Business Information Security Officer

Who we are

Moniepoint is a financial technology company digitising Africa’s real economy by building a financial ecosystem for businesses, providing them with all the payment, banking, credit and business management tools they need to succeed. 

About the role

We are seeking a highly skilled and experienced Business Information Security Officer (BISO) to serve as the primary liaison between the Information Security team and specific business units. The BISO will be responsible for ensuring that the business unit's information security needs are met, aligning security initiatives with business objectives, and promoting a culture of security awareness. The ideal candidate will have a strong background in information security, risk management, and business operations.

Key Responsibilities:

Security Strategy and Integration:

• Develop and implement tailored information security strategies and programs for the business unit.
• Ensure that business unit initiatives align with the overall enterprise security strategy and policies.
• Identify and prioritize security requirements based on business goals and risk assessments.

Risk Management:

• Conduct regular risk assessments and vulnerability analyses specific to the business unit 
• Develop risk mitigation plans and collaborate with the business unit to implement them 
• Monitor and report on the status of risk management activities and risk exposure

Compliance and Governance:

• Ensure that the business unit complies with relevant information security regulations, standards, and policies..
• Assist in audits and assessments related to information security within the business unit.
• Maintain documentation and provide evidence of compliance efforts.

Incident Management:

• Coordinate with the Security Operations Center (SOC) to ensure effective incident detection and response.
• Lead the business unit's response to security incidents and breaches, including investigation and remediation efforts.
• Develop and maintain incident response plans tailored to the business unit

Security Awareness and Training:

• Develop and implement security awareness programs tailored to the business unit.
• Conduct regular training sessions and security drills for business unit employees.
• Promote a culture of security awareness and best practices within the business unit

Collaboration and Communication:

• Serve as the primary point of contact between the Information Security team and the business unit.
• Provide regular updates to business unit leaders on the status of information security initiatives.
• Collaborate with other BISOs and the Information Security team to share insights and best practices.

Continuous Improvement:

• Stay current with the latest cybersecurity trends, threats, and technologies relevant to the business unit.
• Continuously evaluate and improve the business unit’s information security posture.
• Participate in professional development and industry forums to enhance knowledge and skills.

Skills and Qualifications

• Bachelor’s degree in Information Security, Computer Science, Business Administration, or a related field. Master’s degree preferred.
• Minimum of 5 years of experience in information security, with at least 2 years in a role involving business unit collaboration.
• Proven experience in developing and implementing information security programs within a business context.
• Relevant certifications such as CISSP, CISM, CISA, or CRISC are highly desirable.
• Strong understanding of information security principles, frameworks, and best practices.
• Experience with security technologies such as firewalls, intrusion detection/prevention systems, SIEM, and encryption.
• Knowledge of risk management and compliance requirements in various industries.
• Ability to understand and align with business unit objectives and priorities.
• Strong analytical and problem-solving skills to address security challenges in a business context.
• Excellent communication and interpersonal skills to effectively collaborate with business leaders and stakeholders.

What to expect in the hiring process

• A preliminary phone call with the recruiter 
• A Panel Interview
• A behavioural and technical interview with a member of the Executive team.

Moniepoint is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees and candidates.