Practice Lead, Cybersecurity

Heirs Technologies; United States; On-site; USD 180,000 - 260,000; Full time

Job summary

Heirs Technologies Ltd. seeks a seasoned cybersecurity leader to define and execute a group-wide strategy, aligning security with business growth and risk appetite.

You will position cyber as a driver of revenue and trust while scaling a high-performing security organization across GRC, SOC, engineering, and DevSecOps. Responsibilities include enterprise platform security, threat detection, incident response, regulatory engagement, and building a robust risk-based governance framework.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or related field.
• Master’s degree (MBA / MSc Cybersecurity)
• 12–15+ years in cybersecurity, with 5+ years in senior leadership roles.
• Proven experience in technology or financial services environments.
• Building and scaling enterprise security programmes.
• Engagement with boards, regulators, and executive teams.

Responsibilities

• Define and execute a Group-wide cybersecurity strategy aligned to business growth and risk appetite.
• Position cybersecurity as a business enabler for revenue, client trust, and market expansion.
• Lead and scale a high-performing security organisation (GRC, SOC, Engineering, DevSecOps).
• Provide regular Board and EXCO reporting on cyber risk posture and mitigation.
• Ensure end-to-end security of Digital Banking platforms (RedApp) and Enterprise platforms (Converge).
• Embed security-by-design across all products and engineering squads across SDLC.
• Drive DevSecOps adoption across the SDLC.
• Build and lead a 24/7 SOC capability (in-house or managed).
• Oversee threat detection (SIEM, EDR) and vulnerability management.
• Lead cyber incident response and crisis management.
• Establish a risk-based cybersecurity framework and governance.
• Oversee data protection (PII, financial, enterprise).
• Regulatory engagement with regulators (CBN, SEC, NITDA, NCC).

Skills

Cybersecurity architecture

Cloud security

Threat detection

DevSecOps

Identity & access management

Data protection

Education

Bachelor’s degree in Computer Science / Cybersecurity

Master’s degree (MBA / MSc Cybersecurity)

12–15+ years in cybersecurity

5+ years in senior leadership

Tools

CISSP or CISM

CISA / CRISC / CEH / CCSP

Job description

1. Enterprise Security Strategy & Leadership

• Define and execute a Group-wide cybersecurity strategy aligned to business growth and risk appetite
• Position cybersecurity as a business enabler for revenue, client trust, and market expansion
• Lead and scale a high-performing security organisation (GRC, SOC, Engineering, DevSecOps)
• Provide regular Board and EXCO reporting on cyber risk posture and mitigation

2. Platform & Product Security (Critical for HT)

• Ensure end-to-end security of:
• Digital Banking platforms (RedApp)
• Enterprise platforms (Converge)
• Embed security-by-design across all products and engineering squads
• Drive DevSecOps adoption across the SDLC

Outcome: Secure, scalable products that support revenue and client growth

3. Cyber Risk Management & Governance

• Establish and enforce a risk-based cybersecurity framework
• Identify, assess, and mitigate risks across:
• Applications
• Infrastructure
• Third-party integrations
• Oversee data protection (PII, financial data, enterprise data)

4. Security Operations & Incident Response

• Build and lead a 24/7 SOC capability (in-house or managed)
• Oversee:
• Threat detection (SIEM, EDR)
• Vulnerability management
• Penetration testing and red teaming
• Lead cyber incident response and crisis management

Outcome: Rapid detection, containment, and recovery from threats

5. Regulatory Compliance & External Engagement

• Ensure compliance with:
• NDPA / NDPR
• CBN Cybersecurity Framework
• ISO 27001, PCI-DSS (where applicable)
• Serve as primary interface with regulators (CBN, SEC, NITDA, NCC)
• Drive audit readiness and certification programmes

6. Cloud, Infrastructure & Identity Security

• Secure cloud environments (AWS, Azure, GCP)
• Implement:
• Zero Trust architecture
• Identity & Access Management (IAM)
• Oversee endpoint, network, and infrastructure security

7. Third-Party & Ecosystem Security

• Lead vendor and partner security risk management
• Conduct security due diligence for all integrations and platforms
• Ensure ecosystem security across:
• Fintech partners
• Infrastructure vendors

8. Security Culture & Awareness

• Drive enterprise-wide cybersecurity awareness programmes
• Embed security into employee behaviour, engineering culture, and leadership mindset
• Lead initiatives such as:
• Phishing simulations
• Secure usage practices

SKILLS/ATTRIBUTES

Technical

• Cybersecurity architecture & enterprise security design
• Cloud security (AWS, Azure, GCP)
• Threat detection & incident response
• DevSecOps & secure SDLC
• Identity & access management (IAM)
• Data protection & privacy

Leadership

Executive presence & Board engagement

• Strategic thinking & business alignment
• Crisis leadership and decision-making
• Stakeholder and regulatory management
• Ability to influence across engineering, product, and commercial teams

EDUCATION/EXPERIENCE REQUIREMENTS

Experience & Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or related field
• Master’s degree (MBA / MSc Cybersecurity)
• 12–15+ years in cybersecurity, with 5+ years in senior leadership roles
• Proven experience in:
• Technology or financial services environments
• Building and scaling enterprise security programmes
• Strong experience engaging:
• Boards, regulators, and executive teams

Certifications (Required / Preferred)

• CISSP and/or CISM (required)
• Additional: CISA, CRISC, CEH, CCSP (advantage)
• Zero critical security breaches
• Reduction in vulnerabilities and incident frequency
• 100% compliance with regulatory and audit requirements
• Secure delivery of all major platforms (RedApp, Converge)
• Improved incident response time and recovery capability