Senior Information Security Engineer

Zira People Advisory is a human resources consulting firm dedicated to helping organizations build stronger, more effective, and people-centered workplaces. We partner with businesses to design and implement practical HR solutions that attract, develop, and retain top talent while aligning people strategies with business goals.

We are recruiting to fill the position below:

Job Title: Senior Information Security Engineer

Location: Lagos
Employment Type: Full-time

Job Summary

• We are seeking an experienced and highly skilled Senior Information Security Engineer to design, implement, and maintain robust security systems that protect the organization's information assets, infrastructure, applications, and data.
• The successful candidate will play a critical role in strengthening the organization's security posture, identifying and mitigating cyber threats, and ensuring compliance with relevant regulatory requirements and industry best practices.
• The ideal candidate will have strong technical expertise in information security, cybersecurity architecture, cloud security, threat detection, vulnerability management, and incident response.
• This individual will work closely with engineering, infrastructure, compliance, and other business teams to embed security into systems, processes, and everyday operations.

Key Responsibilities

• Design, implement, and maintain comprehensive information security controls, policies, standards, and procedures.
• Lead security assessments, vulnerability management activities, penetration testing coordination, and remediation efforts.
• Monitor security systems and infrastructure to identify, investigate, and respond to potential threats and security incidents.
• Develop and implement incident response procedures, conduct root-cause analyses, and recommend preventive measures.
• Assess and strengthen the security of cloud environments, networks, operating systems, databases, APIs, and applications.
• Implement security solutions across identity and access management, endpoint protection, encryption, network security, and data loss prevention.
• Collaborate with software engineering and DevOps teams to integrate security into the software development lifecycle and CI/CD pipelines.
• Conduct security reviews of applications, infrastructure changes, system configurations, and third-party integrations.
• Establish and maintain security monitoring, logging, alerting, and threat detection capabilities.
• Support compliance with relevant information security standards, regulatory requirements, and data protection obligations.
• Lead security risk assessments, document identified risks, and develop practical mitigation plans.
• Conduct security awareness initiatives and provide technical guidance to employees and relevant stakeholders.
• Evaluate emerging cybersecurity threats, tools, and technologies and recommend improvements to the organization's security posture.
• Prepare security reports, metrics, and recommendations for management and other stakeholders.
• Provide technical leadership and mentorship to other members of the technology and security teams.

Requirements and Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline.
• Minimum of 5–8 years of relevant experience in information security, cybersecurity engineering, or a related technical role, with demonstrated experience in senior-level responsibilities.
• Strong knowledge of security architecture, network security, application security, vulnerability management, and incident response.
• Hands-on experience securing cloud infrastructure, preferably AWS, Microsoft Azure, or Google Cloud Platform.
• Proficiency in security monitoring, SIEM solutions, threat detection, log analysis, and security incident investigation.
• Experience implementing identity and access management controls, multi-factor authentication, privileged access management, and role-based access controls.
• Good understanding of secure software development practices, DevSecOps, API security, and CI/CD security integration.
• Knowledge of risk management frameworks and information security standards such as ISO 27001, NIST Cybersecurity Framework, and CIS Controls.
• Familiarity with data protection, encryption, key management, business continuity, and disaster recovery principles.
• Experience conducting security audits, risk assessments, vulnerability assessments, and penetration testing reviews.
• Strong analytical, problem-solving, documentation, and communication skills.
• Ability to work independently, lead technical security initiatives, and collaborate effectively across multidisciplinary teams.

Preferred Certifications:
Candidates with any of the following certifications will have an added advantage:

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Cloud Security Professional (CCSP)
• Certified Ethical Hacker (CEH)
• CompTIA Security+
• Relevant AWS, Azure, or other cloud security certifications.

Key Competencies:

• Cybersecurity architecture and engineering
• Security risk assessment and mitigation
• Cloud and infrastructure security
• Threat detection and incident response
• Vulnerability and patch management
• Security governance and compliance
• Critical thinking and technical problem-solving
• Leadership, collaboration, and stakeholder management.

What We Offer

• Competitive compensation commensurate with experience and expertise.
• An opportunity to contribute to the development of a robust and scalable security environment.
• A collaborative and innovative work environment.
• Opportunities for professional development and continuous learning.
• The opportunity to lead impactful security initiatives and influence security strategy.