Information Security Operations; SecOps) Lead

dis-chempharmacies hasanopportunityavailableforaninformation security operations (secops) to leadday-to-day security monitoring, detection, and response activities across dis-chem’s technology environment. Oversees operation of endpoint, network, and perimeter security tools, and manages outsourced soc/mssp partners providing 24/7 monitoring. Coordinates incident handling, containment, and recovery in partnership with technology resilience and infrastructure teams. Ensures consistent application of ciso policies, security engineering standards, and “shift-left” practices across platform squads.

Builds execution capability in a small, high-dependency environment with heavy reliance on external vendors
requirements

• degree in information security, it, risk management, or related field, or 7 + years' experience in similar role
• 5+ years’ experience in it security or vendor risk management, preferably in a multi-vendor environment
• exposure to outsourced service models, soc/mdr providers, and cloud-hostedsolutions.

responsibilities

security operations & monitoring

• lead daily operation of core security tools (endpoint protection, email security, network monitoring, siem/soc integrations)
• manage outsourced soc/mssp providers, ensuring effective alert triage, escalation, and 24/7 coverage
• review critical alerts and prioritize response actions; coordinate with platform squads and it ops to address vulnerabilities and misconfigurations
• ensure logging, monitoring, and detection coverage across applications, infrastructure, cloud, and retail environments

incident management & response

• oversee end-to-end cyber incident handling (analysis, containment, recovery) with ciso, infrastructure, technology resilience, and external vendors
• maintain incident runbooks and ensure readiness for security events affecting stores, it platforms, digital engagement, and data systems
• conduct post-incident reviews and drive follow-up actions to reduce recurrence.

security engineering & execution

• implement and enforce secure configuration baselines for infrastructure, networks, endpoints, and cloud workloads
• support rollout of security guardrails and “secure-by-design” patterns within development and integration squads
• guide security champions within squads and provide practical coaching on controls, tooling, and remediation steps
• partner with enterprise architecture to validate technical designs against ciso standards

competencies

domain expertise

• strong understanding of third-party risk, vendor security controls, and security assessment methods
• knowledge of risk domains relevant to retail pharmacy (hosting, data protection, resilience, availability, integrations)
• familiarity with regulatory and contractual security requirements.

leadership & commercial acumen

• ability to influence vendors and internal stakeholders toward secure-by-design decisions
• strong negotiation and communication skills to articulate risks and requiredmitigations.

key performance indicators

• vendors assessed and risk-rated before onboarding
• remediation closure rate for vendor findings
• contribution to culture, accountability, engagement, and continuous improvement
• reduction in vendor-related incidents or outages
• quality and completeness of vendor risk documentation
• stakeholder satisfaction with vendor risk process

onlysuccessfulapplicantswillbecontacted.ifyouhaven`tbeencontactedwithintwoweeksaftertheclosingdate,consideryourapplicationasunsuccessful.
dis-chem pharmacies is an equal opportunity employer. Dis-chem’s approved employment equity plan and targets will be considered as part of the recruitment process aligned to dis-chem’s employment equity & transformation strategy. Dis-chem actively supports the recruitment of people with disabilities.