Head Of Grc, Privacy & Advisory
We’re Hiring!
Job Title: Head Of GRC, Privacy & Advisory
Location: Ghana/Nigeria
About Tenece Cybersecurity Services Limited.
Tenece Cybersecurity provides cybersecurity solutions and managed security services to help organisations protect their digital assets, manage cyber risks and strengthen their security posture. We are building a team to bridge Africa’s cybersecurity gap by providing world-class, 24/7 threat detection, response, and specialist expertise to defend enterprise ecosystems against evolving global threats and deliver world-class managed security services engineered for the unique African threat landscape, securing critical data and building a resilient digital foundation for the continent. We are therefore seeking an experienced leader to build and scale our Governance, Risk and Compliance (GRC), Privacy and Advisory practice.
Role Overview
The Head of GRC, Privacy & Advisory will lead the development, delivery and growth of Tenece Cybersecurity’s GRC and professional advisory services. The successful candidate will drive high-value consulting engagements across virtual Chief Information Security Officer (vCISO) services, regulatory compliance, privacy, IT risk management, security framework assessments and internal controls.
This role requires a commercially minded cybersecurity leader who can translate complex regulatory and technical requirements into practical business solutions, build a high-performing consulting team and develop scalable advisory services that support revenue growth.
Key Responsibilities
- GRC Practice Leadership
Lead the strategy, development and growth of the GRC, Privacy and Advisory business unit. Establish consulting methodologies, delivery standards, quality controls and utilisation targets. Lead and mentor a team of GRC and cybersecurity advisory professionals. Ensure the delivery of high-quality, actionable and executive-ready risk and compliance reports. Drive continuous improvement in service delivery, client satisfaction and operational efficiency.
- Cybersecurity Advisory and vCISO Services
Develop and standardise virtual CISO (vCISO) service delivery frameworks. Advise clients on cybersecurity strategies, security roadmaps, risk management and governance. Support executive leadership and boards with security reporting, risk prioritisation and vulnerability governance. Conduct IT risk assessments, internal control reviews, security audits and cybersecurity maturity assessments. Provide practical recommendations that align security requirements with business objectives.
- Compliance and Privacy Advisory
Lead compliance readiness assessments, gap analyses and ongoing governance programmes. Support clients in implementing, auditing and maintaining relevant security and compliance frameworks, including ISO 27001, SOC 2, CMMC, NIST CSF, HIPAA and PCI DSS. Advise on applicable data privacy laws, including GDPR, CCPA and relevant country-specific regulations. Identify compliance gaps and develop remediation roadmaps, policies, procedures and control frameworks. Monitor changes in cybersecurity regulations, privacy requirements and insurance obligations to anticipate client needs.
- Service Development and Commercialisation
Convert regulatory and compliance requirements into structured, repeatable and scalable advisory service offerings. Collaborate with the Products & Solutions team to align compliance evidence collection with SOC/SIEM platforms and security monitoring capabilities. Partner with the Sales team to develop compliance-led sales opportunities and expand managed security services engagements. Support proposals, client presentations, solution design and commercial negotiations. Identify new market opportunities and develop service offerings that strengthen the organisation’s competitive position.
- Internal GRC and Controls
Oversee internal governance, risk management, compliance and internal control activities within the business. Support the development and maintenance of relevant policies, procedures, risk registers and compliance documentation. Promote a culture of accountability, risk awareness and continuous improvement. Track remediation actions and report significant risks, control gaps and compliance issues to management.
- Stakeholder and Client Management
Build trusted relationships with enterprise and mid-market clients, senior executives, boards and legal teams. Communicate technical risks in clear business terms and recommend proportionate, commercially practical solutions. Coordinate cross-functional teams to ensure consistent delivery of client engagements. Represent Tenece Cybersecurity Professional Services in relevant client meetings, industry forums and advisory engagements.
Required Qualifications and Experience
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Risk Management or a related discipline. A master’s degree is preferred. At least eight (8) years of relevant cybersecurity experience, including a minimum of four (4) years leading a compliance consulting, IT audit, internal controls or GRC practice. Experience within a Managed Security Services Provider (MSSP), Big Four firm or specialised cybersecurity advisory organisation. Strong practical knowledge of security control assessment, framework mapping, audit execution and regulatory compliance. Demonstrated experience in consulting delivery, client management, team leadership and business development. Proven ability to advise senior executives and balance technical risk with commercial priorities. Demonstrated experience advising corporate boards, legal teams and C-suite executives. A proven track record of building advisory services and contributing to revenue growth.
Mandatory Professional Certifications
Candidates must hold at least two recognised industry certifications from the following:
ISO 27001 Lead Implementer or Lead Auditor Certified Information Systems Auditor (CISA) Certified Information Security Manager (CISM) Certified in Risk and Information Systems Control (CRISC) Certified Chief Information Security Officer (CCISO) Certified Information Systems Security Professional (CISSP)
Technical Knowledge and Competencies
Strong working knowledge of SOC 2, CMMC Level 2 or higher, ISO 27001, NIST 800-53, NIST CSF, COBIT and TOGAF. Knowledge of global privacy legislation and applicable country-specific cybersecurity and data protection regulations. Strong understanding of enterprise risk management, IT governance, security controls and audit methodologies. Ability to develop standardised consulting frameworks, compliance programmes and executive reporting tools. Strong commercial awareness, strategic thinking, stakeholder management and communication skills.
Key Success Measures
Growth and commercial performance of the GRC, Privacy and Advisory practice. Quality, timeliness and client satisfaction across consulting engagements. Successful development and adoption of standardised advisory service offerings. Achievement of consulting utilisation and delivery targets. Expansion of compliance-led sales opportunities and managed security services engagements. Effective management of internal GRC, risk and control requirements.
How to Apply
Qualified and interested candidates should submit their CV to sandra.asante@tenece.com
Application Deadline : 30 October 2026.
<