About the role
Moniepoint Inc. is Africa’s all-in-one financial ecosystem providing payments, banking, credit, and business-management tools. This role sits on the Information Security Assurance Team and owns identifying, monitoring, and reporting security and technology operational risks across the fintech ecosystem. You will translate risk data into actionable intelligence for executive leadership while ensuring regulatory compliance and operational resilience.
What you'll do
- Conduct comprehensive risk assessments across security and technology domains using NIST RMF, FAIR, and qualitative/quantitative methods.
- Perform Business Impact Analysis on critical systems to determine RTOs and RPOs, collaborating with process owners.
- Administer and maintain the security risk register with current and historical records for regulatory examinations and audits.
- Guide the development and documentation of risk treatment plans aligned with enterprise risk appetite, coordinating with cross-functional stakeholders.
- Track execution of risk treatment plans, monitor completion, escalate delays, and ensure residual risk remains within tolerance.
- Design and maintain quantifiable risk metrics and real-time dashboards for executive decision-making.
What they're looking for
- Bachelor's degree in Computer Science, Information Security, Risk Management, Engineering, or related field.
- 5+ years of professional experience in operational risk management, cybersecurity risk, or technology risk assessment.
- Demonstrated experience conducting risk assessments, threat analysis, or vulnerability management.
- Experience developing risk metrics, KPIs, or dashboards for executive audiences.
- Familiarity with risk management frameworks such as NIST CSF, ISO 27001 or similar.
- Professional certifications such as CISM, CRISC, or equivalent risk/security certification (preferred).
For applicants in Nigeria
- Remote role based in Nigeria; eligibility is listed as eligible.
- The listing does not state a timezone requirement - confirm before interviewing.
- The listing does not specify contractor versus employee status - confirm during interview.
- The listing does not state pay currency or range - confirm during interview.
- Eligibility is noted, but visa or work-authorization details are not provided; confirm if needed.
Summarized by RemoteWork from the original listing. Always confirm details on the employer’s page.