- Dis-Chem Pharmacies has an opportunity available for an Information Security Operations (SecOps) to Lead day-to-day security monitoring, detection, and response activities across Dis-Chem's technology environment.
- Oversees operation of endpoint, network, and perimeter security tools, and manages outsourced SOC/MSSP partners providing 24/7 monitoring. Coordinates incident handling, containment, and recovery in partnership with Technology Resilience and Infrastructure teams.
- Ensures consistent application of CISO policies, security engineering standards, and "shift-left" practices across platform squads. Builds execution capability in a small, high-dependency environment with heavy reliance on external vendors
- Degree in Information Security, IT, Risk Management, or related field, or 7 + years' experience in similar role
- 5+ years' experience in IT security or vendor risk management, preferably in a multi-vendor environment
- Exposure to outsourced service models, SOC/MDR providers, and cloud-hosted solutions.
Security Operations & Monitoring
- Lead daily operation of core security tools (endpoint protection, email security, network monitoring, SIEM/SOC integrations)
- Manage outsourced SOC/MSSP providers, ensuring effective alert triage, escalation, and 24/7 coverage
- Review critical alerts and prioritize response actions; coordinate with platform squads and IT ops to address vulnerabilities and misconfigurations
- Ensure logging, monitoring, and detection coverage across applications, infrastructure, cloud, and retail environments
Incident Management & Response
- Oversee end-to-end cyber incident handling (analysis, containment, recovery) with CISO, Infrastructure, Technology Resilience, and external vendors
- Maintain incident runbooks and ensure readiness for security events affecting stores, IT platforms, digital engagement, and data systems
- Conduct post-incident reviews and drive follow-up actions to reduce recurrence.
Security Engineering & Execution
- Implement and enforce secure configuration baselines for infrastructure, networks, endpoints, and cloud workloads
- Support rollout of security guardrails and "secure-by-design" patterns within development and integration squads
- Guide security champions within squads and provide practical coaching on controls, tooling, and remediation steps
- Partner with Enterprise Architecture to validate technical designs against CISO standards
- Strong understanding of third-party risk, vendor security controls, and security assessment methods
- Knowledge of risk domains relevant to retail pharmacy (hosting, data protection, resilience, availability, integrations)
- Familiarity with regulatory and contractual security requirements.
Leadership & Commercial Acumen
- Ability to influence vendors and internal stakeholders toward secure-by-design decisions
- Strong negotiation and communication skills to articulate risks and required mitigations.
Key Performance Indicators
- Vendors assessed and risk-rated before onboarding
- Remediation closure rate for vendor findings
- Contribution to culture, accountability, engagement, and continuous improvement
- Reduction in vendor-related incidents or outages
- Quality and completeness of vendor risk documentation
- Stakeholder satisfaction with vendor risk process
Closing Date 23 October 2026