Security Governance Lead

Dis-Chem Pharmacies; Midrand; On-site; ZAR 900,000 - 1,300,000; Full time

Benefits offered by this job

Medical aid

Provident fund

Staff account

Job summary

Dis-Chem Pharmacies is seeking a Security Governance Lead in South Africa to develop policy, programs, and guidelines, interpreting applicable laws and promoting cyber policy awareness to align with the organization’s mission and goals. The role includes engaging stakeholders, securing funding for cyber training resources, and monitoring policy application across planning and management services.

The incumbent will ensure policies comply with regulatory documents, foster consensus on policy

Qualifications

• Bachelor’s degree in IT, Law, Risk, or related field.
• 5–8+ years in information security, risk, or governance roles.
• Experience in a large enterprise or multi-site environment.
• CISM / CISSP / CRISC advantageous.

Responsibilities

• Develop policy, programs, and guidelines for implementation.
• Establish and maintain communication channels with stakeholders.
• Advocate for adequate funding for cyber training resources, including courses and materials.
• Interpret and apply applicable laws, statutes, and regulatory documents and integrate into policy.
• Promote awareness of cyber policy and strategy among management and ensure alignment with the organization's mission, vision, and goals.
• Seek consensus on proposed policy changes from stakeholders.
• Monitor the application of cyber policies, principles, and practices in planning and management services.
• Identify gaps in governance for effective cyber security in clients.
• Develop and promote stakeholder consensus on policies to guide good cyber security hygiene and staff behaviors.

Skills

Cybersecurity policy

Stakeholder comms

Regulatory knowledge

Policy development

Risk management

Education

Bachelor’s degree in IT/Law/Risk

Tools

CISM

CISSP

CRISC

Job description

Dis-ChemPharmacies hasanopportunityavailablefora Security Governance Lead, the role involves developing policies, programs, and guidelines; interpreting and applying relevant laws and regulations; and promoting awareness of cyber policy and strategy to ensure alignment with the organization’s mission and goals. It also requires establishing and maintaining communication channels with stakeholders, seeking consensus on proposed policy changes, and advocating for adequate funding to support cyber training resources. Additionally, the role includes monitoring the rigorous application of cyber policies, principles, and practices across planning and management services.

Requirements

• Bachelor’s degree in IT, Law, Risk, or related field
• 5–8+ years in information security, risk, or governance roles
• Experience in a large enterprise or multi-site environment
• CISM / CISSP / CRISC Advantageous

Responsibilities

• Develop policy, programs, and guidelines for implementation.
• Establish and maintain communication channels with stakeholders.
• Advocate for adequate funding for cyber training resources, to include both internal and industry-provided courses, instructors, and related materials.
• Interpret and apply applicable laws, statutes, and regulatory documents and integrate into policy.
• Promote awareness of cyber policy and strategy as appropriate among management and ensure sound principles are reflected in the organization’s mission, vision, and goals
• Seek consensus on proposed policy changes from stakeholders
• Monitor the rigorous application of cyber policies, principles, and practices in the delivery of planning and management services
• Identify gaps in governance for effective cyber security in client
• Develop and promote stakeholder consensus on policies to guide good cyber security hygiene and staff behaviors
• Oversee policies implementation and periodically check to ensure policies are followed
• Reconcile cyber security policies against other policies and applicable laws and regulations in Indonesia

Accountable

• Effective library of cyber security policies with clear direction for client to protect itself
• Anticipate tools and processes that may expose client to risk and determine appropriate controls

Consulted

• Designing or implementing new systems, applications, networks, to understand the policy implications

Informed

• New systems or technologies are introduced to client that may have a policies impact

Competencies

Essential:

• Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy
• Knowledge of the nature and function of the relevant information structure (e.g., National Information Infrastructure).
• Knowledge of the organization's core business/mission processes
• Knowledge of industry indicators useful for identifying technology trends
• Skill in administrative planning activities, to include preparation of functional and specific support plans, preparing and managing correspondence, and staffing
• Ability to determine the validity of technology trend data
• Ability to develop policy, plans, and strategy in compliance with laws, regulations, policies, and standards in support of organizational cyber activities.

Key Performance Indicators:

• Open security-related high risks in Risk Register
• Phishing test click rate
• Satisfaction of IT team with security policies and guidance provided
• Contribution to culture, accountability, engagement, and continuous improvement

Special Conditions of Employment

• SouthAfricancitizen
• MIE,clearcriminalandcredit
• Driver’slicenseand/orownreliabletransport

Remuneration and benefits

• Marketrelatedsalary
• Medicalaid
• Providentfund
• Staffaccount

Dis-Chem Pharmacies is an equal opportunity employer. Dis-Chem’s approved Employment Equity Plan and Targets will be considered as part of the recruitment process aligned to Dis-Chem’s Employment Equity & Transformation Strategy. Dis-Chem actively supports the recruitment of People with Disabilities.