דרושים » אבטחת מידע וסייבר » Chief Information Security Officer ( CISO )

Requirements:
Bachelors or Masters degree in Cybersecurity, Computer Science, Information Technology, or related field.
7+ years of cybersecurity experience, with 3+ years in a leadership role.
2 years of Incident Response and or SOC management role.
Deep expertise in Microsoft 365 security (Defender suite, Microsoft Purview, Azure AD Identity Protection, Sentinel).
Strong knowledge of Active Directory, Azure Active Directory, Windows Servers, DNS, DHCP, and Group Policy.
Broad experience with SIEM, EDR, Threat intelligence, and vulnerability management tools.
Proven knowledge of security frameworks: NIST, ISO 27001, CIS, or equivalent.
Professional certifications required: CISSP, CISM, CEH, MS-500, SC-200, or comparable.
Strong leadership, communication, and problem-solving skills.
Experience working within multinational, matrixed environments.

Requirements:
Experience: 10+ years in information security, IT, and/or security architecture, with demonstrated leadership across security operations, infrastructure, and cloud environments.
Expertise:
Security frameworks and risk management (e.g., NIST CSF/800-53, ISO 27001, SOC 2), including control ownership and audit readiness.
Cloud security for AWS/Azure/GCP and hybrid architectures (identity, network, logging/monitoring, workload protection, CSPM/CWPP concepts).
Advanced networking and network security (firewalls, segmentation, SD-WAN, Zero Trust, VPN/secure remote access, DNS security).
Virtualization (Nutanix, VMware).
Storage systems (Netapp).
Identity & Access Management (SSO, MFA, PAM, lifecycle automation) and strong authentication/authorization patterns.
Application Security and DevSecOps (secure SDLC, code review practices, SAST/DAST, dependency and container security, CI/CD integrations).
Vulnerability management (scanning, prioritization, patching governance) and security hardening for endpoints, servers, and cloud workloads.
Security operations tooling and processes (SIEM, SOAR, EDR/XDR), logging strategy, detection engineering, and incident response.
Proven ability to lead through influence, driving a security-first culture across IT and business units while navigating complex organizational changes.
A track record of building high-performing teams by fostering a culture of continuous learning and clear career pathing for security professionals.
Exceptional ability to translate complex technical risks into business-impact narratives for leadership.
Strong "leader-as-a-partner" mindset, balancing security requirements with the need for business agility and speed.
Proficiency in developing security frameworks for the safe adoption of Generative AI and LLMs.
Certifications: CISSP and/or CISM, cloud security/architecture certifications (AWS/Azure/GCP) or equivalent experience.
Skills: Strong analytical and problem-solving skills, Strategic thinker with the ability to translate long term vision into practical execution, Comfortable navigating ambiguity and balancing competing priorities, Genuine interest in emerging technologies, including AI and security automation, Results-oriented with strong focus on measurable outcomes, Excellent written and verbal communication, stakeholder management, and program/project management.

Requirements:
Bachelors degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related technical field
MBA or advanced degree in Cybersecurity or Business - an advantage
Relevant certifications such as CISSP, CISM, CCSP, or ISO27001 Lead Auditor - strong advantage
Experience Required:

8+ years of experience in cybersecurity and information security
At least 5 years in leadership or senior management roles within SaaS, Cloud, or Services organizations
Proven experience working with enterprise customers, security audits, compliance reviews, and security questionnaires
Strong hands-on understanding of Cloud Security, Application Security, and Security Operations
Experience driving cross-functional initiatives across R&D, IT, Services, Sales, and Compliance teams

Requirements:
5+ years of software product development roles experience
5+ years working as a Cyber Security Lear / CISO / Information Security Manager in complex cloud-based global organizations
A degree in Computer Science or equivalent - information technology, management information systems, software engineering and networking. (Master's Degree - Advantage)
Knowledgeable in PCI, SOX, CCPNA, CPNI, and GDPR
Well-versed in compliance standards and regulations
Capable of consulting on security challenges
In-depth understanding of the SSDLC process
Perform audits and risk assessments
Excellent communication skills in English (written & verbal). One who can discuss and present information logically and concisely.
Effective in collaboration and teamwork across DEV and SECOPS teams
Skilled in administration and policy development
Experienced in strategic management with AT&T organization stakeholders - Advantage

Requirements:
Position Requirements

Prior experience as an Information System Security Officer or equivalent and at least eight years experience in the following areas:

Information Systems Security.

Implementation and administration of security processes and procedures.

Establishing and administering material control programs, including transfer, transmission, reproduction, destruction, and accountability.

Management of an accredited secure facility.

Delivering security awareness trainings and compliance programs.

Required Education/Skills:

Demonstrated leadership or command experience within the IDF, Police, or ISA

Working knowledge of cloud technologies and cloud-security frameworks.
Masterss degree in a relevant discipline (or equivalent) with 8+ years of security experience in support of sensitive programs within Defense Industry.

Must possess a high level of understanding of security related policies, procedures, and initiatives.

Ability to apply knowledge of security requirements in a complex multi-level secure environment to ensure program compliance.

Ability to work independently to identify, assess & resolve unique security situations to facilitate contract performance within the bounds of security.

Highly proficient written and verbal communications skills with emphasis on clear and concise presentation of complex information.

Must have a professional demeanor, good people skills, ability to communicate effectively, and be able to perform in a dynamic environment.

Full professional proficiency in English; portions of the recruitment process will be conducted in English.
Strong analytical and technological systems-evaluation capabilities.
Background in a global, matrixed corporate or cloud-service organization.

Requirements:
3-4 years in cybersecurity GRC, IT risk, compliance, audit/assurance, or related process‑oriented security roles.
Strong understanding of governance, risk management, and operational processes.
Familiarity with cybersecurity frameworks (NIST CSF, ISO 27001 concepts), risk assessment, mitigation planning, and third‑party risk management.
Basic conceptual understanding of cloud/SaaS shared responsibility models.
Ability to communicate technical issues in business‑aligned language.
Hands-on experience with security controls - an advantage.
Strong writing, communication, and facilitation skills.
Comfortable collaborating with internal stakeholders and external customers.

Requirements:
7+ years of experience in cybersecurity, with a strong focus on incident response
Proven experience managing complex, high-severity cyber incidents
Deep understanding of threat actors, attack techniques, and forensic methodologies
Experience leading global or distributed teams in a follow-the-sun model
Strong communication skills in English
Relevant certifications (e.g., GCFA, GCIH, CISSP, or similar) preferred.

Requirements:
Proven ability to lead and influence leaders across the organization.
In-depth knowledge of Secure Development Life Cycle (SDLC) processes, secure architecture, third-party tools, and security policies.
Threat modeling & secure design - Ability to review architectures, identify abuse cases, and guide developers on secure design decisions early in the lifecycle.
Expertise in identifying, analyzing, and mitigating security vulnerabilities, including familiarity with Common Vulnerabilities and Exposures (CVE) and the Common Vulnerability Scoring System (CVSS).
Hands-on experience with AppSec tooling - SAST, DAST, SCA (e.g., SonarQube, Snyk, JFrog Xray), including tuning, triaging results, and integrating into CI/CD pipelines.
Experience with vulnerability management and the ability to interpret and apply security standards, guidelines, and regulations.
Proficiency in secure coding practices and the ability to conduct code reviews for security vulnerabilities.
Familiarity with incident response processes, security monitoring, and threat intelligence.
Offensive mindset - Ability to think like an attacker (manual testing, basic exploitation techniques) to validate real impact and reduce false positives.
Advantage:
Prior experience in software development.

Requirements:
Bachelors degree in Computer Science, Engineering, Business, or a related field; an MBA or advanced degree is an advantage
Deep technical understanding of cybersecurity, networking, and data center architectures
Extensive product management experience (8-10+ years), including ownership of major product lines in the cybersecurity domain
Proven success leading and developing product management teams, with a track record of driving complex products from concept to largescale market adoption
Strong strategic thinking abilities, with experience defining multiyear product roadmaps and navigating competitive markets
Exceptional analytical and problemsolving skills, with a datadriven approach to prioritization and decisionmaking
Outstanding communication and executivelevel presentation skills, including experience presenting to Csuite leadership
Proven public speaking experience, with the ability to represent the product line in customer briefings, industry events, and strategic forums
Demonstrated ability to collaborate effectively across engineering, UX, marketing, sales, and customerfacing teams
Highly selfdriven, organized, and comfortable operating in a fastpaced, dynamic environment
Strong leadership presence with the ability to inspire, influence, and align diverse stakeholders toward shared goals.