Who we are

Moniepoint is a financial technology company digitising Africa’s real economy by building a financial ecosystem for businesses, providing them with all the payment, banking, credit and business management tools they need to succeed. 

About the role

Location: Remote (Full-time)

How Will You Create Impact?

• Develop and implement the annual ITGC and ITACs internal control assessments plan across all IT and cybersecurity domains, ensuring alignment with the COSO framework , relevant ISO standards and the standard Moniepoint MFB business requirements.
• Plan and execute internal control assessments to establish the adequacy and effectiveness of information systems and critical infrastructure within Moniepoint MFB and to determine whether information systems are protected, controlled, and meet the intended functional design of business models defined in BRD/PRD.
• Assess the IT and Cybersecurity risk ownership and their related risk registers to determine whether the risk universe has been sufficiently captured and mitigating controls adequately designed and operated
• Assess the monitoring and reporting of IT and CyberSecurity key performance indicators (KPI/OKRs) and the IT/CyberSecurity key risk indicators (KPIs), incorporating metrics relevant to the effectiveness of controls.
• Assess and report on Moniepoint MFB’s ability to continue business operations, storage, back-up, and restoration policies and processes for effectiveness and resilience.
• Assess logical, physical, and environmental controls within Moniepoint MFB to verify the confidentiality, integrity, and availability of information assets
• Assess controls at all stages of the information systems development life cycle.
• Assess the governance around information systems for gaps in implementation and change management.
• Assess the level of post-implementation reviews on systems in place to determine whether project deliverables, controls, and requirements are met.
• Assess Moniepoint MFB’s database management practices, data governance program, and privacy program.
• Assess data classification practices for alignment with the Moniepoint MFB data governance program, privacy program, and applicable external requirements.
• Assess Moniepoint MFB’s problem and incident management program.
• Assess Moniepoint MFB’s change, configuration, release, and patch management programs, evaluating their effectiveness in mitigating vulnerabilities.
• Assess Moniepoint MFB’s log management program, testing and reporting on its role in detective controls.
• Assess IT strategy, governance, and organizational structure for alignment with the enterprise risk management posture of Moniepoint MFB, integrating principles from ISO 31000.
• Oversee the communication and collection of feedback on controls design and operational effectiveness tests, general control assessment findings and recommendations with stakeholders within Moniepoint MFB, ensuring clear and timely information exchange.
• Develop and manage the control deficiency remediation dashboard for follow-up and closure of open findings from control assessment, internal audit, and any external examination and assessment for each SBU and specific core units within Moniepoint MFB.
• Oversee the conduct of post-review follow-up assessments to evaluate whether all identified open findings from all assessments have been sufficiently mitigated.
• Carry out any other task, as might be assigned or becomes necessary to improve the information system security posture and the internal control maturity model of Moniepoint MFB, with a continuous focus on the principles of the COSO framework and the specified ISO standards.

Skills and Qualifications

• Educational Background: A Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field.
• Certifications: Relevant professional certifications such as CISA (Certified Information Systems Auditor), CISSP (Certified Information Security Professional), or others related to IT audit, cybersecurity, or risk management.
• Experience: Proven experience in IT internal control assessments, IT auditing, or a related field, with a strong understanding of IT General Controls (ITGC) and IT Application Controls (ITACs). Experience in the banking or financial services sector is often preferred.
• Framework and Standard Knowledge: In-depth knowledge and practical experience with the COSO internal control framework and relevant ISO standards, including ISO 31000 (Risk Management), ISO 27001 (Information Security), ISO 22301 (Business Continuity), ISO 37301 (Compliance Management), and ISO 9001:2015 (Quality Management System).
• Technical Understanding: A solid understanding of information systems, critical infrastructure, cybersecurity domains  and the information systems development life cycle.
• Assessment Skills: Strong planning and execution skills for conducting internal control assessments, including design and operations effectiveness testing.
• Risk Management: Experience in assessing IT and CyberSec risk ownership, risk registers, and integrating principles from ISO 31000.
• Communication: Excellent written and verbal communication skills to effectively communicate assessment findings, results, and recommendations to stakeholders at various levels.
• Analytical Skills: Strong analytical and problem-solving skills to identify control deficiencies, assess their impact, and develop remediation plans.
• Organizational Skills: Excellent organizational and time management skills to manage multiple assessments, remediation efforts, and reporting requirements.
• Attention to Detail: Meticulous attention to detail to ensure accuracy in assessments, documentation, and reporting.
• Integrity and Professionalism: High level of integrity and professionalism in handling sensitive information and maintaining objectivity in assessments.

What to expect in the hiring process

• A preliminary phone call with the recruiter 
• A Panel Interview
• A case study assessment
• A behavioural and technical interview with a member of the Executive team.

Moniepoint is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees and candidates.

About Moniepoint

Everyone has a dream, and achieving that is key to their happiness. Moniepoint Inc is on a mission to provide financial happiness for people of the world by powering the dreams of businesses, their employees and customers. Since 2015, we have grown to 1500 employees and process over $100 billion annually for 1.8 million merchants through our all-in-one digital financial services platform. Moniepoint Inc through its subsidiaries which include Moniepoint MFB and TeamApt ltd offers payments, banking, credit and business management tools. We currently process the majority of the POS transactions in Nigeria and are Africa’s second-fastest-growing fintech.

Curious about what makes Moniepoint an incredible place to work? Check out posts on how we cultivate a culture of innovation, teamwork, and growth.

About the role

At Moniepoint, data is the lifeblood of our financial operating system. The Head of Data Governance is a senior leadership role responsible for ensuring that this lifeblood is high-quality, secure, and accessible. You will architect and champion the enterprise-wide data governance framework, transforming how 13 million+ people’s data is managed and protected.
Reporting to the Head of Enterprise Data, you aren't just a policy writer; you are a cultural catalyst. You will lead a "virtual team" of Data Stewards across the company, ensuring that while they sit within diverse units like Finance or Sales, they operate with a unified, gold-standard approach to data accountability.

About You

The Architect: You don't just see data; you see the structures that make it reliable. You enjoy building blueprints that balance strict compliance with the speed required by a fast-growing fintech.
The Influencer: You excel in a "Hub and Spoke" model. You can lead and inspire teams that don’t report to you directly, turning departmental data stewards into a cohesive community.
The Tech-Fluent Leader: You speak "Engineering" as well as you speak "Business." You understand how to automate governance so it becomes a feature of the workflow, not a bottleneck.
Ethical Guardian: You are passionate about data privacy (GDPR/NDPR) and believe that responsible data management is a competitive advantage, not just a regulatory chore.

What you will get to do:

1. Strategic Leadership & Framework Design

• Governance Roadmap: Develop and execute a long-term strategy that aligns with Moniepoint’s mission to build the financial OS for emerging markets.
• Policy & Standards: Author and maintain global policies (Privacy, Retention, Naming Conventions) that are clear, actionable, and "Regular Guy" friendly.
• Operating Model: Define our domain-driven structure and clarify data ownership across the company to eliminate ambiguity.

2. Functional Leadership of the Stewardship Team

• Orchestration: Direct the strategic priorities of Business Unit Data Stewards, ensuring they have the tools and training to succeed.
• Community Building: Create a "Data Governance Academy" to onboard, certify, and mentor stewards across the organization.
• KPI Alignment: Set the functional goals that define what "good" looks like for data quality within each business unit.

3. Tech Stack & Automation Ownership

• Platform Strategy: Select and manage our governance platforms (e.g., Atlan, Collibra, or Microsoft Purview), ensuring they integrate seamlessly with our data lake.
• Metamodel Design: Configure tools to link business terms to physical technical assets, creating a transparent data lineage.
• Governance-as-Code: Partner with Data Engineering to automate quality checks and PII masking within the CI/CD pipeline.

4. Risk, Compliance & Culture

• Enterprise DQ Reporting: Build "Data Health Dashboards" for the Executive team to provide visibility into our data reliability.
• Change Management: Lead the cultural shift from "data is IT’s problem" to "data is a strategic business asset."
• Literacy Programs: Develop workshops to empower non-technical staff to read, interpret, and respect data.

Qualifications:

• Experience: 9+ years of leadership experience in Data Governance, Data Engineering, or Data Strategy within a high-growth environment.
• Technical Proficiency: Advanced SQL and Python skills are essential. You should be comfortable auditing a data platform directly and working with APIs for automation.
• Framework Expertise: Deep knowledge of modern data architectures (Data Mesh, Data Vault 2.0) and how to apply governance within them.
• Regulatory Knowledge: Intimate familiarity with NDPR, GDPR, and fintech-specific data regulations.
• Education: A Bachelor degree in Computer Science, Engineering, Mathematics, or a related quantitative field (or equivalent practical experience).

What Success Looks Like

• Initial 6 Months: A defined Data Governance roadmap is approved, and the first "Data Health Dashboard" is live for critical data elements.
• The 1-Year Mark: Every major business unit has a certified Data Steward, and automated lineage is active for our core financial products.
• Culture: Data Governance is no longer viewed as a "blocker" but as the foundation that allows our product teams to build faster and safer.
  

What we can offer you

• Culture - We put our people first and prioritise the well-being of every team member. We’ve built a company where all opinions carry weight and where all voices are heard. We value and respect each other and always look out for one another. Above all, we are human.
• Learning - We have a learning and development-focused environment with an emphasis on knowledge sharing, training, and regular internal technical talks.
• Compensation - You’ll receive an attractive salary, pension, health insurance, annual bonus, plus other benefits.

What to expect in the hiring process

• A preliminary phone call with the recruiter
• A technical panel interview with Department Leads
• Technical take-home assessment
• A behavioral and technical interview with a member of the Executive team
• All interviews stages are Virtual