Job Description
Who we are
Moniepoint is a financial technology company digitising Africa’s real economy by building a financial ecosystem for businesses, providing them with all the payment, banking, credit and business management tools they need to succeed.
About the role
Location: Remote (Full-time)
Develop and implement the annual ITGC and ITACs internal control assessments plan across all IT and cybersecurity domains, ensuring alignment with the COSO framework , relevant ISO standards and the standard Moniepoint MFB business requirements.
Plan and execute internal control assessments to establish the adequacy and effectiveness of information systems and critical infrastructure within Moniepoint MFB and to determine whether information systems are protected, controlled, and meet the intended functional design of business models defined in BRD/PRD.
Assess the IT and Cybersecurity risk ownership and their related risk registers to determine whether the risk universe has been sufficiently captured and mitigating controls adequately designed and operated
Assess the monitoring and reporting of IT and CyberSecurity key performance indicators (KPI/OKRs) and the IT/CyberSecurity key risk indicators (KPIs), incorporating metrics relevant to the effectiveness of controls.
Assess and report on Moniepoint MFB’s ability to continue business operations, storage, back-up, and restoration policies and processes for effectiveness and resilience.
Assess logical, physical, and environmental controls within Moniepoint MFB to verify the confidentiality, integrity, and availability of information assets
Assess controls at all stages of the information systems development life cycle.
Assess the governance around information systems for gaps in implementation and change management.
Assess the level of post-implementation reviews on systems in place to determine whether project deliverables, controls, and requirements are met.
Assess Moniepoint MFB’s database management practices, data governance program, and privacy program.
Assess data classification practices for alignment with the Moniepoint MFB data governance program, privacy program, and applicable external requirements.
Assess Moniepoint MFB’s problem and incident management program.
Assess Moniepoint MFB’s change, configuration, release, and patch management programs, evaluating their effectiveness in mitigating vulnerabilities.
Assess Moniepoint MFB’s log management program, testing and reporting on its role in detective controls.
Assess IT strategy, governance, and organizational structure for alignment with the enterprise risk management posture of Moniepoint MFB, integrating principles from ISO 31000.
Oversee the communication and collection of feedback on controls design and operational effectiveness tests, general control assessment findings and recommendations with stakeholders within Moniepoint MFB, ensuring clear and timely information exchange.
Develop and manage the control deficiency remediation dashboard for follow-up and closure of open findings from control assessment, internal audit, and any external examination and assessment for each SBU and specific core units within Moniepoint MFB.
Oversee the conduct of post-review follow-up assessments to evaluate whether all identified open findings from all assessments have been sufficiently mitigated.
Carry out any other task, as might be assigned or becomes necessary to improve the information system security posture and the internal control maturity model of Moniepoint MFB, with a continuous focus on the principles of the COSO framework and the specified ISO standards.
