Cyber Resilience Lead — Information Security Strategy

Old Mutual South Africa; Cape Town; On-site; ZAR 1,100,000 - 1,800,000; Full time

Job summary

Old Mutual South Africa is seeking an experienced Information Security Officer to drive the delivery of the organisation’s cybersecurity strategy across assigned business units.

The role translates strategic priorities, security policies, regulatory obligations and risk requirements into practical initiatives and sustainable controls to strengthen cyber resilience across applications, infrastructure, cloud, data and third parties.

Qualifications

• Degree or honours in information security, cybersecurity, information technology or related field.
• 6–8 years’ experience in information security, cybersecurity, or IT risk and resilience programs.
• Strong knowledge of frameworks such as NIST CSF, ISO/IEC 27001 and COBIT, with executive reporting ability.
• Certifications such as CISSP, CISM, CRISC or CISA are preferred.
• Experience in financial services, cloud security, third‑party risk, and incident readiness.

Responsibilities

• Lead information security governance, policy development and risk management across business units.
• Coordinate security improvement roadmaps, embedding secure‑by‑design practices.
• Educate employees and ensure compliance with policies, standards and regulatory requirements.
• Collaborate with IT, risk, and business leaders to align security priorities with strategic goals.
• Monitor risk trends, report to senior leadership, and drive continual security maturity.

Skills

Information Security

Cybersecurity

IT Risk

Policy Development

Stakeholder Engagement

Leadership

Cloud Security

Regulatory Compliance

NIST CSF

ISO/IEC 27001

COBIT

CISSP/CISM/CRISC/CISA preferred

Education

Masters in Information Security

Bachelor’s degree / Honours in IT or related

Job description

Old Mutual South Africa is seeking an experienced Information Security Officer to drive the delivery of the organisation’s cybersecurity strategy across assigned business units.

The role translates strategic priorities, security policies, regulatory obligations and risk requirements into practical initiatives and sustainable controls to strengthen cyber resilience across applications, infrastructure, cloud, data and third parties.