Practice Lead, Cybersecurity

Heirs Technologies Limited empowers Africa’s Digital Transformation through innovative and locally tailored solutions. We partner to help build your business on technology designed for Africa and benchmarked against global standards, whether you are modernizing operations, strengthening resilience, or accelerating growth. We are recruiting to fill the position below:

Job Title: Practice Lead, Cybersecurity

Location: Lagos

Job Type: Full-Time

Job Description

The Practice Lead, Cybersecurity is the executive leader responsible for protecting the enterprise, enabling secure business growth, and ensuring the resilience of all digital platforms, products, and infrastructure across Heirs Technologies and its ecosystem. This is a strategic and operational leadership role, accountable for building a world-class, risk-driven cybersecurity capability that safeguards: Customer data and digital banking platforms (e.g., RedApp) Enterprise platforms (e.g., Converge) Infrastructure, cloud environments, and integrations The CISO will operate at the intersection of technology, risk, and business, ensuring security is not a blocker but a business enabler for growth, trust, and market expansion. Enterprise Security Strategy & Leadership: Define and execute a Group-wide cybersecurity strategy aligned to business growth and risk appetite Position cybersecurity as a business enabler for revenue, client trust, and market expansion Lead and scale a high-performing security organisation (GRC, SOC, Engineering, DevSecOps) Provide regular Board and EXCO reporting on cyber risk posture and mitigation Platform & Product Security (Critical for HT): Ensure end-to-end security of: Digital Banking platforms (RedApp) Enterprise platforms (Converge) Embed security-by-design across all products and engineering squads Drive DevSecOps adoption across the SDLC Outcome: Secure, scalable products that support revenue and client growth: Cyber Risk Management & Governance: Establish and enforce a risk-based cybersecurity framework Identify, assess, and mitigate risks across: Applications Infrastructure Third-party integrations Oversee data protection (PII, financial data, enterprise data) Security Operations & Incident Response: Build and lead a 24/7 SOC capability (in-house or managed) Oversee: Threat detection (SIEM, EDR) Vulnerability management Penetration testing and red teaming Lead cyber incident response and crisis management Outcome: Rapid detection, containment, and recovery from threats: Regulatory Compliance & External Engagement: Ensure compliance with: NDPA / NDPR CBN Cybersecurity Framework ISO 27001, PCI-DSS (where applicable) Serve as primary interface with regulators (CBN, SEC, NITDA, NCC) Drive audit readiness and certification programmes Cloud, Infrastructure & Identity Security: Secure cloud environments (AWS, Azure, GCP) Implement: Zero Trust architecture Identity & Access Management (IAM) Oversee endpoint, network, and infrastructure security Third-Party & Ecosystem Security: Lead vendor and partner security risk management Conduct security due diligence for all integrations and platforms Ensure ecosystem security across: Fintech partners Infrastructure vendors Security Culture & Awareness: Drive enterprise-wide cybersecurity awareness programmes Embed security into employee behaviour, engineering culture, and leadership mindset Lead initiatives such as: Phishing simulations Secure usage practices Experience &