Chief Information Security Officer - Nigeria - Vice President

Chief Information Security Officer - Nigeria - Vice President Job Description Cybersecurity is at the heart of everything we do at JP Morgan Chase. In a world of evolving threats and increasing regulatory complexity, we are looking for a bold, experienced security leader who can protect our people, our clients, and our institution, while helping shape the future of secure banking in Nigeria. As the Nigeria Chief Information Security Officer (CISO) at JP Morgan Chase within the Cybersecurity function of our Nigeria Merchant Bank, you will own and drive the cybersecurity programme for our Nigeria legal entity, ensuring alignment with both local regulatory requirements and the firm's global security standards. You will serve as the Central Bank of Nigeria (CBN)-approved person for cybersecurity, reporting directly to the Managing Director and Chief Executive Officer of the Nigeria legal entity, while maintaining a regional dotted-line relationship with the Central & Eastern Europe, Middle East and Africa (CEEMEA) Cybersecurity Country Lead. This is a high-impact, highly visible role that sits at the intersection of regulatory accountability, enterprise risk management, and strategic leadership, offering you the opportunity to build and lead a best-in-class cybersecurity programme in one of Africa's most dynamic financial markets. . Job Responsibilities Oversee and implement the Board-approved cybersecurity programme and strategy, translating enterprise-wide security objectives into operational practice for the Nigeria legal entity Develop and maintain cybersecurity policies, secure business and communication practices, and performance metrics that reflect both local regulatory requirements and global firm standards Lead the end-to-end cybersecurity risk management lifecycle, including risk assessments, vulnerability management, penetration testing oversight, and remediation tracking Direct incident response planning and execution, ensuring timely identification, containment, and recovery from cybersecurity events, with associated loss and recovery reporting Maintain the institution's data privacy posture in line with the Nigeria Data Protection Act (NDPA) 2023 and other applicable regulations Deliver regular, clear, and actionable cybersecurity reports to the Board and Senior Management, covering risk status, programme effectiveness, incident summaries, and compliance against Board-approved thresholds Collaborate closely with the regional and group cybersecurity functions to ensure an effective, enterprise-wide security programme while preserving local regulatory accountability Drive security awareness and training initiatives across the Nigeria legal entity, ensuring all employees meet periodic training requirements Recommend and support the acquisition of security products, tools, and capabilities necessary to advance the institution's cybersecurity maturity Engage proactively with the CBN and other regulators, managing supervisory review and evaluation exercises and ensuring timely remediation of regulatory findings Required Qualifications, Capabilities, and Skills Formal training or certification on software engineering concepts and 5+ years applied experience Significant, progressive experience in information security or cybersecurity, with experience in financial services or banking Demonstrated experience building, leading, and maturing enterprise cybersecurity programmes, including incident response, vulnerability management, and regulatory reporting Strong working knowledge of the Nigerian regulatory environment, including CBN guidelines, the Banks and Other Financial Institutions Act (BOFIA) 2020, and the Nigeria Data Protection Act (NDPA) 2023 Proven ability to engage and influence senior stakeholders, including Boards, Senior Management, regional functions, and regulators, with excellent written and verbal communication skills Familiarity with international cybersecurity standards and frameworks (e.g., NIST, ISO 27001) and the ability to apply them in a regulated financial services context Demonstrated independent judgment and the ability to operate with authority and accountability in a dual-reporting structure Preferred Qualifications, Capabilities, and Skills Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Chief Information Security Officer (CCISO), or equivalent Advanced degree in Computer Science, Information Security, or a related discipline Experience navigating CBN Approved Persons' Regime processes and regulatory approval workflows Prior experience as a CISO or senior cybersecurity leader within a multinational financial institution operating in an emerging market Familiarity with the CBN Risk-Based Cybersecurity Framework and Guidelines for Deposit Money Banks and Payment Service Banks (2024) Additional Information Appointment to this position is subject to approval under the CBN Approved Persons' Regime. The appointment process requires Board endorsement of the selected candidate, followed by formal CBN approval prior to the incumbent assuming the role. This requirement is consistent with Section 1.4 of the CBN Risk-Based Cybersecurity Framework and Guidelines for Deposit Money Banks and Payment Service Banks (2024). JP Morgan Chase is an equal opportunity employer. Employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, or any other characteristic protected by applicable law. We are committed to fostering a diverse and inclusive workplace for all.