Cybersecurity and Compliance Expert

Job Title: Cybersecurity and Compliance Expert

Cybersecurity and Compliance Expert at SterlingPRO Business Application Limited

⏲

Sep 17, 2026, 6:05 AM

⋕

View all Cybersecurity & Networking jobs

SterlingPRO Business Application Limited is a leader in developing innovative fintech solutions that power the future of finance. We are a team of experts passionate about technology and driven by a mission to create seamless, secure, and inclusive financial experiences. We offer a dynamic and challenging environment where your work will have a direct impact on the security of millions of transactions.

We are recruiting to fill the position below:

Location: Maryland (Mende), Lagos

Employment Type: Full-time

Key Responsibilities

• Security Operations & Incident Response:
• Support business continuity, disaster recovery planning, testing, and security governance activities to ensure the uninterrupted availability of SterlingPRO’s POS, ATM, and Agency banking solutions.
• Strengthen security across Azure/AWS environments, endpoints, collaboration platforms, and emerging technologies (including secure handling of biometric and payment data).
• Manage identity security controls including MFA, Conditional Access, privileged access management (PAM), and identity risk monitoring to protect administrative access to core financial systems.
• Manage MSSP and SOC providers, ensuring service quality, performance, and compliance with agreed SLAs.
• Identity, Cloud & Data Security
• Develop and optimise SIEM use cases, detection rules, alert management, and security monitoring processes tailored to financial transaction patterns.
• Develop and maintain incident response procedures and coordinate security exercises and tabletop testing activities, specifically simulating payment fraud and data breach scenarios.
• Lead security monitoring, threat detection, incident response, and SOC governance activities, ensuring 24/7 coverage for SterlingPRO’s payment applications.
• Implement and oversee data classification, data protection, and access control frameworks to secure Personally Identifiable Information (PII) and financial data in transit and at rest.
• Compliance & Governance:
• Develop, review, and maintain security policies, standards, and procedures, ensuring they are technically enforceable and auditable.
• Ensure compliance with client, contractual, and regulatory security requirements, including the Central Bank of Nigeria (CBN) guidelines, Nigeria Data Protection Commission (NDPC) regulations, and other applicable laws.
• Manage end-to-end compliance with PCI DSS standards, aligning with the latest PCI DSS v4.0 requirements, including continuous monitoring and risk-based security management.
• Lead audits and regulatory reviews, managing remediation activities and tracking compliance findings to closure.
• Interpret and implement global standards such as ISO 9564-1 for PIN management and EMVCo's security

Requirements

• for payment systems.
• Understand fintech Structure and security architecture Requirements.
• Vulnerability & Threat Management:
• Champion operational resilience, ensuring the organization can maintain critical functions during and after a security incident.
• Manage the vendor risk management process, conducting thorough security assessments of third-party vendors and partners.
• Establish a robust vulnerability management program, coordinating penetration testing and overseeing the remediation of identified weaknesses.
• Conduct technology risk assessments for all new and existing products.
• Monitor security events using SIEM platforms, leading incident response, threat hunting, and digital forensics activities.
• DevSecOps&Third-Party Security:
• Integrate security controls into CI/CD pipelines (SAST, DAST, SCA), working directly with engineering teams to promote secure coding practices.
• Manage supplier security assessments and third-party risk assurance activities for vendors supporting our payment ecosystem.
• Education& Certifications:
• Standards: Expert knowledge of PCI DSS, ISO 27001, NIST, and OWASP.
• Educational Background: Bachelor’s degree in Cybersecurity, Computer Science, Information Technology,a related field; or equivalent proven experience. A Master’s degree or MBA is a plus.
• Certifications: One or more of the following is highly

Preferred Qualifications

• CISSP, CISM, CISA, CRISC, or ISO 27001 Lead Implementer/Auditor.
• Professional

Experience

Strong understanding of Zero Trust architecture, identity security, cloud security, and DevSecOps principles.

Working knowledge of ISO 27001, SOC 2, risk management frameworks, and audit processes.

Strong knowledge of SIEM platforms, particularly Microsoft Sentinel or equivalent technologies (e.g., Splunk, QRadar).

Expertise in threat detection, incident response, vulnerability management, and security monitoring.

Ability to communicate effectively with technical teams, senior stakeholders, clients, and external partners.

Hands-on

with modern security tooling: EDR/XDR (e.g., Microsoft Defender), IAM (Entra ID), Cloud Security (Azure/AWS native tools), and Data Loss Prevention technologies.

5+ years of

leading security operations within a hybrid SOC environment (Fintech industry

is an advantage)

Track record of successfully managing regulatory relationships and navigating complex compliance landscapes (CBN, NDPC).

Salary: N400,000 Monthly.

How to Apply

Interested and qualified candidates should send

their updated CV to

:

hr@sterlingprong.com

using the Job Title as the subject of the email.

View all Jobs in Nigeria

Lagos State and 1 other location

Lagos State

,

Maryland