OM Bank - Security Engineer (Identity, Endpoint and Data Protection)
Old Mutual LimitedCape Town, Western Cape, South Africa
8 days ago
Job description
Let's Write Africa's Story Together!
Old Mutual is a firm believer in the African opportunity and our diverse talent reflects this.
Job Description
At OM Bank, we strive to attract great people who are passionate about coming together for a higher purpose- building something unique and aspirational, always aiming to be the best they can be. We are rooted in our purpose of inspiring and enabling our customers to grow and sustain their prosperity. The Security Engineer (Identity, Endpoint & Data Protection) is responsible for implementing, maintaining, and continuously improving security controls across the Endpoint and User Ecosystem - including Identity and Access Management (IAM), Endpoint Protection, Data Loss Prevention (DLP), and Vulnerability Management. Reporting to the Cloud Security Operations Lead, this role safeguards the organisation’s users, data, and endpoints through advanced configuration of Microsoft the Microsoft stack, and supports incident response, cyber defence, and risk remediation activities.The role ensures the secure operation of Microsoft-based assets through proactive identity governance, endpoint compliance, and data protection. The engineer collaborates closely with Cyber Defence, Risk Management, and DevSecOps teams, providing technical expertise to implement risk-driven controls, automate policy enforcement, and improve visibility through Sentinel integration. This position requires hands-on proficiency with Microsoft E5 security tooling, strong analytical capability, and a passion for modern Zero Trust security operations
KEY RESULT AREAS
Identity & Access Management :
Manage and optimise areas such as Azure AD / Entra ID, Conditional Access, PIM, MFA, RBAC, and access package lifecycle governance.
Endpoint Security & Compliance :
Administer endpoint protection tooling with compliance baselines, ensure encryption, patching, and secure configuration of all managed devices.
Data Loss Prevention & Information Protection :
Configure and maintain Microsoft Purview DLP, sensitivity labels, and information governance policies across M365 (Exchange, SharePoint, Teams, OneDrive).
Vulnerability Management :
Operate Microsoft Defender Vulnerability Management (DVM); track, prioritise, and remediate vulnerabilities in coordination with system owners.
Security Monitoring & Incident Response :
Integrate Defender alerts with the SIEM solution; support incident triage, root-cause analysis, and post-incident remediation.
Automation & Policy Deployment :
Build and deploy automated policies using Intune, PowerShell, and Graph API to enforce consistent security posture.
Threat Detection Enhancement :
Fine-tune Defender and SIEM detections to reduce false positives and improve coverage of endpoint, identity, and DLP telemetry.
Risk Remediation Support :
Translate findings from Cyber Risk Analysts into actionable technical changes and validate remediation effectiveness.
Compliance Reporting :
Generate dashboards and reports for device compliance, privileged access, DLP violations, and vulnerability metrics.
Continuous Improvement :
Contribute to the ongoing maturity of the Endpoint and User security ecosystem and adoption of Zero Trust, “Security as Code,” and automation.
ROLE REQUIREMENTS
Bachelor’s degree in Computer Science, Information Security, or equivalent practical experience.
Certifications (Preferred) :
Microsoft Certified : Security Operations Analyst Associate
Microsoft Certified : Identity & Access Administrator Associate
Microsoft Certified : Information Protection Administrator Associate
Microsoft 365 Certified : Enterprise Administrator Expert
CompTIA Security+ / CySA+ / MS-500
Experience :
Minimum 3–5 years in Microsoft 365 / Azure security engineering or equivalent enterprise security operations.
Proven experience managing Intune, Defender for Endpoint, and Entra ID conditional access policies.
Hands-on with Microsoft Purview DLP and sensitivity labelling across cloud services.
Familiarity with Defender Vulnerability Management and integration into SOC workflows.
Exposure to Sentinel and SOAR automation playbooks.
Understanding of NIST CSF, CIS Controls, ISO 27001, and Zero Trust principles.
Why Join Us
Join a modern, digital-first bank where you’ll engineer and protect the identity, data, and devices that power our business. As part of the Cloud Security Operations team, you’ll shape and secure our endpoint and User environments in a fast-paced, cloud-native environment. You’ll collaborate across Cyber Defence, Risk, and Cloud Engineering functions, developing automation and intelligence that drive resilience, regulatory compliance, and customer trust. Here, you’ll be empowered to secure identity, protect data, and enable innovation at the forefront of South African digital banking.
Skills
Adaptive Thinking, Application Development, Computer Literacy, Confidentiality, Data Compilation, Data Compression, Data Controls, Data Modeling, Data Privacy, Data Recovery, Digital Literacy, Gateway Servers, IT Network Security, Probing Questions, Test Case Management
NQF Level 7 - Degree, Advance Diploma or Postgraduate Certificate or equivalent
Closing Date
01 December 2025 , 23 : 59
The appointment will be made from the designated group in line with the Employment Equity Plan of Old Mutual South Africa and the specific business unit in question.
The Old Mutual Story!
Old Mutual is a premium African financial services organisation that offers a broad spectrum of financial solutions to retail and corporate customers across key market segments in 14 countries. The lines of business include Life and Savings, Property and Casualty, Asset Management and Banking and Lending. We are rooted in our purpose of Championing Mutually Positive Futures Every Day and believe that a great customer experience is anchored in a great employee experience.
#J-18808-Ljbffr
Create a job alert for this search
Security Engineer • Cape Town, Western Cape, South Africa
Related jobs
Promoted
OM Bank - Security Engineer (Identity, Endpoint and Data Protection)
Old Mutual South AfricaCape Town, Western Cape, South Africa
OM Bank - Security Engineer (Identity, Endpoint and Data Protection).Join to apply for the OM Bank - Security Engineer (Identity, Endpoint and Data Protection) role at Old Mutual South Africa.Let’s...Show moreLast updated: 6 days ago
Promoted
API Integration Engineer (Mid-level)
Vito SolutionsWorkFromHome, Western Cape, South Africa
A large retail chain based in Cape Town.Hybrid (2 days remote, 3 days in office).As an Intermediate API Integration Engineer, you'll play a key role in shaping core business capabilities through th...Show moreLast updated: 12 days ago
Promoted
OM Bank - Data Engineer
Old MutualCape Town, Western Cape, South Africa
Let's Write Africa's Story Together!.Old Mutual is a firm believer in the African opportunity and our diverse talent reflects this.
Develop data products & data warehouse solutions in cloud environm...Show moreLast updated: 8 days ago
Promoted
Endpoint Security Engineer (Cape Town or Johannesburg)
Integrity360Cape Town, Western Cape, South Africa
Integrity360 is the largest independent cyber security provider in Europe, with a growing international presence spanning the UK, Ireland, mainland Europe, Africa and the Caribbean.With over 700 em...Show moreLast updated: 5 days ago
Application / Platform Security Engineer (Specialist).Cape Town, South Africa | Posted on 09 / 10 / 2025.The role of the Specialist Application / Platform Security Engineer is to design and implement secur...Show moreLast updated: 25 days ago
Promoted
Cyber Security Engineer (Red)
takealot.comWorkFromHome, Wes-Kaap, South Africa
South Africa’s leading online retailer, is looking for a highly talented.Intermediate Cyber Security Engineer with red team experience.
We are a young, dynamic, hyper-growth company looking for smar...Show moreLast updated: 6 days ago
Promoted
MS Sentinel SIEM Security Engineer (South Africa)
Integrity360Cape Town, Western Cape, South Africa
Integrity360 is the largest independent cyber security provider in Europe, with a growing international presence spanning the UK, Ireland, mainland Europe, Africa and the Caribbean.With over 700 em...Show moreLast updated: 30+ days ago
Promoted
Cyber Security Engineer
takealot.comCape Town, ZA
Job title : Cyber Security Engineer.Job Location : Western Cape, Cape Town.Your mission, should you choose to accept it : .
Performing penetration tests of Takealot Group applications, networks and sy...Show moreLast updated: 23 days ago
Careers at DLK GroupCape Town, Western Cape, South Africa
The role of the Specialist Application / Platform Security Engineer is to design and implement security measures for applications and platforms and encompasses many activities including (but not limi...Show moreLast updated: 25 days ago
Promoted
OM Bank - Cloud Security Engineer
Old MutualCape Town, Western Cape, South Africa
Let's Write Africa's Story Together!.Old Mutual is a firm believer in the African opportunity and our diverse talent reflects this.
At OM Bank, we strive to attract great people who are passionate a...Show moreLast updated: 8 days ago
Promoted
Cyber Security Engineer
Takealot GroupWorkFromHome, Western Cape, South Africa
South Africa’s leading online retailer, is looking for a highly talented.Intermediate Cyber Security Engineer.We are a young, dynamic, hyper-growth company looking for smart, creative, hard-working...Show moreLast updated: 30+ days ago
Promoted
Linux Cryptography and Security Engineer
CanonicalWorkFromHome, Western Cape, South Africa
Linux Cryptography and Security Engineer.Canonical Cape Town, Western Cape, South Africa.Join or sign in to find your next job.
Linux Cryptography and Security Engineer.Linux Cryptography and Securi...Show moreLast updated: 30+ days ago
Promoted
Senior Security Engineer, Application Security
GitLabWorkFromHome, Western Cape, South Africa
Senior Security Engineer, Application Security.GitLab is an open-core software company that develops the most comprehensive AI-powered DevSecOps platform, used by more than 100,000 organizations.Ou...Show moreLast updated: 16 days ago
Promoted
OM Bank - Security Engineer (Identity, Endpoint and Data Protection)
Old MutualCape Town, Western Cape, South Africa
Let\'s Write Africa\'s Story Together!.Old Mutual is a firm believer in the African opportunity and our diverse talent reflects this.
At OM Bank, we strive to attract great people who are passionate...Show moreLast updated: 8 days ago
Promoted
Cloud Security Engineer
Old MutualCape Town, Western Cape, South Africa
Let's Write Africa's Story Together!.Old Mutual is a firm believer in the African opportunity and our diverse talent reflects this.
Degree or diploma in IT or relates field.Cloud security engineer a...Show moreLast updated: 30+ days ago
The role of the Specialist Application / Platform Security Engineer is to design and implement security measures for applications and platforms and encompasses many activities including (but not li...Show moreLast updated: 13 days ago
Promoted
Senior Security Operations Engineer
LulaCape Town, Western Cape, South Africa
Senior Security Operations Engineer.ALL STAFF APPOINTMENTS WILL BE MADE WITH DUE CONSIDERATION OF THE COMPANYS EE TARGETS.
Lula is an innovative and human-focused FinTech company on a mission to hel...Show moreLast updated: 30+ days ago
Promoted
IT Support and Security Engineer L3
The Legends AgencyWorkFromHome, Western Cape, South Africa
About the job IT Support and Security Engineer L3.IT Support and Security Engineer L3.Join a High-Growth Australian MSP Remote Role (Darwin Hours).
IT Support & Network Engineering | Market Related ...Show moreLast updated: 30+ days ago