Head of Information Security (CISO)

Description

The Head of Information Security (CISO) is accountable for Dis-Chem’s information security strategy, governance, risk management, and security operations. The role ensures the confidentiality, integrity, and availability of systems and data while enabling business growth and digital innovation. The CISO operates as both risk authority and business enabler, embedding security-by-design across platforms, vendors, and delivery teams. Requirements

• Degree in Information Security, IT, or related field • Masters in Cyber Security preferred • Relevant InfoSec certifications • 10+ years’ experience in senior security leadership • Experience in regulated, large-scale enterprise environments Responsibilities Security strategy and governance

• Define, own, and continuously evolve the enterprise information security strategy aligned to business objectives and risk appetite • Establish and enforce security policies, standards, and control frameworks across the organisation • Govern enterprise security architecture, patterns, and platform guardrails in alignment with Enterprise Architecture • Provide regular security posture, risk, and compliance reporting to executive leadership and Board-level forums Security operations and resilience

• Oversee security operations, including threat monitoring, incident response, and forensic investigations • Ensure effective detection, response, and recovery capabilities across all platforms and environments • Partner with Technology Resilience to ensure business continuity, disaster recovery, and cyber resilience readiness • Own relationships and performance of SOC/MDR providers and security tooling ecosystem Risk and third-party security

• Own enterprise information security risk management, including identification, assessment, mitigation, and reporting • Define and maintain the organisation’s cyber risk framework aligned to enterprise risk management • Govern third-party and supply chain security risk, including supplier assurance and ongoing monitoring • Lead engagement with internal and external audit, regulators, and compliance bodies Data, Privacy, and Regulatory Compliance

• Ensure protection of sensitive data, including customer, patient, and operational data, in line with regulatory requirements (e.g. POPIA) • Oversee data security, privacy controls, and secure use of data across platforms and integrations • Ensure compliance with applicable laws, regulations, and industry standards Competencies

• Deep expertise in cyber security, governance, and risk
• Strong executive communication and influence
• Ability to balance security rigor with business agility
• Lead, coach, and develop Tribes and Squad Leads and their teams
• Set performance expectations and conduct performance reviews
• Manage team capacity, workload allocation, and capability development
• Support recruitment, succession planning, and organisational design

Key Performance Indicators

• Reduction in high-severity security incidents
• Effectiveness of security controls and risk remediation
• Compliance with regulatory, audit, and policy requirements
• Security posture maturity and resilience readiness
• Stakeholder confidence in security governance
• Contribution to culture and leadership outcomes, measured through employee engagement, culture index improvements, and adherence to organisational values and leadership behaviours.
• Drive a security-first culture across the organisation through awareness, training, and leadership engagement
• Promote accountability for security across all levels of the organisation
• Embed secure-by-design and secure-by-default principles across technology and business teams

Package & Remuneration

Market Related About Us

The Dis-Chem Group is South Africa’s fastest-growing pharmaceutical retail group with operations in South Africa, Botswana and Namibia. The group was founded in 1978 with one store in Mondeor, south of Johannesburg and has since grown to over 200 stores to date.

Our Head Office is based in Midrand, Johannesburg, and we employ over 18 500 full-time and part-time employees. We believe that in today’s dynamic and continuously changing world, our human capital is what differentiates us from our competitors. We give our employees training to ensure that they have the greatest possible support to do their work and develop themselves as individuals.

Our strategy is built around our pharmacy first approach, which means that we have a Dispensary in all of our stores to service our customers at any time when they enter a Dis-Chem Pharmacy store. As a leading specialist in beauty, healthy food, sport supplements, health and well-being, we offer the widest ranges in these categories and expert advice. The brand is synonymous with excellent customer service, and we pride ourselves in being a destination discount brand following an Everyday Low Price (“EDLP”) strategy.

In 2016, Dis-Chem was listed on the Johannesburg Stock Exchange. The Group is still managed by its founders, Ivan and Lynette Saltzman being the Chief Executive Officer and Managing Director respectively.

We have been rated as the country's best pharmacy chain by Professional Management Review and voted as the Best Pharmacy, Best Medical Supply Store and Best Health Store in The Star Your Choice and Pretoria News Readers Survey.

In 2020, the Group was recognised as the winners of the Best Pharmacy, Best Health Shop and Best Toiletry Store in The Star’s Readers’ Choice Awards. Furthermore, we were voted as the coolest Health and Beauty Specialist in the 2016/2018 Sunday Times Generation Next Awards. In 2014, we were the recipient of the Leisure Options Readers Awards and voted the best pharmacy brand by Readers Digest SA.

Our social responsibility programme is managed through the Dis-Chem Foundation. The Foundation aims to provide care and support to improve the lives of individuals while relieving the burden on communities, family and friends.