Skip to content
mimi

Lead Information Security Engineer

WhatJobs Direct

Zaria · Hybrid Full-time Lead 4w ago

About the role

About

Our client is seeking a highly experienced and motivated Lead Information Security Engineer to join their team in Zaria, Kaduna, NG. This hybrid role offers the opportunity to shape and implement robust security strategies across the organization's infrastructure and applications. The Lead Engineer will be responsible for designing, deploying, and managing security solutions, conducting risk assessments, and guiding a team of security professionals. You will play a crucial role in protecting sensitive data and ensuring compliance with industry regulations. The ideal candidate possesses a deep understanding of cybersecurity principles, network security, cloud security, and emerging threats, combined with strong leadership and communication skills.

Key Responsibilities

  • Design, implement, and maintain enterprise‑wide information security infrastructure, including firewalls, IDS/IPS, VPNs, and endpoint security solutions.
  • Develop and enforce security policies, standards, and procedures to protect organizational assets.
  • Conduct regular risk assessments, vulnerability analyses, and penetration tests.
  • Lead incident response efforts, including investigation, containment, eradication, and recovery.
  • Oversee the security of cloud environments (e.g., AWS, Azure, GCP) and ensure compliance with best practices.
  • Collaborate with IT and development teams to integrate security into the software development lifecycle (SDLC).
  • Manage security awareness training programs for employees.
  • Stay abreast of the latest cybersecurity threats, vulnerabilities, and technologies.
  • Provide technical guidance and mentorship to junior security engineers and analysts.
  • Develop and maintain security documentation, including architecture diagrams and runbooks.
  • Evaluate and recommend new security technologies and solutions.
  • Ensure compliance with relevant legal, regulatory, and contractual security requirements.
  • Participate in security audits and assessments.

Qualifications

  • Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field (Master's degree preferred).
  • Minimum of 7 years of experience in information security, with a significant portion in a senior or lead role.
  • Proven expertise in network security, application security, cloud security, and identity management.
  • Hands‑on experience with security tools such as SIEM, vulnerability scanners, firewalls, and EDR solutions.
  • Strong understanding of cryptographic principles and secure coding practices.
  • Experience with scripting languages (e.g., Python, PowerShell) for automation is a plus.
  • Excellent analytical, problem‑solving, and decision‑making skills.
  • Strong leadership, communication, and interpersonal skills.
  • Relevant certifications such as CISSP, CISM, CEH, or cloud security certifications are highly desirable.
  • Ability to work effectively in a hybrid environment, balancing on‑site collaboration with remote work flexibility.

Location

Zaria, Kaduna, NG (regular presence required at the office).

Why Join

This role presents a fantastic opportunity to lead cybersecurity initiatives and make a tangible impact on the organization's security posture. Our client offers a challenging yet rewarding work environment.

Requirements

  • Proven expertise in network security, application security, cloud security, and identity management.
  • Hands-on experience with security tools such as SIEM, vulnerability scanners, firewalls, and EDR solutions.
  • Strong understanding of cryptographic principles and secure coding practices.
  • Ability to work effectively in a hybrid environment, balancing on-site collaboration with remote work flexibility.

Responsibilities

  • Design, implement, and maintain enterprise-wide information security infrastructure, including firewalls, IDS/IPS, VPNs, and endpoint security solutions.
  • Develop and enforce security policies, standards, and procedures to protect organizational assets.
  • Conduct regular risk assessments, vulnerability analyses, and penetration tests.
  • Lead incident response efforts, including investigation, containment, eradication, and recovery.
  • Oversee the security of cloud environments (e.g., AWS, Azure, GCP) and ensure compliance with best practices.
  • Collaborate with IT and development teams to integrate security into the software development lifecycle (SDLC).
  • Manage security awareness training programs for employees.
  • Stay abreast of the latest cybersecurity threats, vulnerabilities, and technologies.
  • Provide technical guidance and mentorship to junior security engineers and analysts.
  • Develop and maintain security documentation, including architecture diagrams and runbooks.
  • Evaluate and recommend new security technologies and solutions.
  • Ensure compliance with relevant legal, regulatory, and contractual security requirements.
  • Participate in security audits and assessments.

Skills

AWSAzureCybersecurityEDRGCPIdentity managementInformation securityNetwork securityPenetration testingPowerShellPythonRisk assessmentSDLCSIEMVulnerability analysis

Don't send a generic resume

Paste this job description into Mimi and get a resume tailored to exactly what the hiring team is looking for.

Get started free