Senior Information Security Engineer at an Undisclosed Company (via Zira People Advisory) – Lagos

Zira People Advisory is recruiting a full-time Senior Information Security Engineer in Lagos. The role is responsible for the design, implementation and ongoing improvement of controls protecting information assets, networks, applications, cloud services and data.

Key Responsibilities

• Develop and maintain security architecture, policies, technical safeguards and operating standards.
• Lead vulnerability assessment, penetration-test coordination, remediation and security risk management.
• Monitor security infrastructure, investigate threats and incidents, oversee response procedures and conduct root-cause reviews.
• Secure cloud services, networks, systems, databases, applications and APIs.
• Deploy identity and access controls, endpoint defences, encryption, network protection and data-loss prevention.
• Work with development and DevOps teams to embed security into CI/CD delivery and the software development lifecycle.
• Conduct application, configuration, infrastructure and supplier-integration security reviews.
• Improve security logging, monitoring, alerts and threat-detection processes.
• Assist with regulatory, data-protection and information-security framework compliance.
• Provide risk reports, staff awareness sessions, technical guidance and mentoring across the organisation.

Qualifications and Experience

• Bachelor’s degree in Computer Science, IT, Cybersecurity, Engineering or a related subject.
• Five to eight years’ relevant information security or cybersecurity engineering experience, including senior-level duties.
• Sound technical knowledge of security architecture, networking, applications, incident management and vulnerability remediation.
• Hands-on cloud security experience, preferably with AWS, Microsoft Azure or Google Cloud.
• Experience with SIEM tools, event monitoring, threat analysis, privileged access, MFA and role-based access management.
• Understanding of secure coding, API security, DevSecOps, CI/CD, encryption, key management and disaster recovery.
• Familiarity with ISO 27001, NIST CSF, CIS Controls, security audits and penetration testing reviews.
• Strong communication, analytical skills, collaboration and independent technical leadership.

Preferred Certifications

• CISSP, CISM, CCSP, CEH or CompTIA Security+.
• Relevant AWS, Azure or other cloud security credentials.

What the Role Offers

• Competitive compensation based on expertise and experience.
• Professional development and continuous learning opportunities.
• Collaboration with technical and business teams on significant security improvements.
• Scope to lead security initiatives and shape security strategy.