Security Governance Lead

Job Description Dis-Chem Pharmacies has an opportunity available for a Security Governance Lead, the role involves developing policies, programs, and guidelines; interpreting and applying relevant laws and regulations; and promoting awareness of cyber policy and strategy to ensure alignment with the organization's mission and goals. It also requires establishing and maintaining communication channels with stakeholders, seeking consensus on proposed policy changes, and advocating for adequate funding to support cyber training resources. Additionally, the role includes monitoring the rigorous application of cyber policies, principles, and practices across planning and management services. Requirements Bachelor's degree in IT, Law, Risk, or related field 5 - 8+ years in information security, risk, or governance roles Experience in a large enterprise or multi-site environment CISM / CISSP / CRISC Advantageous Responsibilities Develop policy, programs, and guidelines for implementation. Establish and maintain communication channels with stakeholders. Advocate for adequate funding for cyber training resources, to include both internal and industry-provided courses, instructors, and related materials. Interpret and apply applicable laws, statutes, and regulatory documents and integrate into policy. Promote awareness of cyber policy and strategy as appropriate among management and ensure sound principles are reflected in the organization's mission, vision, and goals Seek consensus on proposed policy changes from stakeholders Monitor the rigorous application of cyber policies, principles, and practices in the delivery of planning and management services Identify gaps in governance for effective cyber security in client Develop and promote stakeholder consensus on policies to guide good cyber security hygiene and staff behaviors Oversee policies implementation and periodically check to ensure policies are followed Reconcile cyber security policies against other policies and applicable laws and regulations in Indonesia Accountable Effective library of cyber security policies with clear direction for client to protect itself Anticipate tools and processes that may expose client to risk and determine appropriate controls Consulted Designing or implementing new systems, applications, networks, to understand the policy implications Informed New systems or technologies are introduced to client that may have a policies impact Competencies Essential: Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy Knowledge of the nature and function of the relevant information structure (e.g., National Information Infrastructure). Knowledge of the organization's core business/mission processes Knowledge of industry indicators useful for identifying technology trends Skill in administrative planning activities, to include preparation of functional and specific support plans, preparing and managing correspondence, and staffing Ability to determine the validity of technology trend data Ability to develop policy, plans, and strategy in compliance with laws, regulations, policies, and standards in support of organizational cyber activities. Key Performance Indicators: Open security-related high risks in Risk Register Phishing test click rate Satisfaction of IT team with security policies and guidance provided Contribution to culture, accountability, engagement, and continuous improvement Special Conditions of Employment: South African citizen MIE, clear criminal and credit Driver's license and/or own reliable transport Remuneration and benefits: Market related salary Medical aid Provident fund Staff account Closing Date 23 October 2026