Information Security Operations (SecOps) Lead
Overview
Lead day-to-day security monitoring, detection, and response activities across Dis-Chem’s technology environment. Oversee operation of endpoint, network, and perimeter security tools, and manage outsourced SOC/MSSP partners providing 24/7 monitoring. Coordinate incident handling, containment, and recovery in partnership with Technology Resilience and Infrastructure teams. Ensure consistent application of CISO policies, security engineering standards, and 'shift-left' practices across platform squads.
Requirements
- Degree in Information Security, IT, Risk Management, or related field, or 7+ years' experience in similar role
- 5+ years’ experience in IT security or vendor risk management, preferably in a multi-vendor environment
- Exposure to outsourced service models, SOC/MDR providers, and cloud-hosted solutions
Responsibilities
- Lead daily operation of core security tools (endpoint protection, email security, network monitoring, SIEM/SOC integrations)
- Manage outsourced SOC/MSSP providers, ensuring effective alert triage, escalation, and 24/7 coverage
- Review critical alerts and prioritize response actions; coordinate with platform squads and IT ops to address vulnerabilities and misconfigurations
- Ensure logging, monitoring, and detection coverage across applications, infrastructure, cloud, and retail environments
- Oversee end-to-end cyber incident handling (analysis, containment, recovery) with CISO, Infrastructure, Technology Resilience, and external vendors
- Maintain incident runbooks and ensure readiness for security events affecting stores, IT platforms, digital engagement, and data systems
- Conduct post-incident reviews and drive follow-up actions to reduce recurrence
- Implement and enforce secure configuration baselines for infrastructure, networks, endpoints, and cloud workloads
- Support rollout of security guardrails and 'secure-by-design' patterns within development and integration squads
- Guide security champions within squads and provide practical coaching on controls, tooling, and remediation steps
- Partner with Enterprise Architecture to validate technical designs against CISO standards
How to apply
Verify before you apply
SpanSam summarises opportunities for easier discovery. Always confirm the closing date, eligibility requirements and submission instructions on the original source before sending personal information or documents.
About this listing: SpanSam is an opportunity discovery service and is not the hiring employer unless explicitly stated. Application decisions and source-listing changes are controlled by the employer or institution.