vCISO Advisory & Data Protection — Lagos, Nigeria

Security and privacy
governance, built to
withstand scrutiny.

AegisIntel Nigeria advises financial institutions, fintechs, and pre-launch platforms on virtual CISO leadership, NDPA/NDPC compliance, and cyber risk quantification — work that regulators, boards, and auditors can rely on.

AEGISINTEL ADVISORY · NIGERIA CHAPTER · GOVERNANCE · PRIVACY · RISK ·
I. Practice Areas

Four disciplines, one accountable advisor

Engagements run as fractional, project-based, or advisory-retainer arrangements.

Virtual CISO Services

Fractional security leadership for organisations that need board-level judgment without a full-time hire — informed by three separate CISO appointments across banking and fintech.

  • Security strategy & board/BRMC reporting
  • Risk register & vulnerability management design
  • Vendor and third-party risk oversight
  • Incident readiness & DFIR advisory

Data Protection & DPO Services

End-to-end privacy compliance for regulated and pre-launch platforms, from registration through operating policy.

  • NDPC DCPMI registration & filings
  • Consultant DPO appointment
  • Data protection policy & consent management design
  • Data protection impact assessments

Compliance Programme Build-Out

Structured, document-driven compliance suites mapped to the frameworks that actually govern the client's sector.

  • NDPA-aligned compliance documentation suites
  • ISO 27001 readiness & phased certification roadmaps
  • Gap analyses against sector guidelines
  • Cross-border alignment (OSFI, DORA, NIS2)

Cyber Risk & Loss Quantification

Turning security posture into figures a finance committee can act on, using recognised quantitative methods.

  • FAIR-based loss exposure modelling
  • Monte Carlo simulation of loss scenarios
  • Application & infrastructure security assessments
  • Board-ready risk narratives, not just heat maps
II. Selected Engagements

A record of delivered work

Client names withheld or generalised where confidentiality applies.
FILE 001

Data protection compliance suite — pre-launch proptech platform

Led NDPC DCPMI registration and built a twelve-document data protection compliance suite as Lead Compliance Advisor and Consultant DPO, ahead of platform launch.

Privacy · DPO
FILE 002

DORA / NIS2 advisory build-out — Western Europe expansion

Developed a full strategic build-out for EU market entry: skills-gap mapping, a credentialing roadmap, three service offerings, and a jurisdictional analysis of incorporation options.

Compliance · Strategy
FILE 003

DFIR counter-proposal — incident response engagement

Authored an incident response counter-proposal for a client following a compromised-contributor-account incident, evaluating and refining an incumbent vendor's approach.

Incident Response
FILE 004

ISO 27001 certification roadmap — software development firm

Advised a Nigerian devshop through a phased programme toward ISO 27001 certification, sequencing controls implementation against business constraints.

ISO 27001
FILE 005

Quantitative cyber loss framework

Built a FAIR-methodology loss quantification framework with a Python Monte Carlo simulation engine and FX-adjusted exposure modelling, packaged as a reusable methodology.

Risk Quantification
III. Credentials

Standing behind the work

CISSP CCSP C|CISO CISA CDPO ISO 27001 LA ISO 31000 LRM
16+
Years in practice
CISO appointments
8
Institutions served

AegisIntel Nigeria is led by Oluleke Olatunji, a three-time CISO and Data Protection Officer whose career spans banking, capital markets, payments, and fintech. He serves as Research Committee Lead at CCISONFI, the Committee of CISOs of Nigerian Financial Institutions, and publishes Sovereign Signal, a newsletter on cybersecurity, data protection, and digital finance across Africa and Canada.

AegisIntel Advisory is headquartered in Alberta, Canada, with this Nigeria practice serving the local market while feeding a broader mandate across Canada, Australia, and Western Europe.

IV. Get in Touch

Start a conversation

Whether it's a fractional CISO mandate, an NDPC registration, or a compliance gap that needs an honest read — reach out directly.

Base Lagos, Nigeria

Enquiries are reviewed personally. For time-sensitive incident response requests, call directly rather than email.

Send an Enquiry Call Now