Chief Information Security Officer (CISO)

Cardstel is a smartcard manufacturing and commercial printing services provider of choice. We offer a unique blend of secure printing and personalisation solutions tailored-to-fit the specific needs of our customers. Weather it be customized payment card solution with IC chips, Magstripe (HICO/LOCO), holographic embossment, UV die or Multiple Pin Recharge Card or Glossy finish Printing, our State-of-the-art equipments.

We are recruiting to fill the position below:


Job Position: Chief Information Security Officer (CISO)
Location: Lagos
Position Summary


  • This is a senior leadership position responsible for establishing and maintaining a comprehensive, system-wide information security program to ensure that information assets are adequately protected.
  • This includes aspects of corporate and regulatory compliance, administrative functions, risk management, as well as physical and technical security of corporate IT infrastructure and Cardstel’s backbone network systems.
  • Supervisory Responsibilities (in relation to other staff): Line managing a team of two security experts.

Main Responsibilities
The majority of the work involves:

  • Line managing a team of security experts, who will take responsibility for the implementation of advanced security features as well as providing support in the handling of high profile and escalated security incidents
  • Overseeing and/or assisting in performing on-going security monitoring and continuous improvement of information systems including risk assessment, gap analyses, new security capabilities assessments and recommendations
  • Establishing and maintaining processes to ensure that all users are trained to conduct themselves in a manner which ensures they fulfill their IT/IS security responsibilities
  • Oversee regulatory compliance, establish and implement cyber security-related policies and establish and oversee the organization's security architecture

Working closely with:

  • IT and software development staff to ensure that all solutions/software proposed by their teams are compliant with security policies
  • Chief Network Operations Officer to ensure that all the network services are compliant with security policies
  • Head of Operations to support the handling of security incidents
  • Senior executives to establish disaster recovery (DR) and business continuity plan

Person Specification, Qualifications, Skills, Experience and Knowledge Required (Essential)

  • Bachelor's Degree (Masters preferred) in Computer Science, Computer Information Systems, Management Information Systems, Business Administration, or other related field required
  • Significant experience in a large, complex environment with primary focus of activities in information security, with at least two years in a direct, senior leadership role with information security
  • Ability to lead the development/adoption and collaboratively enforce comprehensive information security policies, procedures and standards
  • Broad and current understanding of security risks and controls
  • Demonstrable experience of working closely with IT/IS functions to establish pragmatic/optimum security infrastructure solutions to identified risks
  • Proficient in taking complex/technical subject matter and refining/presenting to the business at any level so as to result in understanding and appreciation

Personal Skills and Attributes:

  • Proven experience in communicating effectively with senior management, especially when sensitive issues are involved
  • Strong relationship building and collaboration skills
  • Flexibility and willingness to partner with key stakeholders
  • Entrepreneurial look at bringing security solutions to the community

Desirable:

  • Specialization in information security or forensics preferred
  • CISSP, CISM, CISA, CCSK, PCI DSS qualifications
  • Working knowledge of ISO 27001, Data Protection and other regulatory environments
  • ITIL V3, CobiT, COSO