Application Deadline: Not specified by the employer. Apply as soon as possible. This post will be marked closed after 30 days.
First Excelsia is recruiting a full-time System Control Staff in Lagos. The role centres on reviewing IT controls, user access, system configurations, information-security risks and related processes. Work arrangement (on-site, hybrid or remote) is not stated in the listing. Salary and benefits are also not stated.
What the day-to-day work involves
From the responsibilities listed, the System Control Staff spends most of the time examining and monitoring technical controls rather than building or operating systems.
- Review and monitor user access rights, privileged accounts and segregation-of-duties conflicts
- Carry out periodic user-access recertification and ensure timely deactivation of access for exited or inactive staff
- Examine system configurations, application controls, automated workflows, interfaces, audit trails and exception reports
- Monitor information-security risks, security incidents and system vulnerabilities, then recommend corrective actions
- Independently review system changes to confirm proper authorisation, testing, approval and separation of development, testing and production environments
- Assess controls over customer information, financial data, mortgage documentation, databases, data transmission and data retention
- Review backup arrangements, restoration testing, disaster-recovery procedures and business-continuity readiness
- Give independent technical input during User Acceptance Testing (UAT) and review application interfaces or user experience when required
- Provide independent technical assessment of IT-related costs, systems, equipment and technology proposed for procurement
- Track identified IT control exceptions and remediation actions until they are closed
- Prepare periodic System Security / System Control reports for management that highlight control weaknesses, risk implications, incidents and outstanding remediation
The work is largely review, monitoring and reporting. It requires professional independence and the ability to work with IT, Internal Control, Risk Management, Compliance, Internal Audit and other business functions.
Who the employer is
FirstExcelsia describes itself as a firm of highly versatile and renowned Human Resources, Organisational Development and Management consultants. It states that it has an in-depth understanding of the Nigerian business terrain and partners with indigenous organisations to develop world-class yet localised systems, processes and structures.
Official requirements (as stated by the employer)
- B.Sc. or HND in Computer Science, Information Technology, Cybersecurity or another relevant discipline
- Minimum of 5 years of relevant experience, preferably in banking, financial services, IT control, cybersecurity, IT/system audit or another regulated environment
- Strong practical knowledge of IT controls, information security and cybersecurity risk management
- Knowledge of core banking applications and user-access management
- Understanding of database and network controls
- Knowledge of business continuity and disaster recovery
- Experience in IT audit or system audit will be an advantage
- Relevant professional certifications such as CISA, CISM, CISSP, CRISC or ISO 27001-related certifications will be an added advantage
- Strong analytical and problem-solving skills, attention to detail and professional independence
- Good report-writing and communication skills
- Ability to identify control weaknesses and recommend practical solutions
- Ability to work effectively with IT, Internal Control, Risk Management, Compliance, Internal Audit and other business functions
- Prior experience in banking or financial services
- Strong organisational skills, attention to detail and proficiency in MS Office Suite
- Excellent communication skills (written and verbal) and ability to handle confidential information
Documents required: CV and cover letter.
Who this role suits – and who may find it difficult
The position is aimed at professionals who already have at least five years of hands-on work reviewing IT controls, user access or system security, ideally inside banking, financial services or another regulated setting. Candidates who can demonstrate independence in identifying control gaps, writing clear reports for management and working across control, risk and audit functions are the closest match.
Someone whose experience is mainly system development, pure operations or general IT support without a control or audit focus may find the review-and-challenge nature of the work harder. The need for professional independence and detailed documentation also means the role is less suitable for people who prefer purely hands-on technical tasks without formal reporting and tracking of exceptions.
Practical tips for CV and interview (AlertNaija247 guidance)
These points are guidance only and are not official requirements from the employer.
- On the CV, list specific control reviews you have carried out – for example, user-access recertification cycles, segregation-of-duties checks or reviews of system changes – and note the environment (banking, financial services or regulated entity) where possible.
- Mention any experience tracking exceptions to closure and writing periodic reports for management that highlight weaknesses and risk implications. Concrete examples of remediation follow-up are more useful than generic “IT control” statements.
- If you hold CISA, CISM, CISSP, CRISC or ISO 27001-related certifications, place them clearly near the top of the skills or certifications section.
- Prepare short, factual stories about a control weakness you identified, the practical recommendation you made, and how the issue was tracked or closed. Interviewers for this type of role often ask for evidence of independence and practical problem-solving.
- Keep the CV to one or two pages, single-column and free of heavy graphics so it remains readable on a phone or basic email client. The free AlertNaija247 CV Builder can help produce a clean PDF.
One honest question to ask yourself before applying: Can I point to real examples of independently reviewing IT controls, user access or system changes in a regulated environment, documenting the findings and tracking remediation to closure? If the answer is unclear, this role may not be the best match at this stage.
How to apply
Interested and qualified candidates should send their CV and cover letter to:
Use the exact subject line: System Control Staff
The application email is talentsearch@firstexcelsia.com. Always check that the domain is firstexcelsia.com before sending any documents.
Scam caution
Never pay any fee to apply or to “secure” a position. Legitimate employers do not ask for money, airtime or bank details at the application stage. Confirm the email address ends with @firstexcelsia.com. If anything feels off, stop and verify independently.
For other current openings, visit the Jobs section on AlertNaija247.