InfoSec Leader: ISO 27001, Compliance & Risk

Vitality; Sandton; Hybrid; ZAR 900,000 - 1,500,000; Full time

Benefits offered by this job

Bonus schemes

Retirement support

Discovery Medical Health Scheme

Life assurance, income protection & LT

Job summary

Vitality is seeking an Information Security Officer to lead governance and strengthen the ISMS across the Vitality Group, ensuring protection of information assets and regulatory compliance. The role collaborates with the Governance Lead and teams, maintains ISO 27001 and multi-market compliance, and oversees security across suppliers and software development lifecycles.

Based in Johannesburg with hybrid work (2 days in the Sandton office) and occasional travel to UK sites, the role requires

Qualifications

• This role requires at least seven years in information security.
• Degree or equivalent professional qualification with CISSP, CISM, CISA or equivalent.
• Strong experience with ISO 27001 and governance frameworks (ISO 27002, PCI DSS, NIST).
• Experience in information security risk management, supplier assessments and regulatory compliance.
• Knowledge of GDPR, FCA, ICO, PRA regulatory expectations.
• Experience overseeing security in SDLC and Agile environments.
• Excellent communication for non-technical audiences.
• Experience in insurance, healthcare or financial services and internal audits is advantageous.

Responsibilities

• Lead maintenance of the ISMS and multi-market compliance across Vitality Group.
• Manage the information security governance framework and address risks per regulatory needs.
• Deliver security initiatives supporting the Information Security Strategy.
• Provide security oversight across projects and the SDLC/Agile processes.
• Assess and manage supplier security risks with stakeholders.
• Develop and maintain security policies, standards and guidance.
• Plan and deliver compliance reviews and remedial actions.
• Produce governance and risk reports for key committees.
• Develop information security awareness and training.
• Monitor threats and regulatory developments to inform priorities.

Skills

Extensive security governance

Proven information risk management

Regulatory compliance knowledge

Education

Degree or equivalent security qualification (CISSP/CISM/CISA)

Job description

Vitality is seeking an Information Security Officer to lead governance and strengthen the ISMS across the Vitality Group, ensuring protection of information assets and regulatory compliance. The role collaborates with the Governance Lead and teams, maintains ISO 27001 and multi-market compliance, and oversees security across suppliers and software development lifecycles.

Based in Johannesburg with hybrid work (2 days in the Sandton office) and occasional travel to UK sites, the role requires