About the Role

The Dangote Group is one of the most diversified business conglomerates in Africa, with operational headquarters in Lagos, Nigeria. The Group's activities encompass cement manufacturing, sugar production, and other industries.

The IT GRC Specialist is responsible for leading the design, implementation, and continuous improvement of IT governance, risk management, and compliance frameworks across the Group. This role ensures that IT operations align with enterprise risk management objectives, regulatory requirements, and international standards (e.g., ISO 27001, NIST, COBIT) while providing strategic oversight of IT controls, risk posture, and compliance performance.

The Specialist acts as a key advisor to IT leadership, Internal Audit, and business stakeholders, ensuring that technology risks are proactively managed and compliance obligations are consistently met across the Group.

Responsibilities

Governance & Policy Leadership

• Lead the development, implementation, and continuous improvement of IT governance frameworks, policies, standards, and procedures
• Ensure alignment of IT governance practices with enterprise risk management and business objectives
• Drive adoption and enforcement of IT policies across business units, plants, and shared services

IT Risk Management Oversight

• Define and maintain the Group's IT risk management framework and methodology
• Review and validate IT risk assessments across infrastructure, applications, and cloud environments
• Provide oversight of the IT risk register and ensure timely remediation of high-risk items
• Advise leadership on risk exposure, mitigation strategies, and residual risk acceptance

Compliance & Control Governance

• Define IT control standards aligned with ISO 27001, NIST, COBIT, and regulatory requirements
• Oversee IT General Controls (ITGC) framework and ensure effectiveness of key controls
• Review control testing results and ensure remediation of identified gaps
• Monitor overall IT compliance posture across the Group

Audit & Regulatory Engagement

• Act as primary liaison for Internal Audit, External Audit, and regulatory assessments
• Review audit findings and drive remediation strategies across IT functions
• Ensure audit readiness and completeness of governance documentation

Data, Cloud & Third Party Risk Compliance

• Provide oversight on cloud governance, data protection, and third-party risk management practices
• Ensure shared responsibility models are clearly defined and enforced
• Review vendor compliance with cybersecurity and regulatory requirements

Governance Reporting & Advisory

• Provide executive-level reporting on IT risk, compliance posture, and control effectiveness
• Present dashboards and insights to GCIO, risk committees, and leadership teams
• Provide advisory support to IT and business stakeholders on governance and risk matters

Requirements

Education and Experience

• Bachelor's degree in IT, Computer Science, Engineering, Information Systems, Accounting/IS, or related field
• 6-10 years' experience in IT governance, IT audit, risk management, or compliance
• Certifications in CISA, CRISC, or CISM; ISO 27001 Lead Implementer/Lead Auditor; COBIT Foundation
• Experience in complex environments (manufacturing, refinery, cement, FMCG, logistics) preferred

Functional Competencies

• Strong knowledge of IT governance frameworks (COBIT, ISO 27001, NIST)
• Enterprise risk management and control design
• Audit and regulatory compliance expertise
• Stakeholder management and executive communication
• Analytical and decision-making skills

Job Details

• Job Type: Full Time
• Location: Lagos, Nigeria
• Job Field: ICT / Computer

Disclaimer: This job description has been reformatted by AI for readability. Please verify all details with the employer before applying.