Chief Information Security Officer - Nigeria - Vice President

Job Description

Cybersecurity is at the heart of everything we do at JP Morgan Chase. In a world of evolving threats and increasing regulatory complexity, we are looking for a bold, experienced security leader who can protect our people, our clients, and our institution, while helping shape the future of secure banking in Nigeria.

As the Nigeria Chief Information Security Officer (CISO) at JP Morgan Chase within the Cybersecurity function of our Nigeria Merchant Bank, you will own and drive the cybersecurity programme for our Nigeria legal entity, ensuring alignment with both local regulatory requirements and the firm's global security standards. You will serve as the Central Bank of Nigeria (CBN)-approved person for cybersecurity, reporting directly to the Managing Director and Chief Executive Officer of the Nigeria legal entity, while maintaining a regional dotted-line relationship with the Central & Eastern Europe, Middle East and Africa (CEEMEA) Cybersecurity Country Lead. This is a high-impact, highly visible role that sits at the intersection of regulatory accountability, enterprise risk management, and strategic leadership, offering you the opportunity to build and lead a best-in-class cybersecurity programme in one of Africa's most dynamic financial markets. .

Job Responsibilities

• Oversee and implement the Board-approved cybersecurity programme and strategy, translating enterprise-wide security objectives into operational practice for the Nigeria legal entity
• Develop and maintain cybersecurity policies, secure business and communication practices, and performance metrics that reflect both local regulatory requirements and global firm standards
• Lead the end-to-end cybersecurity risk management lifecycle, including risk assessments, vulnerability management, penetration testing oversight, and remediation tracking
• Direct incident response planning and execution, ensuring timely identification, containment, and recovery from cybersecurity events, with associated loss and recovery reporting
• Maintain the institution's data privacy posture in line with the Nigeria Data Protection Act (NDPA) 2023 and other applicable regulations
• Deliver regular, clear, and actionable cybersecurity reports to the Board and Senior Management, covering risk status, programme effectiveness, incident summaries, and compliance against Board-approved thresholds
• Collaborate closely with the regional and group cybersecurity functions to ensure an effective, enterprise-wide security programme while preserving local regulatory accountability
• Drive security awareness and training initiatives across the Nigeria legal entity, ensuring all employees meet periodic training requirements
• Recommend and support the acquisition of security products, tools, and capabilities necessary to advance the institution's cybersecurity maturity
• Engage proactively with the CBN and other regulators, managing supervisory review and evaluation exercises and ensuring timely remediation of regulatory findings

Required Qualifications, Capabilities, and Skills

• Formal training or certification on software engineering concepts and 5+ years applied experience
• Significant, progressive experience in information security or cybersecurity, with experience in financial services or banking
• Demonstrated experience building, leading, and maturing enterprise cybersecurity programmes, including incident response, vulnerability management, and regulatory reporting
• Strong working knowledge of the Nigerian regulatory environment, including CBN guidelines, the Banks and Other Financial Institutions Act (BOFIA) 2020, and the Nigeria Data Protection Act (NDPA) 2023
• Proven ability to engage and influence senior stakeholders, including Boards, Senior Management, regional functions, and regulators, with excellent written and verbal communication skills
• Familiarity with international cybersecurity standards and frameworks (e.g., NIST, ISO 27001) and the ability to apply them in a regulated financial services context
• Demonstrated independent judgment and the ability to operate with authority and accountability in a dual-reporting structure

Preferred Qualifications, Capabilities, and Skills

• Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Chief Information Security Officer (CCISO), or equivalent
• Advanced degree in Computer Science, Information Security, or a related discipline
• Experience navigating CBN Approved Persons' Regime processes and regulatory approval workflows
• Prior experience as a CISO or senior cybersecurity leader within a multinational financial institution operating in an emerging market
• Familiarity with the CBN Risk-Based Cybersecurity Framework and Guidelines for Deposit Money Banks and Payment Service Banks (2024)

Additional Information

Appointment to this position is subject to approval under the CBN Approved Persons' Regime. The appointment process requires Board endorsement of the selected candidate, followed by formal CBN approval prior to the incumbent assuming the role. This requirement is consistent with Section 1.4 of the CBN Risk-Based Cybersecurity Framework and Guidelines for Deposit Money Banks and Payment Service Banks (2024).

JP Morgan Chase is an equal opportunity employer. Employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, or any other characteristic protected by applicable law. We are committed to fostering a diverse and inclusive workplace for all.

About the team

Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we’re setting our businesses, clients, customers and employees up for success.

About us

J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world’s most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives.

We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants’ and employees’ religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation.