Moniepoint is a financial technology company digitising Africa’s real economy by building a financial ecosystem for businesses, providing them with all the payment, banking, credit and business management tools they need to succeed.
About the Role
- The Data Privacy Compliance Audit shall support Moniepoint and play a key role in evaluating and assessing our technology and infrastructure to ensure compliance with relevant regulations and standards, identify risks and provide recommendations for improvement.
- The Data Privacy Officer will support the team to ensure that Data privacy concerns are addressed as it relates to Client documentation and Security across the cloud infrastructure.
- The role would entail working with relevant internal stakeholders across the Finance, Operation, Product, Engineering, Risk & Compliance, Legal and the Cloud Service Providers.
Responsibilities
What you’ll get to do:
- Work with Audit Lead to plan internal audits.
- Conduct audits to ensure compliance with internal controls, regulatory requirements, and best practices.
- Perform security audits of cloud infrastructure (AWS, Azure, GCP, SaaS platforms).
- Assess cloud security posture against industry standards and organizational policies.
- Review cloud configurations (identity, access controls, encryption, logging, monitoring).
- Ensure compliance with ISO 27001, PCI DSS, ISO 22301,ISO 20001, and other regulatory requirements.
- Identify risks associated with third-party cloud providers and perform vendor risk assessments.
- Review adherence to data residency, privacy, and contractual obligations.
- Evaluate implementation of security controls (network security, IAM, encryption, key management, backup & recovery).
- Test incident response and business continuity plans for cloud-based services.
- Validate logging, monitoring, and SIEM integration for cloud environments.
- Attend meetings, interview staff to gather audit evidence, documents and information. Analyze data to identify financial reporting errors, fraud, and operational risks.
- Evaluate compliance with company policies, procedures and external regulations. Provide assurance on adequacy of security and controls to support business.
- Review internal control policies/procedures to ensure adequate coverage.
- Recommend appropriate mitigating controls for identified security/control risks and follow-up with responsible teams to treat the risks.
- Participate in IT Projects and product development with the aim of identifying risks and recommending appropriate controls.
- Follow-up responsible teams to implement the recommendations of internal auditors, external auditors, consultants, and security analysts.
- Review system deployments to ascertain that security and controls were incorporated, including validating the compliance of development teams to organization's software development policies & procedures
- Review IT operations controls, staffing, training requirements, conditions of service and adequate segregation of duties.
- Deliver on other assignments delegated by the supervisor.
- Support the team on review of Change Management Process.
- Collaborate with development teams to identify and remediate security vulnerabilities.
- Support the team on review of software development lifecycle (SDLC).
- Perform other duties as assigned by the Head, IT Audit
- Render technical support to other teams in Internal Audit as required
- Participates in the other regular audits in the IT Audit Plan as assigned by the Head, IT Audit.
Requirements
To succeed in this role, you should have experience in:
- Candidates should possess a minimum of a Bachelor’s Degree in Computer Science/Engineering.
- Certifications in one or more of the following will be an added advantage -CCSP, GCP, CISA, ACA, CISSP, CISM, CRISC, MICROSOFT certifications, ORACLE, etc.
- Experience: Minimum of 5 years of progressive experience in the financial services industry or in a Consulting Firm.
- Strong knowledge of cloud platforms (GCP, AWS, Azure).
- Familiarity with security frameworks: ISO 27001, NIST CSF, CIS Controls, SOC 2.
- Hands-on understanding of:
- IAM (Identity and Access Management)
- Encryption & Key Management (KMS, HSMs)
- Cloud networking & firewalls
- SIEM & logging tools
- Container & serverless security
- Experience with cloud security tools (Prisma Cloud, Wiz, Check Point Dome9, etc.).
- Excellent analytical, risk assessment, and report-writing skills.
- Strong communication and stakeholder engagement ability.
- Software Development Lifecycle.
- Basic knowledge of risk management procedures, internal audit processes and regulatory compliance requirements
- Excellent communication skills and turnaround time
- Self-driven and works with minimum supervision.
Method of Application
Signup to view application details.
Signup Now
