Security Governance Lead at Dis-Chem Pharmacies

Job Description

• Dis-Chem Pharmacies has an opportunity available for a Security Governance Lead, the role involves developing policies, programs, and guidelines; interpreting and applying relevant laws and regulations; and promoting awareness of cyber policy and strategy to ensure alignment with the organization’s mission and goals.
• It also requires establishing and maintaining communication channels with stakeholders, seeking consensus on proposed policy changes, and advocating for adequate funding to support cyber training resources.
• Additionally, the role includes monitoring the rigorous application of cyber policies, principles, and practices across planning and management services.

Requirements

• Bachelor’s degree in IT, Law, Risk, or related field
• 5–8+ years in information security, risk, or governance roles
• Experience in a large enterprise or multi-site environment
• CISM / CISSP / CRISC Advantageous

Responsibilities

• Develop policy, programs, and guidelines for implementation.
• Establish and maintain communication channels with stakeholders.
• Advocate for adequate funding for cyber training resources, to include both internal and industry-provided courses, instructors, and related materials.
• Interpret and apply applicable laws, statutes, and regulatory documents and integrate into policy.
• Promote awareness of cyber policy and strategy as appropriate among management and ensure sound principles are reflected in the organization's mission, vision, and goals
• Seek consensus on proposed policy changes from stakeholders
• Monitor the rigorous application of cyber policies, principles, and practices in the delivery of planning and management services
• Identify gaps in governance for effective cyber security in client
• Develop and promote stakeholder consensus on policies to guide good cyber security hygiene and staff behaviors
• Oversee policies implementation and periodically check to ensure policies are followed
• Reconcile cyber security policies against other policies and applicable laws and regulations in Indonesia

Accountable

• Effective library of cyber security policies with clear direction for client to protect itself
• Anticipate tools and processes that may expose client to risk and determine appropriate controls

Consulted

• Designing or implementing new systems, applications, networks, to understand the policy implications

Informed

• New systems or technologies are introduced to client that may have a policies impact

Competencies

Essential:

• Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy
• Knowledge of the nature and function of the relevant information structure (e.g., National Information Infrastructure).
• Knowledge of the organization's core business/mission processes
• Knowledge of industry indicators useful for identifying technology trends
• Skill in administrative planning activities, to include preparation of functional and specific support plans, preparing and managing correspondence, and staffing
• Ability to determine the validity of technology trend data
• Ability to develop policy, plans, and strategy in compliance with laws, regulations, policies, and standards in support of organizational cyber activities.

Key Performance Indicators:

• Open security-related high risks in Risk Register
• Phishing test click rate
• Satisfaction of IT team with security policies and guidance provided
• Contribution to culture, accountability, engagement, and continuous improvement

Special Conditions of Employment:

• South African citizen
• MIE, clear criminal and credit
• Driver’s license and/or own reliable transport

Remuneration and benefits:

• Market related salary
• Medical aid
• Provident fund
• Staff account

Closing Date 23 October 2026