Enterprise, Third-Party & Resilience Risk Manager at Heirs Technologies – Lagos

Heirs Technologies Limited is recruiting an Enterprise, Third-Party and Resilience Risk Manager in Lagos. The role will strengthen contracting, supplier assurance, business continuity, crisis readiness and organisation-wide risk reporting.

Key accountabilities

• Review major client, partner and OEM contracts for liability, indemnities, service credits, data protection, audit rights, recovery commitments and termination provisions.
• Operate the full third-party risk lifecycle, from due diligence and supplier tiering to annual financial reviews, performance scorecards and critical-provider exit plans.
• Manage the ISO 22301 business continuity framework, business impact assessments and recovery testing for services, SOC, NOC and major client platforms.
• Develop crisis-management arrangements with legal, security and communications colleagues, including a ransomware playbook and simulation exercises.
• Maintain risk registers, controls, incidents, indicators, action plans and loss-event information within Sentra.
• Prepare monthly risk dashboards and exception reports and quarterly Group submissions.
• Track audit and regulatory findings to closure and coordinate risk champions and annual control self-assessments.

Experience and qualifications

• At least seven years in enterprise, operational or vendor risk in financial services, telecommunications or technology services.
• Strong knowledge of IT outsourcing, cloud and managed-service contracts.
• ISO 22301 Lead Implementer or Auditor, or CBCI/MBCI qualification, alongside governance, risk and compliance systems experience.
• IRM, CRISC or CTPRP certification is an advantage.
• Experience with risk analytics, resilience testing, supplier assessments and governance reporting.

Performance priorities

The manager will build an auditable contract and supplier register, require approval for uncapped liability, carry out critical service recovery exercises, train the crisis team and improve on-time reporting. Measures include complete contract reviews, up-to-date third-party due diligence, annual recovery tests and timely risk submissions.