Chief Information Security Officer (CISO) at Life Healthcare, Johannesburg

Life Healthcare Group is hiring a Chief Information Security Officer to sit at their Head Office in Dunkeld, Johannesburg. You will report directly to the Chief Information Officer and take charge of the organisation's security vision, strategy and day to day operations.

This role goes beyond IT. You will be responsible for protecting enterprise IT systems, business operations and physical facility defenses against security breaches and vulnerabilities. That means shaping policy, auditing systems and leading a security function that covers everything from firewalls to fire alarms.

What you will be doing:

• Lead strategic security planning and prioritise defense initiatives using risk based assessments.
• Develop and communicate security strategies to executives, staff, partners and customers.
• Manage ISO 27001 compliance and the information security management system (ISMS).
• Oversee security budgets, policies and the administration of all computer and facility security systems.
• Work with the Group Chief Digital Officer, in country CIOs, privacy officer and HR to keep security and privacy policies on track.
• Stay ahead of security trends and advise executive teams on their financial impact.

Application note: The closing date is Thursday, 12 November 2026. Internal applicants must discuss their application with their line manager first. External candidates are also welcome to apply. Download the application form and email it to the contact person listed in the job advert. Only shortlisted candidates will be contacted, and if you have not heard back within two weeks of the closing date, please consider your application unsuccessful.

• University degree in Computer Science or Business Administration. A Master's degree in one of these fields, or in Information Security, is preferred.
• 10 years of experience managing and/or directing an IT and/or security operation.
• 10 years of experience working in services industries.
• Proven experience in planning, organising and developing IT security and facility security system technologies.
• Experience in planning and executing security policies and standards development.
• Excellent knowledge of technology environments, including information security, building security and defense solutions.
• Considerable knowledge of business theory, business processes, management, budgeting and business office operations.
• Substantial exposure to data processing, hardware platforms, enterprise software applications and outsourced systems.
• Good understanding of computer systems characteristics, features and integration capabilities.
• Experience with systems design and development from business requirements analysis through to day to day management.
• Excellent understanding of project management principles.
• In depth knowledge of applicable laws and regulations as they relate to security.
• Proven leadership ability.
• Excellent written and oral communication skills.
• Excellent interpersonal skills and strong negotiating skills.
• Ability to present ideas in business friendly and user friendly language.
• Exceptionally self motivated and directed, with keen attention to detail.
• Superior analytical, evaluative and problem solving abilities.
• Exceptional service orientation and ability to motivate in a team oriented, collaborative environment.

• Participate as a member of the IT Manco team in governance processes for the organisation's security and IT strategies.
• Lead strategic security planning and prioritise defense initiatives using a risk based assessment methodology.
• Develop and communicate security strategies and plans to the executive team, staff, partners, customers and stakeholders.
• Assist with the design and implementation of disaster recovery and business continuity plans, procedures, audits and enhancements.
• Develop, implement, maintain and oversee enforcement of the information security management system (ISMS), including policies and procedures for system security administration and user system access.
• Manage ISO 27001 compliance.
• Define and communicate corporate plans, procedures, policies and standards for acquiring, implementing and operating new security systems, equipment, software and other technologies.
• Act as advocate and primary liaison for the company's security vision through written and in person communications with executives, department heads and end users.
• Work closely with the IT department on corporate technology development to fully secure information, computer, network and processing systems.
• Oversee the administration of all computer security systems and their software, including firewalls, intrusion detection systems, cryptography systems and anti virus software.
• Oversee the administration of the facility's security systems and equipment, including fire alarms, locks, intruder detection systems, sprinkler systems and anti theft measures.
• Develop, track and control the security services annual operating and capital budgets for purchasing, staffing and operations.
• Ensure that facilities, premises and equipment adhere to all applicable laws and regulations.
• Recommend and implement changes in security policies and practices in line with changes in local or federal law.
• Provide resolution to security problems in a cost effective manner.
• Assess and communicate security risks associated with purchases or practices performed by the company.
• Collaborate with the Group Chief Digital Officer, in country CIOs, privacy officer and HR to maintain a system for ensuring security and privacy policies are met.
• Supervise recruitment, development, retention and organisation of security staff in line with corporate budgetary objectives and personnel policies.
• Promote and oversee strategic security relationships between internal resources and external entities, including government, vendors and partner organisations.
• Remain informed on trends and issues in the security industry, including current and emerging technologies and prices, and advise executive and management teams on their importance and financial impact.