Opportunity at
RenmoneyInformation Security Governance Engineer
Renmoney seeks an Information Security Governance Engineer for a full-time, on-site position. This role focuses on establishing and maintaining security policies, managing enterprise risk, ensuring regulatory…
Career Tools
About This Role
Renmoney seeks an Information Security Governance Engineer for a full-time, on-site position. This role focuses on establishing and maintaining security policies, managing enterprise risk, ensuring regulatory compliance, and driving vendor security governance. The position suits professionals experienced in information security governance, risk, and compliance who want to contribute to a structured security program. Renmoney operates in the financial services sector, and the chosen candidate will support compliance with relevant regulations…
Job Description
Renmoney seeks an Information Security Governance Engineer for a full-time, on-site position. This role focuses on establishing and maintaining security policies, managing enterprise risk, ensuring regulatory compliance, and driving vendor security governance. The position suits professionals experienced in information security governance, risk, and compliance who want to contribute to a structured security program.
Renmoney operates in the financial services sector, and the chosen candidate will support compliance with relevant regulations such as the CBN Cybersecurity Framework, PCI DSS, ISO 27001, and NDPR. Key duties include developing governance frameworks, maintaining the security risk register, coordinating audits, tracking remediation activities, and producing security posture reports for management and risk committees. The engineer will also participate in third-party vendor assessments and help deliver security awareness training.
This opportunity is well-suited for candidates with a background in fintech, telecommunications, or financial services who possess extensive knowledge of risk management methodologies and security frameworks. Applicants will manage governance KPIs and KRIs, evaluate supplier security controls, and collaborate with various business units to ensure continuous improvement in control maturity.
Responsibilities
- Develop, review, and maintain information security policies, standards, procedures, and guidelines
- Ensure alignment with frameworks such as ISO/IEC 27001, PCIDSS, and the CBN Cybersecurity Framework
- Support enterprise information security risk assessments and risk treatment plans
- Maintain the security risk register and monitor remediation activities
- Advise business units regarding risk mitigation, acceptance, transfer, or avoidance
- Ensure compliance with legal, regulatory, and contractual mandates like NDPR, CBN frameworks, PCI DSS, and ISO 27001
- Coordinate internal and external audits, assessments, and certifications
- Track and remediate audit findings and compliance gaps
- Define and manage security governance KPIs, KRIs, and dashboards
- Prepare security posture reports for management, risk committees, and auditors
- Conduct third-party security risk assessments and due diligence
- Review supplier security controls and contractual security clauses while monitoring vendor compliance
- Support security awareness and policy training programs
- Monitor regulatory updates and emerging governance trends
Requirements
- Minimum of 5 to 9 years of professional experience in information security governance, risk, and compliance
- Hands-on background implementing or managing frameworks such as ISO 27001, the CBN Cybersecurity Framework, NDPR, or PCI DSS
- Strong comprehension of risk management methodologies and control frameworks
- Prior working experience with compliance reviews, regulatory requirements, and audits
- Familiarity with security tools and platforms that support governance and compliance tasks
Qualifications
- Bachelor degree in Information Security, Computer Science, Information Technology, or a related field
- Prior experience working in fintech, financial services, or telecommunications
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the employment type for this role?
This is a full-time position.
Where is the job located?
The specific location of the job is not stated in the posting, though the source specifies that the role is on-site.
What experience is required to apply?
Candidates must have a minimum of 5 to 9 years of experience in information security governance, risk, and compliance.
Are salary and benefits specified?
Salary and benefits are not stated in the job posting.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.