Information Security Officer

Vitality; Johannesburg; Hybrid; ZAR 900,000 - 1,300,000; Full time

Benefits offered by this job

Bonus schemes

Retirement support

Health & wellbeing

Financial protection

Job summary

Vitality in Johannesburg is seeking an Information Security Officer to lead and strengthen the information security governance framework across the group, ensuring information assets are protected and regulatory obligations are met. Hybrid work includes two days per week in the Sandton Office.

You will maintain the ISMS, oversee ISO 27001 and multi-market compliance, manage information security risk and support the wider Information Security Strategy.

Qualifications

• Seven years’ experience in information security.
• Degree or professional security qualification (CISSP/CISM/CISA or equivalent).
• Experience with ISO 27001 and governance frameworks (ISO 27002, PCI DSS or NIST).
• Knowledge of data protection and regulatory requirements (GDPR, FCA, ICO, PRA).
• Experience across SDLC and Agile delivery environments.
• Excellent communication and ability to explain security to non-technical audiences.

Responsibilities

• Lead maintenance of the Information Security Management System and multi-market compliance.
• Manage the information security governance framework with risk identification, reporting and remediation.
• Deliver security initiatives supporting the Information Security Strategy.
• Provide security oversight across projects, suppliers and the SDLC/Agile processes.
• Develop and maintain security policies, standards and guidance.
• Plan and deliver compliance reviews and close control gaps.

Skills

Security governance

Information risk management

Regulatory compliance knowledge

Education

Degree or security qualification

Tools

ISO 27001

ISO 27002

PCI DSS

NIST

Job description

Team - Information Security

Hybrid - 2 days per week in the Vitality Sandton Office. Full time, 37.5 hours per week.

We are happy to discuss flexible working!

Top 3 skills needed for this role:

• Extensive security governance expertise
• Proven information risk management
• Strong regulatory compliance knowledge

What This Role Is All About

This role is responsible for leading and strengthening the information security governance framework across Vitality, ensuring information assets are protected and regulatory obligations are met. Working closely with the Governance Lead and teams across the business, the Information Security Officer will maintain the ISMS, oversee ISO 27001 and multi-market compliance, manage information security risk and support the delivery of the wider Information Security Strategy. The role will also provide security oversight across suppliers, projects and the software development lifecycle, while driving effective policies, assurance activity and security awareness. Based in Johannesburg, the position may require occasional travel to UK sites.

Key Actions

• Lead the continuous improvement and maintenance of the Information Security Management System, supporting ISO 27001 and multi-market compliance across the Vitality Group
• Manage the information security governance framework and ensure security risks are identified, assessed, reported and addressed in line with business and regulatory requirements
• Deliver key information security initiatives and projects that support the Information Security Strategy and strengthen the organisation’s overall security position
• Provide security oversight across projects and development activity, including the SDLC, Agile delivery processes and Data Protection Impact Assessments
• Assess and manage supplier security risks in partnership with Cyber Security Operations and relevant internal stakeholders
• Develop and maintain information security policies, standards, procedures and guidance that provide clear and consistent controls across the business
• Plan and deliver compliance reviews, identify control gaps and work with stakeholders to ensure appropriate remedial action is completed
• Produce clear governance and risk reporting for the Information Governance Steering Group, Information Asset Owners and Senior Information Risk Owner
• Develop and deliver security awareness and training activity that improves understanding and promotes secure working practices across the organisation
• Monitor emerging security threats, regulatory developments, industry standards and security technologies to inform future governance priorities and business planning

What do you need to thrive?

• A minimum of seven years’ experience working within information security
• A degree or equivalent professional security qualification, with certifications such as CISSP, CISM, CISA or an equivalent credential
• Strong experience managing ISO 27001 and other security governance frameworks, including ISO 27002, PCI DSS or NIST
• Practical experience of information security risk management, supplier security assessments and regulatory compliance
• Knowledge of relevant data protection and regulatory requirements, including GDPR, FCA, ICO and PRA expectations
• Experience providing security oversight throughout the software development lifecycle and within Agile delivery environments
• Excellent written and verbal communication skills, with the ability to explain technical security matters to non-technical audiences
• Strong experience producing policies, standards, governance reports, audit documentation and project materials
• The ability to work independently, solve complex problems and manage competing priorities accurately under pressure
• Experience within insurance, healthcare or financial services and conducting internal security audits would be advantageous

So, what’s in it for you?

• Bonus Schemes - A bonus that regularly rewards you for your performance
• Retirement support - We will match your contributions up to 5% of your salary
• Health & wellbeing - Discovery Medical Health Scheme
• Financial protection - Life assurance, income protection and short and long-term disability insurance

These are just some of the many perks that we offer! To view the extensive range of benefits we offer, please visit our careers page. Fantastic Benefits. Exciting rewards. Great career opportunities!

If you are successful in your application and join us at Vitality, this is our promise to you, we will:

• Help you to be the healthiest you’ve ever been.
• Create an environment that embraces you as you are and enables you to be your best self.
• Give you flexibility on how, where and when you work.
• Help you advance your career by playing you to your strengths.
• Give you a voice to help our business grow and make Vitality a great place to be.
• Give you the space to try, fail and learn.
• Provide a healthy balance of challenge and support.
• Recognise and reward you with a competitive salary and amazing benefits.
• Be there for you when you need us.
• Provide opportunities for you to be a force for good in society.

We commit to all these things because we want you to feel that you belong, and are supported to be happy and healthy.