Data Protection Officer / Information Security Officer (ISO/DPO) at ICS Outsourcing Limited

• We are looking for an experienced and proactive Information Security & Data Protection Officer to lead the protection of our digital assets, safeguard customer data, and drive our Information Security Management System (ISMS).
• In this dual-impact role, you will oversee end-to-end data privacy compliance (NDPR), manage cybersecurity risk, perform technical control assessments, and collaborate directly with executive leadership to ensure our technology ecosystem remains secure, resilient, and compliant.

Key Responsibilities

• Data Protection & Compliance: Lead the company's data privacy strategy, conduct Data Protection Impact Assessments (DPIAs), manage data subject requests, and enforce compliance with NDPR and relevant laws.
• Information Security & Risk Management: Establish and continually improve our ISMS. Perform periodic risk assessments, execute vulnerability assessments (VAPT), and implement risk treatment plans.
• Incident & Access Control: Oversee security incident management workflows, enforce segregation of duties (maker-checker controls), and monitor database access controls.
• Technical Oversight & Monitoring: Conduct daily application server checks, develop SQL/Oracle scripts for automated reporting, and perform API/application security testing.
• Stakeholder & Audit Collaboration: Serve as the main point of contact for regulatory bodies and internal/external auditors, while collaborating across business units to build key risk indicators (KRIs) and risk registers.

Key Requirements

• Education: B.Sc. in Computer Science, IT, Computer Engineering, Finance, or a related field (Minimum 2:1).
• Experience: 5+ years of hands-on experience in Information Security and Data Protection roles (experience in the Nigerian Capital Market or Financial Services is highly preferred).
• Certifications: At least one relevant professional certification (e.g., CISA, CISM, CRISC, CEH, CDPO, CIPP, or ISO 27001 Lead Auditor/Implementer).
• Technical Skills: Deep knowledge of information security frameworks, NDPR regulations, GRC tools, SQL/database scripting, and vulnerability testing tools (Swagger, Postman, etc.).
• Soft Skills: Exceptional analytical problem-solving, strong communication, and the ability to partner effectively with executive leadership.