Security Governance Lead

Dis-Chem Pharmacies Limited; Johannesburg; On-site; ZAR 900,000 - 1,200,000; Full time

Benefits offered by this job

Market-related salary

Medical aid

Provident fund

Staff account

Job summary

Dis-Chem Pharmacies Limited is seeking a Security Governance Lead to shape policies, programs, and guidelines for enterprise-wide cyber security. The role focuses on interpreting laws, aligning with the organization's mission, and promoting policy awareness across management and planning teams.

The ideal candidate has a IT/law/risk degree with 5–8+ years in security governance, and experience in large multi-site environments; CISM/CISSP/CRISC is advantageous.

Qualifications

• Bachelor's degree in IT, Law, Risk, or related field.
• 5–8+ years in information security, risk, or governance roles.
• Experience in a large enterprise or multi-site environment.
• CISM / CISSP / CRISC advantageous.

Responsibilities

• Develop policy, programs, and guidelines for implementation.
• Establish and maintain communication channels with stakeholders.
• Advocate for adequate funding for cyber training resources, to include both internal and industry-provided courses, instructors, and related materials.
• Interpret and apply applicable laws, statutes, and regulatory documents and integrate into policy.
• Promote awareness of cyber policy and strategy as appropriate among management and ensure sound principles are reflected in the organization's mission, vision, and goals.
• Seek consensus on proposed policy changes from stakeholders.
• Monitor the rigorous application of cyber policies, principles, and practices in the delivery of planning and management services.
• Identify gaps in governance for effective cyber security in client
• Develop and promote stakeholder consensus on policies to guide good cyber security hygiene and staff behaviors
• Oversee policies implementation and periodically check to ensure policies are followed
• Reconcile cyber security policies against other policies and applicable laws and regulations in Indonesia

Skills

Information security governance

Policy development

Stakeholder communication

Regulatory compliance

Education

Bachelor's degree in IT, Law, Risk, or related field

Job description

Dis-ChemPharmacies hasanopportunityavailablefora Security Governance Lead, the role involves developing policies, programs, and guidelines; interpreting and applying relevant laws and regulations; and promoting awareness of cyber policy and strategy to ensure alignment with the organization’s mission and goals. It also requires establishing and maintaining communication channels with stakeholders, seeking consensus on proposed policy changes, and advocating for adequate funding to support cyber training resources. Additionally, the role includes monitoring the rigorous application of cyber policies, principles, and practices across planning and management services.

Requirements

• Bachelor’s degree in IT, Law, Risk, or related field
• 5–8+ years in information security, risk, or governance roles
• Experience in a large enterprise or multi-site environment
• CISM / CISSP / CRISC Advantageous

Responsibilities

• Develop policy, programs, and guidelines for implementation.
• Establish and maintain communication channels with stakeholders.
• Advocate for adequate funding for cyber training resources, to include both internal and industry-provided courses, instructors, and related materials.
• Interpret and apply applicable laws, statutes, and regulatory documents and integrate into policy.
• Promote awareness of cyber policy and strategy as appropriate among management and ensure sound principles are reflected in the organization's mission, vision, and goals
• Seek consensus on proposed policy changes from stakeholders
• Monitor the rigorous application of cyber policies, principles, and practices in the delivery of planning and management services
• Identify gaps in governance for effective cyber security in client
• Develop and promote stakeholder consensus on policies to guide good cyber security hygiene and staff behaviors
• Oversee policies implementation and periodically check to ensure policies are followed
• Reconcile cyber security policies against other policies and applicable laws and regulations in Indonesia

Accountable

• Effective library of cyber security policies with clear direction for client to protect itself
• Anticipate tools and processes that may expose client to risk and determine appropriate controls

Consulted

• Designing or implementing new systems, applications, networks, to understand the policy implications

Informed

• New systems or technologies are introduced to client that may have a policies impact

Competencies

• Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy
• Knowledge of the nature and function of the relevant information structure (e.g., "National Information Infrastructure").
• Knowledge of the organization's core business/mission processes
• Knowledge of industry indicators useful for identifying technology trends
• Skill in administrative planning activities, to include preparation of functional and specific support plans, preparing and managing correspondence, and staffing
• Ability to determine the validity of technology trend data
• Ability to develop policy, plans, and strategy in compliance with laws, regulations, policies, and standards in support of organizational cyber activities.

Essential:

• Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy
• Knowledge of the nature and function of the relevant information structure (e.g., "National Information Infrastructure").
• Knowledge of the organization's core business/mission processes
• Knowledge of industry indicators useful for identifying technology trends
• Skill in administrative planning activities, to include preparation of functional and specific support plans, preparing and managing correspondence, and staffing
• Ability to determine the validity of technology trend data
• Ability to develop policy, plans, and strategy in compliance with laws, regulations, policies, and standards in support of organizational cyber activities.

Key Performance Indicators:

• Open security-related high risks in Risk Register
• Phishing test click rate
• Satisfaction of IT team with security policies and guidance provided
• Contribution to culture, accountability, engagement, and continuous improvement

SpecialConditionsofEmployment:

• SouthAfricancitizen
• MIE,clearcriminalandcredit
• Driver’slicenseand/orownreliabletransport

Remunerationandbenefits:

• Marketrelatedsalary
• Medicalaid
• Providentfund
• Staffaccount

Dis-Chem Pharmacies is an equal opportunity employer. Dis-Chem’s approved Employment Equity Plan and Targets will be considered as part of the recruitment process aligned to Dis-Chem’s Employment Equity & Transformation Strategy. Dis-Chem actively supports the recruitment of People with Disabilities.

4 people have applied for this job. 131 people have viewed this job.

More Jobs at Dis-Chem Pharmacies Limited