Systems Auditor
AI summary
Digitvant Microfinance Bank is hiring an experienced Systems Auditor in Lagos to strengthen its Information Security Governance, Risk and Compliance (GRC) and technology assurance capabilities. The role involves IT audit, cybersecurity, regulatory compliance with CBN requirements, and technical security reviews. Candidates need a BA/BSc/HND and 5–7 years of experience in ICT or a related field.
- Full-time role based in Lagos, Nigeria
- Focus on CBN regulatory compliance and information security governance
- Requires 5–7 years of experience and a BA/BSc/HND
- Covers IT audit, cybersecurity, risk management, and vulnerability assessments
AI job guide
Use this guide to check salary signals, requirements, documents, application steps and safety before you apply.
AI salary guide
Not enough public dataNot enough public salary data is available for this exact role. Before applying, prepare to ask about gross pay, benefits, contract length, probation period, transport and any allowances.
Can you qualify for this role?
- Required5+ years of relevant experienceThe job post includes a minimum experience signal.
- RequiredEducation or certification mentioned in the postThe captured text mentions education, a diploma, certificate, or licence.
- PreferredPractical evidence in security, internship, segurancaThe tags and summary point to skills connected with this role.
- RequiredAvailability to work in Not specifiedThe vacancy is associated with this location.
- UnclearComfort with the Full Time contract termsConfirm hours, duration, probation and benefits at the original source.
Documents to prepare
- Likely requiredUpdated CV
- Role specificCover letter or short employer message
- OptionalProfessional references
- Role specificAcademic or professional certificates
- VerifyLicence, permit or professional registration
- VerifyID or passport only after verifying the employer
Application tips for this job
- Place your strongest Systems Auditor evidence in the first half of your CV.
- In your cover letter or employer message, connect your experience to Digitvant Microfinance Bank and the role in Not specified.
- Add concrete examples related to security, internship, seguranca, ideally with measurable outcomes or clear responsibilities.
- Follow the instructions from MyJobMag Nigeria; avoid sending documents to unofficial contacts or copied links.
- Confirm the deadline, interview location and employer contact before sharing personal documents.
- Prepare a polite question about pay, benefits and contract terms for later interview stages.
Source and safety check
- MyJobMag Nigeria
- Original source link available
- Application method is clear
- Deadline not specified
- No major risk signal was detected in the captured text.
Never pay for interviews, shortlisting, medical checks, uniforms, or job placement. Confirm every application at the original source before sharing personal documents. Report suspicious listing.
Interview preparation
- What experience makes you a strong fit for this Systems Auditor role in security, internship?
- How have you handled responsibilities similar to those in this job post?
- Are you available to work in Not specified under the listed contract or schedule?
- Prepare examples with clear responsibilities, tools used and measurable outcomes.
- Review the source and research Digitvant Microfinance Bank before the interview.
Ask what the first priorities will be in the role and how success will be measured.
Similar jobs to consider
Use AI to apply better
After confirming the original source, use Career Assistant to check role fit, tailor your CV and prepare a cover letter or employer message.
Original source description
Digitvant Microfinance Bank - We offer a comprehensive digital banking experience, featuring savings, loans, fund transfers, and online payments via our website and App. Our platform allows customers to manage their finances efficiently and access a wide range of personalised services to meet evolving needs.
Systems Auditor
Job Type: Full Time
Qualifications
BA/BSc/HND
Experience
5 - 7 years
Location: Lagos
Job Field: ICT / Computer
We are seeking an experienced Systems Auditor to strengthen our Information Security Governance, Risk and Compliance (GRC) and technology assurance capabilities.
The successful candidate will provide assurance over the security, resilience, risk management and regulatory compliance of our technology environment. The role combines IT audit, information security governance, cybersecurity, regulatory compliance, technical security reviews and vulnerability assessments.
Key Responsibilities
- Information Security Governance, Risk & Compliance
- Develop, maintain and periodically review the organization's Information Security Governance and GRC framework.
- Assess compliance with applicable CBN circulars, guidelines, regulatory requirements and information-security standards.
- Maintain an information security and technology risk register, including risk identification, assessment, treatment, ownership and remediation tracking.
- Develop and maintain security policies, standards, procedures, control frameworks and control matrices.
- Conduct periodic reviews of information security controls and assess their design and operating effectiveness.
- Monitor regulatory changes affecting the organization's technology, cybersecurity, payments and information-security obligations.
- Prepare regulatory and management reports relating to technology risk, cybersecurity and control effectiveness.
- Support regulatory examinations, internal audits, external audits and compliance reviews.
- Track audit and regulatory findings through to effective remediation.
- CBN & Financial Services Regulatory Compliance
- Assess technology and cybersecurity controls against applicable CBN requirements, including the Nigerian Payments System Risk and Information Security Management Framework (NPSR-ISMF) and other applicable CBN payment system regulations and guidelines.
- Maintain a regulatory obligations register covering relevant CBN requirements and monitor compliance.
- Evaluate the organization's readiness for CBN supervisory reviews, inspections and information requests.
- Review controls supporting the security, availability, integrity and resilience of payment services.
- Assess technology controls supporting electronic payment channels, transaction processing, APIs, integrations and other critical payment infrastructure.
- Monitor compliance with applicable requirements relating to operational resilience, business continuity, disaster recovery, access control, transaction security, logging and monitoring.
- Keep abreast of changes to CBN requirements affecting fintechs, Payment Solution Service Providers (PSSPs), switches, processors, payment infrastructure and other applicable license categories.
- Data Protection & Privacy Assurance
- Assess compliance of technology and business processes with the Nigeria Data Protection Act and other applicable NDPC requirements.
- Review controls for the collection, processing, storage, transmission, retention and disposal of personal and financial data.
- Conduct or support privacy and data protection control assessments, including reviews of data flows and third party processing arrangements.
- Assess security safeguards protecting customer and employee personal data.
- Review data protection risks associated with cloud services, APIs, vendors and other third parties.
- Support privacy impact/risk assessments for new products, systems and technology initiatives.
- Work with all teams to identify and remediate data protection control gaps.
- IT & Systems Auditing
- Plan and execute risk based IT and systems audits
- Evaluate IT General Controls (ITGCs) and application controls.
- Review access management, privileged access, segregation of duties and authentication mechanisms.
- Assess system development lifecycle and secure software development practices.
- Review change management processes and production deployment controls.
- Evaluate business continuity and disaster recovery capabilities for critical technology services.
- Prepare detailed audit reports identifying control weaknesses, root causes, risk implications and corrective actions.
- Technical Security Reviews & Vulnerability Assessments
- Conduct technical security assessments of applications, APIs, networks, servers, cloud environments and other technology assets.
- Perform vulnerability assessments and review vulnerability management processes.
- Analyze vulnerability scan and security testing results and assess risks based on business impact.
- Review remediation of identified vulnerabilities and validate closure of critical findings.
- Conduct security configuration reviews against recognized security benchmarks and industry best practices.
- Review application security controls, including authentication, authorization, session management, encryption and API security.
- Assess security controls around critical payment systems and customer facing digital channels.
- Review penetration testing reports and independently assess the adequacy of remediation.
- Identify emerging technology and cybersecurity risks and recommend appropriate mitigating controls.
- Third Party & Technology Risk
- Assess cybersecurity and technology risks associated with vendors, service providers, cloud providers and other third parties.
- Review vendor due diligence and ongoing security assurance processes.
- Assess contractual security requirements, data protection obligations, service level agreements and incident notification provisions.
- Review third party audit reports, certifications and security assessments.
- Monitor remediation of security and control weaknesses identified in third party assessments.
- Incident, Resilience & Security Assurance
- Review the effectiveness of cybersecurity incident response processes.
- Assess security monitoring, SIEM/logging, alerting and incident escalation controls.
- Review controls for identifying, containing and recovering from cybersecurity incidents.
- Participate in post incident reviews and assess root causes and remediation plans.
- Evaluate technology resilience, business continuity and disaster recovery arrangements.
- Reporting & Advisory
- Prepare concise and actionable audit reports for management and relevant stakeholders.
- Communicate technical vulnerabilities and cybersecurity risks.
- Provide risk based recommendations that balance security, regulatory obligations, customer protection and business objectives.
- Present significant technology and cybersecurity risks to management and relevant stakeholdres.
- Maintain appropriate audit evidence and documentation to support regulatory and independent reviews.
Requirements
Bachelor's degree in Computer Science, Information Technology, or a related discipline.
5 - 7 years experience in IT audit, systems audit, cybersecurity, information security, technology risk or GRC.
Experience within fintech, banking, payments, financial services.
Demonstrable experience conducting IT audits and control assessments.
Practical experience performing or reviewing vulnerability assessments and technical security reviews.
Good understanding of networks, operating systems, databases, cloud technologies, APIs and application security.
Strong understanding of IT General Controls and application controls.
Knowledge of information security risk management and regulatory compliance.
Experience interpreting regulatory requirements and translating them into operational controls.
Strong analytical and investigative skills.
High level of integrity, independence, confidentiality and professional judgment.
Possessing CISA/CISM/CRISC/CISSP/CEH/PCI/DSS certification(s) is strongly required.
The Ideal candidate must be an ISO 27001 Lead Auditor / Lead Implementer.
Check how your CV matches this job
Method of Application
- Interested and qualified persons should send their CV to
- hr@digitvant.com
- , using the job title as the subject of the email.
- Build your CV for free.
- Download in different templates.