Information Security GRC Officer

Information Security GRC Officer LocationLagos; Kenya; South AfricaEmployment TypeFull timeLocation TypeRemoteDepartmentPaystackAbout PaystackPaystack’s mission is to help merchants in Africa get paid by anyone, anywhere in the world. Tens of thousands of notable corporations and businesses in Africa use Paystack’s modern payments infrastructure, including MTN, Bolt, Domino’s Pizza, Smile Communications, AXA Mansard Insurance, and many others.Within over 9 years, our close-knit team has introduced a steady cadence of innovations within the African Payment space, such as automated recurring payments, the ability for customers to pay with only a bank account, automated chargebacks, and much more. We process well over $300 million in transactions monthly, and our double-digit growth has us processing even more every month.We’ve pioneered a new era of simple, powerful technology tools for businesses in Africa, and as we prepare for a period of accelerated growth, we’re looking to you to help build a solid foundation upon which we can support some of the continent’s best-performing businesses.At Paystack, we believe that we will win by recruiting talented people and giving them the space, resources, and support to do the best work of their lives. We hire the most capable people, treat them with genuine respect, and give them the means to succeed. And we’d love your help!As a leader of the Information Security function at Paystack, you will contribute to the business by presenting your technical expertise with a balanced approach to communication and a bias for action. You will be required to work with our leadership teams at all levels of the company to drive solutions that impact our platform for the good of Paystack and ultimately, our customers and stakeholders. You will leverage your experience across various tools and processes to establish policies and standards across the company.What you’ll doAs a member of the security team, you will contribute to the Security Organization by presenting your technical expertise with a balanced approach to communication and a bias for action. You will be required to work with a team of information security professionals, other teams within Paystack, and Paystack's customers to map out and effect change across Paystack’s information security landscape. You will leverage your experience across various tools and processes to establish policies and standards across the company.Job ResponsibilitiesThe responsibilities of a security analyst (GRC) at Paystack include:Contributing to establishing strategic information security objectives across Paystack.Contributing to the strategic direction for Security Governance, Risk Management, and Compliance that aligns with the overarching Security objectives of the companyUnderstanding the unique challenges of securing the Paystack platform across different markets and demographicsIdentifying control gaps and testing the design of existing controlsDetermining risk management controls and recommending improvements to company-wide controlsAbility to work effectively with a team to execute various security projects, evaluate controls, and plan around solutionsAbility to communicate effectivelyAbility to own and manage portions of the security program and provide consistent status updates to Security Leadership regarding progress against objectivesRaise accountability by escalating issues in a timely manner and creating and maintaining detailed documentationStay up-to-date with trends in the information security communityOperate with a sense of ownership, urgency, and driveAbility to distill controls across multiple regulatory requirements and frameworks for visibility into defence mechanisms, strengths, and gapsContribute to the development of our Internal vendor risk management program; this involves working with vendors and partners to ensure they have appropriate controls in placeDocumenting exceptions to establish security policies, guidelines, and...