About the role

Protects the confidentiality, integrity and availability of the resort’s information assets — guest data, payment systems, OT (HVAC/BMS/CCTV) and corporate IT — via proactive defence, monitoring and response.

Key duties & responsibilities

• Manage SIEM, EDR, firewall, VPN and email security.
• Conduct vulnerability scans and quarterly penetration tests.
• Lead incident response and forensics; maintain IR playbooks.
• Maintain PCI-DSS compliance for payment systems.
• Implement NDPA 2023 / NDPR controls; support DPO/DPCO.
• Manage IAM, MFA and privileged access.
• Run security-awareness training and phishing simulations.
• Coordinate cyber drills and tabletop exercises.
• Liaise with NITDA, NDPC and CERT.ng on incidents.

What you'll need

• B.Sc. in Cybersecurity, Computer Science, IT or related from an NUC-accredited university.
• Minimum 5 years in cybersecurity / SOC, ideally including hospitality, banking or telco.
• CISSP, CEH, CompTIA Security+, ISO 27001 LI/LA; PCI-DSS ISA; DPCO accreditation.

Technical skills

Soft skills

Certifications

• CISSP, CEH, CompTIA Security+, ISO 27001 LI/LA; PCI-DSS ISA; DPCO accreditation.

Key performance indicators

• Mean time to detect / respond within SLAs.
• PCI-DSS compliance maintained 100%.
• Critical vulnerabilities closed within 30 days ≥ 95%.
• Phishing-simulation failure rate < 5%.
• Zero unreported breaches.

Working conditions

Office-based with on-call rotation for incident response.

Career path

Cybersecurity Manager → CISO.