Chief Information Security Officer (CISO)

About the Role

Payment Access System Limited (PaySys) is seeking a Chief Information Security Officer (CISO) to establish, implement, and oversee the company's enterprise-wide information security, cybersecurity, and data protection strategy. In a fintech environment, the CISO will ensure the confidentiality, integrity, and availability of financial systems, customer data, digital platforms, and emerging technologies while supporting regulatory compliance and business growth.

Key Responsibilities

• Develop and implement a comprehensive information security and cybersecurity strategy aligned with business objectives
• Establish and maintain security governance frameworks, policies, standards, and procedures
• Advise executive management and the Board on cybersecurity risks, trends, and mitigation strategies
• Lead the organization's security roadmap, including cloud security, API security, mobile applications, and payment systems
• Identify, assess, and manage information security risks across products, platforms, and third-party vendors
• Ensure compliance with applicable regulations and standards (PCI-DSS, ISO 27001, GDPR, NDPR, SOC 2, AML/KYC data controls)
• Oversee internal and external security audits, penetration testing, and vulnerability assessments
• Manage third-party and vendor security risk assessments
• Oversee Security Operations Center (SOC) activities, incident detection, response, and recovery
• Lead incident response planning, breach investigations, and post-incident reviews
• Ensure robust identity and access management (IAM), encryption, and data loss prevention (DLP) controls
• Monitor and improve security posture for cloud, on-premise, and hybrid environments
• Collaborate with Engineering, IT, and Product teams to embed security-by-design and privacy-by-design principles
• Review and approve security architecture for new fintech products, integrations, and platforms

Location

Abuja, Nigeria