Information Security & Risk Governance Lead

Vitality; Johannesburg; Hybrid; ZAR 900.000 - 1.300.000; Vollzeit

Benefits dieser Stelle

Bonus schemes

Retirement support

Health & wellbeing

Financial protection

Zusammenfassung

Vitality in Johannesburg is seeking an Information Security Officer to lead and strengthen the information security governance framework across the group, ensuring information assets are protected and regulatory obligations are met. Hybrid work includes two days per week in the Sandton Office.

You will maintain the ISMS, oversee ISO 27001 and multi-market compliance, manage information security risk and support the wider Information Security Strategy.

Qualifikationen

• Seven years’ experience in information security.
• Degree or professional security qualification (CISSP/CISM/CISA or equivalent).
• Experience with ISO 27001 and governance frameworks (ISO 27002, PCI DSS or NIST).
• Knowledge of data protection and regulatory requirements (GDPR, FCA, ICO, PRA).
• Experience across SDLC and Agile delivery environments.
• Excellent communication and ability to explain security to non-technical audiences.

Aufgaben

• Lead maintenance of the Information Security Management System and multi-market compliance.
• Manage the information security governance framework with risk identification, reporting and remediation.
• Deliver security initiatives supporting the Information Security Strategy.
• Provide security oversight across projects, suppliers and the SDLC/Agile processes.
• Develop and maintain security policies, standards and guidance.
• Plan and deliver compliance reviews and close control gaps.

Kenntnisse

Security governance

Information risk management

Regulatory compliance knowledge

Ausbildung

Degree or security qualification

Tools

ISO 27001

ISO 27002

PCI DSS

NIST

Jobbeschreibung

Vitality in Johannesburg is seeking an Information Security Officer to lead and strengthen the information security governance framework across the group, ensuring information assets are protected and regulatory obligations are met. Hybrid work includes two days per week in the Sandton Office.

You will maintain the ISMS, oversee ISO 27001 and multi-market compliance, manage information security risk and support the wider Information Security Strategy.