Dis-Chem Pharmacies has an opportunity available for a Security Governance Lead, the role involves developing policies, programs, and guidelines; interpreting and applying relevant laws and regulations; and promoting awareness of cyber policy and strategy to ensure alignment with the organization's mission and goals.
It also requires establishing and maintaining communication channels with stakeholders, seeking consensus on proposed policy changes, and advocating for adequate funding to support cyber training resources.
Additionally, the role includes monitoring the rigorous application of cyber policies, principles, and practices across planning and management services.
Requirements
Bachelor's degree in IT, Law, Risk, or related field
5 - 8+ years in information security, risk, or governance roles
Experience in a large enterprise or multi-site environment
CISM / CISSP / CRISC Advantageous
Responsibilities
Develop policy, programs, and guidelines for implementation.
Establish and maintain communication channels with stakeholders.
Advocate for adequate funding for cyber training resources, to include both internal and industry-provided courses, instructors, and related materials.
Interpret and apply applicable laws, statutes, and regulatory documents and integrate into policy.
Promote awareness of cyber policy and strategy as appropriate among management and ensure sound principles are reflected in the organization's mission, vision, and goals
Seek consensus on proposed policy changes from stakeholders
Monitor the rigorous application of cyber policies, principles, and practices in the delivery of planning and management services
Identify gaps in governance for effective cyber security in client
Develop and promote stakeholder consensus on policies to guide good cyber security hygiene and staff behaviors
Oversee policies implementation and periodically check to ensure policies are followed
Reconcile cyber security policies against other policies and applicable laws and regulations in Indonesia
Accountable
Effective library of cyber security policies with clear direction for client to protect itself
Anticipate tools and processes that may expose client to risk and determine appropriate controls
Consulted
Designing or implementing new systems, applications, networks, to understand the policy implications
Informed
New systems or technologies are introduced to client that may have a policies impact
Competencies
Essential:
Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy
Knowledge of the nature and function of the relevant information structure (e.g., National Information Infrastructure).
Knowledge of the organization's core business/mission processes
Knowledge of industry indicators useful for identifying technology trends
Skill in administrative planning activities, to include preparation of functional and specific support plans, preparing and managing correspondence, and staffing
Ability to determine the validity of technology trend data
Ability to develop policy, plans, and strategy in compliance with laws, regulations, policies, and standards in support of organizational cyber activities.
Key Performance Indicators:
Open security-related high risks in Risk Register
Phishing test click rate
Satisfaction of IT team with security policies and guidance provided
Contribution to culture, accountability, engagement, and continuous improvement