Security Governance Leader - Risk & Compliance

Old Mutual Life Assurance Company (SA) Ltd; Cape Town; On-site; ZAR 1,200,000 - 2,000,000; Full time

Job summary

Old Mutual Life Assurance Company (SA) Ltd is seeking a Security Governance and Risk Lead to drive the Group Information Security Governance Framework, risk management, and regulatory compliance across business clusters. The role ensures alignment with Group security requirements and provides independent oversight.

The position requires 8–10 years in information security, governance, and risk, with at least 3 years in a management role, and strong leadership and stakeholder skills.

Qualifications

• 8-10 years of experience in information security, governance, risk management, cyber resilience, technology risk, or related control functions.
• 3+ years in a management role.
• Experience developing, implementing, and maintaining enterprise-wide security governance frameworks, policies, standards, control libraries, and risk methodologies.
• Experience in financial services or other highly regulated environments with regulators, risk committees, audit teams, and executive leadership.
• Strong knowledge of information security governance, risk, controls, assurance, and cyber resilience frameworks.

Responsibilities

• Develop, maintain, and continuously improve the Group Information Security Governance Framework.
• Define security governance operating models, forums, decision rights, and escalation paths across the Group.
• Maintain Group-wide information security principles, policies, standards, procedures, control requirements, and governance artefacts.
• Drive adoption of consistent governance practices across clusters, technology teams, and security functions.
• Provide independent oversight of cluster-level alignment to Group security requirements, governance decisions, and risk appetite.
• Define and maintain the Group’s Tight and Loose Security principles, ensuring clarity on mandatory controls and local flexibility.
• Review exception requests, deviations, and compensating controls for alignment with risk appetite.
• Monitor implementation across clusters and report compliance, deviations, and systemic issues to governance forums.
• Maintain and enhance the Information Security Policy, Standards Framework, risk management methodology, and control libraries.
• Ensure frameworks address AI security governance, cloud security governance, and cyber resilience.

Skills

Adaptive Thinking

Business Requirements Analysis

Change Management

Cultural Awareness

Current State Assessment

Data Compilation

Executing Plans

Gap Analysis

Identifying Customer Needs

Legal Practices

Policies & Procedures

Policy Development

Presenting Solutions

Readiness Assessments

Education

Masters degree or equivalent in Information Security or related field

NQF Level 9 – Masters

Job description

Old Mutual Life Assurance Company (SA) Ltd is seeking a Security Governance and Risk Lead to drive the Group Information Security Governance Framework, risk management, and regulatory compliance across business clusters. The role ensures alignment with Group security requirements and provides independent oversight.

The position requires 8–10 years in information security, governance, and risk, with at least 3 years in a management role, and strong leadership and stakeholder skills.