Lead, Application & DataBase Control at Interswitch Group

Interswitch is an Africa-focused integrated digital payments and commerce company that facilitates the electronic circulation of money as well as the exchange of value between individuals and organisations on a timely and consistent basis. We started operations in 2002 as a transaction switching and electronic payments processing, and have progressively evolved into an integrated payment services company, building and managing payment infrastructure as well as delivering innovative payment products and transactional services throughout the African continent. At Interswitch, we offer unique career opportunities for individuals capable of playing key roles and adding value in an innovative and fun environment.

We are recruiting to fill the position below:

Job Title: Lead, Application & DataBase Control 

Location: Lagos, Nigeria

Job Summary

• The Lead, Application, and Database Control plays a pivotal role in ensuring the resilience and reliability of the organization's technology environment. Reporting to the Head of Information Systems Control, this position is responsible for managing the assessment, enhancement, and monitoring of IT general and application controls across systems, infrastructure, and processes. The role enforces alignment with established frameworks—such as COBIT, COSO, ISO 27001, and ITIL—and ensures compliance with regulatory and internal standards.
• This position conducts periodic system audits, cybersecurity vulnerability assessments, penetration testing, and access certification reviews to identify risks, control weaknesses, or non-compliance. It oversees thorough investigations of incidents—both operational and cyber-related—to perform root cause analysis, document findings, and recommend corrective actions and control enhancements.
• The role coordinates remediation efforts by working closely with control owners, tracking progress, and reporting milestones. It prepares high-quality internal control reports—including ad hoc, monthly, and quarterly summaries—for senior stakeholders such as the Head of IS Control, Group Chief Risk Officer, Group Managing Director, and Audit & Risk Committee, ensuring transparency and timely escalation of critical issues.
• Additionally, the Lead, Application and Database Control would drive quarterly cyber assurance reviews, monitor emerging legislative and regulatory developments, and stay abreast of technology risk trends. The role also supports internal and external audit processes by generating evidence, responding to inquiries, and advocating for the closure of audit findings. Through these efforts, the Lead, Application and Database Control enhances control maturity, fosters accountability, and contributes to the organization's cyber and operational resilience.

Key Responsibilities

• Control Assessment & Implementation – Assist in conducting system audits, cybersecurity vulnerability reviews, access reviews, and IT general control (ITGC)/ICoFR testing to ensure adequacy and compliance. Identify control gaps or weaknesses, escalate findings, and support the design of remediation plans in collaboration with control owners.
• Incident Response & Root Cause Analysis – Support incident investigations involving IT control failures, system outages, or data integrity issues. Conduct root cause analyses, document technical findings, and implement control enhancements under supervision.
• Monitoring & Reporting – Prepare internal control documentation, test results, and status updates for review by the Head of IS Control. Monitor corrective action plans and conduct follow-up testing to verify effective implementation.
• Compliance & Audit Coordination – Provide technical support during internal and external audits, supplying control evidence and assisting in addressing audit queries. Ensure legislative and regulatory changes affecting IS controls are communicated and incorporated into control procedures.
• Continuous Assurance & Knowledge Management – Run automated control monitoring and vulnerability scans; track results and recommend improvements. Maintain awareness of emerging technology risks and regulatory developments to support continuous enhancements.
• Stakeholder Engagement – Work closely with IT teams to validate remediation activities. Collaborate with Audit, Compliance, Operations, and Finance to integrate control improvements and share insights.

Experience

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• Professional certifications such as CISA, ECSA, Security+, CEH, CISSP, CHFI, ISO 27001 Lead, or equivalent (preferred).
• Minimum of 6 years’ experience in IT control, audit, or risk management roles—preferably within fintech, financial services, or large enterprise environments.
• Hands-on experience conducting system audits, using vulnerability assessment tools, performing ICoFR testing, and tracking remediation activities.
• Strong analytical and problem-solving skills, with a detail-oriented and structured approach to documentation.
• Excellent communication abilities—able to present complex technical findings clearly to both IT teams and business stakeholders.
• Solid understanding of IT control frameworks and compliance standards, including COBIT, COSO, and ISO 27001.

Application Closing Date
Not Specified.