Information Security Governance Engineer

Role Overview

Develop and maintain information security policies, standards, and procedures. Ensure alignment with recognized frameworks and standards. Define security governance structures and roles.

What You Will Do

Support risk assessments, maintain the security risk register, advise business units on risk acceptance, and track remediation activities. Ensure compliance with applicable laws and regulations.

Why It Might Be a Fit

Requires 5-9 years of experience in information security governance, risk, and compliance. Strong understanding of risk management methodologies and control frameworks.

Requirements

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or a related field
• Minimum of 5–9 years’ experience in information security governance, risk, and compliance (GRC)
• Hands-on experience implementing or managing security frameworks (e.g., ISO 27001, CBN Cybersecurity Framework, NDPR, PCI DSS)
• Strong understanding of risk management methodologies and control frameworks
• Experience working with audits, compliance reviews, and regulatory requirements
• Familiarity with security tools and platforms supporting governance and compliance activities