protection Officer

Kimberly Ryan Limited is seeking an experienced Information Security Officer / Data Protection Officer to establish, maintain, and improve its Information Security Management System (ISMS), ensuring information security and data protection compliance

Job Details

• Location: Victoria Island, Lagos
• Job Type: Full-time
• Job Field: Technology
• Application Deadline: 3rd November, 2026

Key Responsibilities

• Implement information security policies, strategies, and procedures
• Oversee data protection compliance and maintain relevant policies and procedures
• Conduct information security risk assessments and Data Protection Impact Assessments (DPIAs)
• Manage data subject requests and liaise with regulators and internal stakeholders
• Conduct compliance reviews, audits, and coordinate Vulnerability Assessment and Penetration Testing (VAPT)
• Ensure security controls, segregation of duties, and maker-checker controls across systems
• Manage security incidents, system checks, and application/API testing using Swagger and Postman
• Develop SQL queries for EOD, EOM, and EOY reports, and schedule monitoring jobs using Oracle and ACL
• Identify process automation and security control improvements
• Coordinate risk assessments, maintain the risk register, monitor key risk indicators, and prepare quarterly reports
• Follow up on audit and risk action items and support internal, internal control, and financial control reviews
• Monitor performance against targets and recommend risk mitigation measures

Requirements

• Bachelor's degree in Accounting, Finance, Information Technology, Computer Science, or Computer Engineering, with a minimum of Second-Class Upper division
• At least 5 years of post-qualification experience in Information Security and Data Protection, preferably within the Nigerian capital market
• Relevant certifications such as CEH, CISA, CRISC, CISM, CIPP, CDPO, or applicable ISO certifications
• Knowledge of cybersecurity frameworks, data protection regulations, NDPR, and applicable Nigerian data protection laws
• Strong analytical, problem-solving, risk assessment, and reporting skills
• Technical proficiency in vulnerability assessment, database access controls, SQL, Oracle, ACL, and application/API testing tools
• Knowledge of Governance, Risk, and Compliance (GRC) tools and internal control frameworks
• Excellent written and verbal communication skills

How to Apply

Apply below via the JobClave with your updated Resume/CV

Application Deadline: 3rd November, 2026