Senior Application Security Lead

Old Mutual Limited; Johannesburg; On-site; ZAR 900,000 - 1,300,000; Full time

Job summary

Old Mutual Limited in Johannesburg is seeking a Senior Application Security Specialist to lead the IT GRCS and Information and Cybersecurity teams, embedding security into the software lifecycle from design to release. You will oversee SAST, DAST, SCA, API security and third-party risk, collaborate with developers, procurement and legal, and drive secure coding practices across CI/CD pipelines.

The role requires hands-on leadership, 5+ years in application security and a relevant degree;

Qualifications

• Minimum degree requirements as listed in job posting.
• Demonstrable experience in application security and testing across SDLC.

Responsibilities

• Lead the Application Security team within IT GRCS, Information and Cybersecurity.
• Set and enforce application security standards across design, code, testing and release.
• Oversee SAST/DAST/CI/CD integration and third-party/SaaS security.
• Coordinate security assessments with external providers and ensure remediation within SLAs.

Skills

SAST

DAST

SCA

API Security

Threat Modelling

CI/CD Pipelines

OWASP Top 10

OWASP ASVS

Security Testing

Leadership

Education

Bachelor of Commerce (BCom) IT Management

National Diploma in Computer Science/Information Systems/Engineering

Tools

SAST tools

DAST tools

SCA tools

Job description

Old Mutual Limited in Johannesburg is seeking a Senior Application Security Specialist to lead the IT GRCS and Information and Cybersecurity teams, embedding security into the software lifecycle from design to release. You will oversee SAST, DAST, SCA, API security and third-party risk, collaborate with developers, procurement and legal, and drive secure coding practices across CI/CD pipelines.

The role requires hands-on leadership, 5+ years in application security and a relevant degree;