Strategic Security Governance & Risk Leader

Old Mutual South Africa; Cape Town; On-site; ZAR 900,000 - 1,800,000; Full time

Job summary

Old Mutual South Africa is seeking a Security Governance and Risk Lead to drive the Group Information Security Governance and Risk Management Framework across business clusters. You will define policies, standards, and control requirements, ensuring alignment with risk appetite and regulatory obligations.

You will provide independent oversight, oversee governance forums, and advance maturity in security governance, risk assessment, and assurance across the organisation, including AI and cloud

Qualifications

• Relevant tertiary qualification in Information Security, Cybersecurity, Information Technology, Risk Management or related discipline.
• 8–10 years of experience in information security, governance, risk management, cyber resilience, technology risk, or related control functions.
• 3+ years in a management role.
• Proven experience developing, implementing, and maintaining enterprise-wide security governance frameworks, policies, standards, control libraries, and risk methodologies.
• Experience in financial services or highly regulated environments with regulators, risk committees, audit teams, and executive leadership.
• Strong knowledge of information security governance, technology risk, controls design, assurance practices, and regulatory obligations.

Responsibilities

• Develop, maintain, and continuously improve the Group Information Security Governance Framework.
• Define governance operating models, forums, decision rights, and escalation paths.
• Maintain Group-wide information security principles, policies, standards, procedures, and governance artefacts.
• Drive adoption of consistent governance practices across clusters and security functions.
• Provide independent oversight of cluster alignment to requirements and risk appetite.
• Define and maintain Group Tight and Loose Security principles and mandatory controls.
• Review exception requests, deviations, and compensating controls.
• Monitor implementation and report compliance and systemic issues to governance forums.
• Maintain and enhance Security Policy, Standards Framework, and risk methodologies.
• Define governance for AI, cloud security, and cyber resilience.
• Ensure frameworks are practical, risk-based, and measurable.
• Oversee governance activities and report progress to appropriate forums.

Skills

Adaptive Thinking

Business Requirements Analysis

Change Management

Cultural Awareness

Current State Assessment

Data Compilation

Executing Plans

Gap Analysis

Identifying Customer Needs

Legal Practices

Policies & Procedures

Policy Development

Presenting Solutions

Readiness Assessments

Education

Masters

Job description

Old Mutual South Africa is seeking a Security Governance and Risk Lead to drive the Group Information Security Governance and Risk Management Framework across business clusters. You will define policies, standards, and control requirements, ensuring alignment with risk appetite and regulatory obligations.

You will provide independent oversight, oversee governance forums, and advance maturity in security governance, risk assessment, and assurance across the organisation, including AI and cloud