Lead, DevOps & API Audit (Remote) at Moniepoint Incorporated

Moniepoint Incorporated is a global business payments and banking platform and recently became QED Investors’ first investment in Africa. We are the partner of choice for over 600,000 businesses of all sizes, powering the dreams of SMBs and providing them with equal access to the tools they need to grow and scale.

We are recruiting to fill the position below:

Job Title: Lead, DevOps & API Audit

Location: Remote

Role Overview

• The Team Lead DevOps and API Audit is responsible for leading a technical team that oversees DevOps practices, cloud and container security, and the security, governance, and compliance of REST, GraphQL, and internal APIs.
• The role ensures that systems and APIs are designed, deployed, and operated in accordance with organizational standards, security best practices, and regulatory requirements.

Key Responsibilities
DevOps Leadership:

• Plan and Lead the Audit of DevOps and security engineering Projects
• Coordinate the audit and review of CI/CD pipelines, infrastructure-as-code, and deployment automation
• Ensure secure configuration and operation of cloud, container, and orchestration platforms (e.g. Harness, Docker, Kubernetes)
• Promote DevSecOps practices across development and operations teams
• Collaborate with engineering teams to improve reliability, scalability, and security

API Security & Audit:

• Lead audits of REST, GraphQL, and internal APIs
• Assess API authentication, authorization, and access controls
• Review API designs against organizational standards and industry best practices
• Evaluate API security posture using frameworks such as OWASP API Top 10
• Ensure proper API logging, monitoring, and incident detection
• Validate API lifecycle governance, including versioning, change management, and deprecation

Governance, Risk & Compliance:

• Ensure DevOps and API practices comply with internal policies and standards
• Support audits aligned with SOC 2, ISO 27001, and other regulatory frameworks
• Review evidence, prepare audit documentation, and support external auditors
• Identify risks and recommend remediation actions
• Track remediation progress and report on compliance status

Collaboration & Communication:

• Act as a key liaison between engineering, security, risk, and audit teams
• Communicate technical risks and findings clearly to non-technical stakeholders
• Contribute to the development and maintenance of security standards and guidelines
• Participates in the other regular audits in the IT Audit Plan as assigned by the Head, IT Audit.

Qualifications 

• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field (or equivalent experience)
• Security or cloud certifications will be an added advantage (e.g., CISSP, CISM, AWS/Azure/GCP certifications)
• 6+ years of experience in DevOps, cloud engineering, or platform engineering
• 2+ years in a technical leadership or team lead role
• Hands-on experience with:
  • CI/CD tools (e.g., GitHub Actions, GitLab CI, Jenkins)
  • Containers and orchestration (Docker, Kubernetes)
  • Cloud platforms (AWS, Azure, GCP)Experience auditing or securing APIs (REST, GraphQL, internal services)
• Experience with API gateways and WAFs
• Prior experience in internal or external audit environments
• Experience implementing DevSecOps programs

Technical Skills:

• Strong knowledge of API security (OAuth2, JWT, mTLS, API gateways)
• Familiarity with OWASP API Top 10
• Experience with infrastructure-as-code (Terraform, CloudFormation, etc.)
• Understanding of logging, monitoring, and SIEM solutions
• Knowledge of vulnerability management and security scanning tools
• Familiarity with compliance frameworks (SOC 2, ISO 27001)
• Strong leadership and mentoring abilities
• Excellent written and verbal communication skills
• Analytical mindset with attention to detail
• Ability to balance delivery, security, and compliance priorities
• Comfortable working with auditors and senior stakeholders.

Application Closing Date
Not Specified.