דרושים » אבטחת מידע וסייבר » Cybersecurity GRC Specialist

Were looking for our next Manager, Cybersecurity Governance, Risk & Compliance. Could It Be You?
The Manager, Cybersecurity Governance, Risk & Compliance is a hands-on people manager accountable for cybersecurity compliance, audit delivery and risk management across our regulated entities. She/he will personally lead the SOC 2 Type II and ISO 27001 audit cycles, own the cybersecurity control framework and enterprise cybersecurity risk register, and build, coach and manage a small team of one to two GRC specialists. The role operates in a dual regulatory environment covering CIRO regulated dealer and wealth entities and OSFI regulated federal financial institutions, and is based in Israel working Toronto business hours.
Need more details? Keep reading
In this role, responsibilities include but are not limited to:
Audit delivery: Lead SOC 2 Type II readiness and the annual audit cycle end to end, including the evidence plan, control owner coordination, sampling, auditor requests and report issuance.
Certification: Drive ISO/IEC 27001:2022 readiness and certification, covering ISMS scope, Statement of Applicability, risk treatment plan, internal audit programme, management review and nonconformity closure.
Framework assessment: Manage NIST CSF 2.0 current and target profile assessments, including externally performed assessments, and produce the gap driven remediation roadmap that follows.

We are seeking a skilled and experienced InfoSec & SecOps Lead to join Alice (Formerly ActiveFence) CISO team. The ideal candidate will be responsible for driving the security initiatives. Responsibilities:
* Maintain holistically security corporate architecture and Hardening, including network, systems, applications. Evaluate and implement security remediations to enhance the organization security posture.
* Corporate Security: Oversee security measures, including access control, surveillance, and emergency response planning. Manage relationships with external security vendors related to TPRM and IR.
* Experience among others on SSPM/SaaS security, IDP, SIEM/SOC, Including conducting threat modeling exercises to identify potential vulnerabilities and risks where required.
* Security Operations: Oversee the day-to-day security operations, including monitoring, incident response, Analyze security logs and alerts to identify & respond to security incidents. Conduct regular security assessments and manage the remediations program. Develop and maintain an effective incident response plan.Conduct post-incident reviews to identify lessons learned and improve future response efforts.
* Experience with Vulnerability Management: Identify, prioritize vulnerabilities. Monitor and track vulnerability remediation efforts.
* Collaborate with other teams within the organization to ensure the overall security posture is maintained. This may include working with IT, Devops, R&D, G&A to implement security policies and technical security procedures. Including all business units, educate employees on security best practices.
* AI Governance: Partner with Business Units to create safe-use guardrails for AI. Conduct security reviews for internal AI implementations, ensuring adherence to frameworks like the OWASP Top 10 for LLMs.
* Data Driven Metrics: Develop automated dashboards that track real-time security health, focusing on MTTR and reducing manual "toil" for the Security.



About Alice:
Alice is a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, Alice provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection. Alice is widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms. If you're creative and driven to secure the future of AI, we want to hear from you!

We are looking for a hands-on, builder-minded AI Senior Product Manager to lead a high-stakes, 0-to-1 initiative.

This is a rare opportunity to operate with the agility and autonomy of a startup founder while leveraging the massive datasets, engineering resources, and established market presence of an industry leader.

This role sits squarely at the intersection of Cybersecurity and AI. You will be responsible for building a net-new product from the ground up - translating raw technical concepts into production-grade reality. We are looking for an entrepreneurial builder who thrives in ambiguity and is obsessed with rapid iteration and technical depth.

This is not a role for a traditional "project manager." You must be a hands-on owner who brings strong, opinionated perspectives formed by real-world technical experience. You will own product initiatives from deep problem discovery through engineering execution, validating and shipping products that security practitioners rely on every day.

What You'll Do

Drive 0-to-1 Cybersecurity & AI Products End-to-End
Operate with a founder's mentality: own the product lifecycle from initial discovery and definition to UX design, technical execution, customer validation, and production release.
Frame ambiguous market opportunities into simple, well-scoped milestones, specs, and rapid execution plans.
Act as a hands-on builder-owning the outcome end-to-end rather than just managing processes or tickets.
Build Practical, Production-Grade Capabilities for Security
Identify key leverage points in security workflows (e.g., threat hunting, incident response) where AI can unlock step-function improvements.
Harness and build on top of existing AI agentic frameworks to solve complex cybersecurity challenges - translating model strengths and limitations into practical UX decisions.
Go beyond theoretical AI buzzwords to ship reliable, predictable, and value-driving security features in production.
Partner Deeply with Engineering & Security Experts
Work daily with Tech Leads, AI Engineers, Security Analysts, and Designers in a highly collaborative, fast-paced environment.
Get comfortable looking at raw logs, trace data, system architectures, and security vulnerabilities alongside engineers to deeply understand root causes and technical tradeoffs.
Challenge unnecessary technical complexity and continuously push for the simplest, most elegant solution.
Own UX & Product Quality for Technical Users
Maintain an exceptionally high bar for product quality, clarity, and system reliability.
Abstract dense technical data, security alerts, and complex AI outputs into intuitive, actionable user workflows.
Treat launch day as the start of continuous learning - actively monitoring usage metrics, validating edge cases, and rapidly iterating based on live system feedback.
Stay Connected to Technical Customers
Engage directly with security practitioners, DevOps, and SREs to uncover genuine friction points in their daily operations.
Translate raw customer feedback into prioritized product roadmaps grounded in real operational impact.

Alice is looking for an Android Security Research Team Leader to manage a team of super-talented malware researchers and reverse engineers. Our teams help top-level companies improve their security mechanisms using our insights on the latest malware trends, adversarial shifts, and new techniques. Combining intelligence, sophisticated forensics, and data science helps us catch the most relevant and up-to-date threats and threat actors. What will you do?
* Lead and mentor a team of security researchers across multiple projects
* Own long-term malware and security research of a variety of Android frameworks, technologies, and domains
* Detect large-scale malware campaigns and help bring their operations down
* Review and enhance your team's research reports and code
* Collaborate with other teams throughout the organization
* This role is a management position with 40% hands-on technical work
* Find the bad guys - take them down

About Alice:
Alice is a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, Alice provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection. Alice is widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms. If you're creative and driven to secure the future of AI, we want to hear from you!

We're looking for an experienced Senior IT Systems Engineer to join our Global IT team and help shape the future of our modern, cloud-first infrastructure.
This is a high-impact role for someone who enjoys combining enterprise IT, cloud infrastructure, automation, and security. You'll take ownership of mission-critical systems, drive operational excellence, and help build scalable, secure, and automated IT services that support a global hybrid workforce.
If you're passionate about cloud technologies, automation, and solving complex infrastructure challenges, we'd love to meet you.
What You Will Own:
Design, implement, and manage enterprise infrastructure across Azure, AWS, Microsoft 365, and Docker-based environments
Own endpoint management and compliance using Microsoft Intune across Windows, macOS, and mobile devices
Build and automate onboarding, offboarding, and IT operational workflows using PowerShell, Python, Azure CLI, AWS CLI, and automation platforms such as Workato
Manage Microsoft Entra ID (Azure AD), including Conditional Access, MFA, RBAC, and identity lifecycle management
Strengthen endpoint and cloud security using technologies such as CrowdStrike, Cato Networks, firewalls, and modern security controls
Troubleshoot complex networking environments, including VPNs, DNS, routing, and cloud networking
Lead infrastructure improvements that increase scalability, reliability, and operational efficiency
Provide technical leadership and mentorship to the IT team while maintaining high-quality documentation and best practices
Collaborate with Security, Engineering, HR, and Operations to deliver secure and seamless IT services

Alice is seeking to hire a Fraud Threat Analyst to join the Fraud team. In this role, you will be responsible for researching, evaluating, and analyzing fraud detection mechanisms and vulnerabilities across various platforms and solutions. You will generate strategic insights from diverse intelligence sources, conduct OSINT investigations to identify fraud risks, and monitor online platforms to detect malicious activities. You will also focus on uncovering fraud tactics, behavioral vulnerabilities, and process bypasses while delivering actionable mitigation recommendations to clients. Key Responsibilities:
* Conduct investigations and identify fraud methods across web and mobile platforms (social media, forums, apps, and the darknet).
* Analyze large datasets to uncover patterns and deliver actionable insights.
* Monitor third-party websites and channels for malicious activities and fraud risks.
* Prepare detailed reports with findings, insights, and actionable recommendations.

About Alice:
Alice is a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines. In a world where AI has fundamentally changed the nature of risk, Alice provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection. Alice is widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms. If you're creative and driven to secure the future of AI, we want to hear from you!

We are looking for a motivated, and results-driven leader to drive our SDR team to success. As the SDR Manager, you will play a key role in establishing processes and work standards globally, in line with our Go-To-Market strategy.
This role reports to the VP Marketing and works closely with the Sales and Marketing teams to maximize pipeline generation.
What Youll Do:
Understand the needs of prospects and guide the SDRs on how to communicate with them effectively
Establish and document SDR processes and qualification criteria in line with organizational lead lifecycle processes to ensure predictable conversion rates
Manage and optimize inbound and outbound tactics (email sequences, LinkedIn outreach, cold calling, etc.) to generate new opportunities
Measure and track the progression of inbound and outbound lead generation efforts and opportunities through the sales funnel
Responsibilities:
Ensure the team drives new opportunities into the sales funnel based on quarterly goals
Analyze data to identify trends and optimize outreach strategies
Apply a data-driven mindset with a strong passion for cybersecurity
Utilize excellent verbal and written communication skills to engage with prospects effectively
Balance business acumen, sales expertise, technical understanding, and strong interpersonal skills to drive success

We are looking for an exceptional Security Researcher to join world-class security research organization. Looking for an experienced researcher in the cybersecurity world with depth, and excellence in cloud-native security research.
As a Security Researcher, you will work on deep technical research on several areas - working with other researchers, and transforming advanced offensive insights into scalable defensive capabilities.
What You Will Do:
Research and analyze sophisticated attack techniques targeting Linux-based cloud-native systems, including Kubernetes, containers, and serverless environments.
Reverse engineer Linux malware families to extract behavioral patterns, execution flows, and persistence mechanisms.
Study real-world threat actor techniques and translate findings into actionable detection, prevention, and hardening strategies.
Design and prototype advanced detection logic and observability mechanisms, including kernel- and runtime-level approaches (e.g., eBPF).
Influence strategy by turning research insights into capabilities that protect large-scale production environments.
Collaborate closely with engineering and product teams to ensure research outcomes are impactful and scalable.