Governance, Risk & Compliance Analyst

The role

FortressPoint is growing its Nigerian practice and seeking a GRC Analyst with strong knowledge of NDPA 2023, CBN cybersecurity frameworks, and ISO 27001. You will support client compliance programmes across financial services and telecommunications sectors.

What you will do

• Support ISO 27001 implementation and audit readiness engagements for Nigerian clients
• Conduct NDPA 2023 compliance gap assessments and remediation planning
• Develop policy frameworks, risk registers, and control documentation
• Liaise with client stakeholders and regulatory bodies on compliance matters
• Produce high-quality written deliverables including reports, policies, and presentations

What we are looking for

• Minimum 3 years in GRC, compliance, or risk management
• Strong working knowledge of NDPA 2023 and Nigerian regulatory landscape
• Experience with ISO 27001 implementation or auditing
• CISM, ISO 27001 LA, or equivalent certification
• Excellent written English and strong stakeholder management skills

Desirable

• Experience with CBN cybersecurity framework and NITDA guidelines
• Exposure to UK GDPR or EU regulatory frameworks
• Background in financial services or telecommunications sector