Opportunity at
MoniepointSecurity & Technology Risk Analyst
Moniepoint is an African financial ecosystem established in 2019 that handles payments, credit, banking, and business tools, serving 10 million users and operating as Nigeria's top…
Career Tools
About This Role
Moniepoint is an African financial ecosystem established in 2019 that handles payments, credit, banking, and business tools, serving 10 million users and operating as Nigeria's top merchant acquirer. The organization processes $22 billion on a monthly basis while remaining profitable. The company seeks a Security & Technology Risk Analyst to join the Information Security Assurance Team on a full-time, on-site basis. This position centers on spotting, evaluating, and documenting operational…
Job Description
Moniepoint is an African financial ecosystem established in 2019 that handles payments, credit, banking, and business tools, serving 10 million users and operating as Nigeria's top merchant acquirer. The organization processes $22 billion on a monthly basis while remaining profitable.
The company seeks a Security & Technology Risk Analyst to join the Information Security Assurance Team on a full-time, on-site basis. This position centers on spotting, evaluating, and documenting operational risks across the enterprise technology footprint. The analyst will transform technical risk data into practical insights to help leadership make strategic choices regarding security and compliance.
This opportunity fits professionals who excel at bridging the gap between technical threat analysis and business strategy. Responsibilities include evaluating cloud and infrastructure environments, maintaining risk registers, creating risk metrics, and collaborating with cross-functional groups like Legal, Engineering, and DevOps. Trust and security form the foundation of Moniepoint's brand, making this role vital for supporting secure market expansion and product innovation.
Responsibilities
- Perform risk assessments across cloud, network, infrastructure, product, endpoint, and third-party domains using NIST, FAIR, and qualitative or quantitative methods.
- Conduct Business Impact Analysis on key systems to establish Recovery Time Objectives and Recovery Point Objectives.
- Manage the security risk register with up-to-date and historical records to support internal and external audits.
- Collaborate with Engineering, Legal, DevOps, IT, and Security to develop and document risk treatment plans aligned with risk appetite.
- Monitor the completion rates of risk treatment plans, escalate delays, and verify that residual risk stays within acceptable thresholds.
- Design and maintain quantifiable risk metrics, exposure measurements, and control effectiveness assessments for executive dashboards.
- Evaluate emerging threats and regulatory shifts to identify new risks that support strategic market expansion and product launches.
- Ensure risk management procedures comply with ISO 27001, SOC 2, PCI-DSS, NDPA, NIST, and FAIR frameworks.
- Assist security teams in reviewing third-party vendor risks and conducting ongoing evaluations.
- Communicate risk findings and recommendations in business terms to stakeholders at all levels.
Requirements
- Bachelor degree in Information Security, Computer Science, Risk Management, Engineering, or a related field.
- At least 5 years of professional experience in technology risk assessment, cybersecurity risk, or operational risk management.
- Demonstrated background in conducting threat analysis, risk assessments, or vulnerability management.
- Experience in building risk metrics, key performance indicators, or dashboards tailored for executive leadership.
- Familiarity with risk management frameworks such as the NIST Cybersecurity Framework or ISO 27001.
- Understanding of business continuity and disaster recovery planning principles.
- Proficiency in qualitative and quantitative risk assessment methodologies.
- Completion of B.Sc. and NYSC or possession of a valid exemption or exclusion certificate.
Qualifications
- Professional certifications such as CISM, CRISC, or equivalent risk and security credentials.
- Prior experience working in fintech, banking, or other highly regulated industries.
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the employment type for this role?
This position is full-time.
Is this a remote position?
No, the job posting specifies an on-site work arrangement.
What experience is required to apply?
Applicants must have a bachelor's degree in a relevant field along with a minimum of 5 years of professional experience in operational risk management, cybersecurity risk, or technology risk assessment.
What salary does Moniepoint offer for this position?
The salary is not stated in the job posting.
What does the hiring process involve?
The recruitment process includes an initial phone call with a recruiter, a panel interview, and a combined behavioral and technical interview with a member of the executive team.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.