Information Security Officer

Vitality; Sandton; Hybrid; ZAR 900,000 - 1,500,000; Full time

Benefits offered by this job

Bonus schemes

Retirement support

Discovery Medical Health Scheme

Life assurance, income protection & LT

Job summary

Vitality is seeking an Information Security Officer to lead governance and strengthen the ISMS across the Vitality Group, ensuring protection of information assets and regulatory compliance. The role collaborates with the Governance Lead and teams, maintains ISO 27001 and multi-market compliance, and oversees security across suppliers and software development lifecycles.

Based in Johannesburg with hybrid work (2 days in the Sandton office) and occasional travel to UK sites, the role requires

Qualifications

• This role requires at least seven years in information security.
• Degree or equivalent professional qualification with CISSP, CISM, CISA or equivalent.
• Strong experience with ISO 27001 and governance frameworks (ISO 27002, PCI DSS, NIST).
• Experience in information security risk management, supplier assessments and regulatory compliance.
• Knowledge of GDPR, FCA, ICO, PRA regulatory expectations.
• Experience overseeing security in SDLC and Agile environments.
• Excellent communication for non-technical audiences.
• Experience in insurance, healthcare or financial services and internal audits is advantageous.

Responsibilities

• Lead maintenance of the ISMS and multi-market compliance across Vitality Group.
• Manage the information security governance framework and address risks per regulatory needs.
• Deliver security initiatives supporting the Information Security Strategy.
• Provide security oversight across projects and the SDLC/Agile processes.
• Assess and manage supplier security risks with stakeholders.
• Develop and maintain security policies, standards and guidance.
• Plan and deliver compliance reviews and remedial actions.
• Produce governance and risk reports for key committees.
• Develop information security awareness and training.
• Monitor threats and regulatory developments to inform priorities.

Skills

Extensive security governance

Proven information risk management

Regulatory compliance knowledge

Education

Degree or equivalent security qualification (CISSP/CISM/CISA)

Job description

About The Role

Team - Information Security

Working Pattern - Hybrid – 2days per week in the Vitality Sandton Office.Full time, 37.5 hours per week.

We are happy to discuss flexible working!

Top 3 skills needed for this role:

• Extensive security governance expertise
• Proven information risk management
• Strong regulatory compliance knowledge

What this role is all about

This role is responsible for leading and strengthening the information security governance framework across Vitality, ensuring information assets are protected and regulatory obligations are met. Working closely with the Governance Lead and teams across the business, the Information Security Officer will maintain the ISMS, oversee ISO 27001 and multi-market compliance, manage information security risk and support the delivery of the wider Information Security Strategy. The role will also provide security oversight across suppliers, projects and the software development lifecycle, while driving effective policies, assurance activity and security awareness. Based in Johannesburg, the position may require occasional travel to UK sites.

Key Actions

• Lead the continuous improvement and maintenance of the Information Security Management System, supporting ISO 27001 and multi-market compliance across the Vitality Group
• Manage the information security governance framework and ensure security risks are identified, assessed, reported and addressed in line with business and regulatory requirements
• Deliver key information security initiatives and projects that support the Information Security Strategy and strengthen the organisation’s overall security position
• Provide security oversight across projects and development activity, including the SDLC, Agile delivery processes and Data Protection Impact Assessments
• Assess and manage supplier security risks in partnership with Cyber Security Operations and relevant internal stakeholders
• Develop and maintain information security policies, standards, procedures and guidance that provide clear and consistent controls across the business
• Plan and deliver compliance reviews, identify control gaps and work with stakeholders to ensure appropriate remedial action is completed
• Produce clear governance and risk reporting for the Information Governance Steering Group, Information Asset Owners and Senior Information Risk Owner
• Develop and deliver security awareness and training activity that improves understanding and promotes secure working practices across the organisation
• Monitor emerging security threats, regulatory developments, industry standards and security technologies to inform future governance priorities and business planning

What do you need to thrive?

• A minimum of seven years’ experience working within information security
• A degree or equivalent professional security qualification, with certifications such as CISSP, CISM, CISA or an equivalent credential
• Strong experience managing ISO 27001 and other security governance frameworks, including ISO 27002, PCI DSS or NIST
• Practical experience of information security risk management, supplier security assessments and regulatory compliance
• Knowledge of relevant data protection and regulatory requirements, including GDPR, FCA, ICO and PRA expectations
• Experience providing security oversight throughout the software development lifecycle and within Agile delivery environments
• Excellent written and verbal communication skills, with the ability to explain technical security matters to non-technical audiences
• Strong experience producing policies, standards, governance reports, audit documentation and project materials
• The ability to work independently, solve complex problems and manage competing priorities accurately under pressure
• Experience within insurance, healthcare or financial services and conducting internal security audits would be advantageous

So, what’s in it for you?

• Bonus Schemes – A bonus that regularly rewards you for your performance
• Retirement support – We will match your contributions up to 5% of your salary
• Health & wellbeing – Discovery Medical Health Scheme
• Financial protection - Life assurance, income protection and short and long-term disability insurance

These are just some of the many perks that we offer! To view the extensive range of benefits we offer, please visit our careers page.

Fantastic Benefits. Exciting rewards. Great career opportunities!

If you are successfulin your application and join us at Vitality, this is our promise to you, we will:

• Help you to be the healthiest you’ve ever been.
• Create an environment that embraces you as you are and enables you to be your best self.
• Give you flexibility on how, where and when you work.
• Help you advance your career by playing you to your strengths.
• Give you a voice to help our business grow and make Vitality a great place to be.
• Give you the space to try, fail and learn.
• Provide a healthy balance of challenge and support.
• Recognise and reward you with a competitive salary and amazing benefits.
• Be there for you when you need us.
• Provide opportunities for you to be a force for good in society.

We commit to all these things because we want you to feel that you belong, and are supported to be happy and healthy.

About Us

Vitality South Africa plays a key role in the development and delivery of the shared‑value insurance model within the Discovery Group. The team leads key strategic initiatives in the South African market, strengthens alignment across the organisation, and ensures the successful implementation of Vitality’s health and wellness programmes. In addition, the team provides specialised expertise, cutting edge technology, behavioural science and health and wellness, drawing on both global innovation and local market insight.Roles within Vitality South Africa are dynamic and fast‑paced. As such, we are seeking individuals who are adaptable, solutions‑oriented, and capable of delivering high‑quality, sustainable value in a complex and evolving environment.

Employment Equity

The Company’s approved Employment Equity Plan and Targets will be considered as part of the recruitment process. As an Equal Opportunities employer, we actively encourage and welcome people with various disabilities to apply.