דרושים » אבטחת מידע וסייבר » Information Security Monitoring Cybersecurity Control

Seeking a highly motivated IT Internal Audit Manager to join our global Corporate Internal Audit team, focusing on IT Risks, Processes, Controls, and Enterprise AI Governance. The role involves conducting audits and advisory engagements, developing AI solutions for process review, and assessing risks related to AI and IT systems to support the company's rapid transformation.
Key Responsibilities
Lead technology audit and advisory engagements across various domains, including cybersecurity, infrastructure, applications, data management, IT transformation, and AI-related risks while advising on practical ways to strengthen governance, resilience, and risk management.
Drive governance and oversight of technology programs and emerging AI risks, including model governance, data governance and quality, privacy, security, and responsible AI.
Develop and implement audit methodologies to assess risks across the entire AI lifecycle, including model design, validation, explainability (XAI), bias, and the security posture of Generative and Agentic AI systems-while ensuring compliance with emerging regulations, ethical guidelines, and industry best practices.
Drive the integration of AI risk management into existing technology audit domains by providing expert advice on control design.
Promote innovation within the internal audit function by applying new tools and techniques, such as agentic AI, data analytics, and automation.
Collaborate with cross-functional teams, including Privacy, IT, Engineering, Finance and Infosec, to identify and address audit observations with timely corrective actions.
Lead research on technology risks and controls to formulate recommendations for process improvements and innovation.

We are looking for an experienced and highly driven Deputy CISO to join Sunbit's Security leadership team, reporting directly to the CISO.
This is a unique opportunity to play a key leadership role in shaping and scaling the security program of a fast-growing fintech company. As Deputy CISO, you will serve as the CISO's trusted partner, helping drive the organization's security strategy while leading day-to-day execution across multiple security domains.
Yo will oversee both the Security Operations , Security Engineering and GRC organizations, managing team leads and security professionals across Israel and abroad. This role requires a strong combination of strategic thinking, technical depth, operational excellence, and people leadership.
The ideal candidate brings experience from large-scale, cloud-native environments and has successfully led security programs spanning Security Operations, Security Engineering, Compliance, Risk Management, and Security Architecture. You will work closely with Engineering, Infrastructure, IT, Product, Legal, Compliance, and executive leadership teams to continuously strengthen Sunbit's security posture while enabling business growth.
What You'll Do:
Drive execution of strategic security initiatives across the organization
Partner closely with the CISO to define and execute Sunbit's security strategy and roadmap
Translate business objectives into scalable security programs and controls
Act as a key stakeholder in security governance, risk management, and decision-making processes
Help shape the future of Security at Sunbit, including emerging domains such as AI Security and Security Automation

Required Director Application Security
About the Role:
As the Director of Product Security, you will spearhead our efforts to fortify and enhance the security posture of our products and runtime environments and play a critical leadership role in overseeing the design, implementation, and maintenance of security controls for the organizations complex product applications, platform, development and cloud infrastructure.
You will lead a team of security experts and collaborate closely with engineering, product, and other business units to ensure the security and integrity of our applications, platforms, cloud infrastructure, and code stack against current & evolving threats.
Your leadership will be instrumental in embedding security best practices throughout the development and operations pipeline, ensuring a secure and scalable product environment. You will also drive the strategy, development, and implementation of a comprehensive application security program across our cloud-based applications.
Reporting line: VP Security Engineering
What Youll Do:
Strategic Leadership and Team Management:
Strong leadership skills to develop and lead the strategic direction for the Application and Cloud Security teams.
Lead risk assessments, threat modeling, and secure design reviews of cloud platforms to proactively identify vulnerabilities and ensure compliance with security standards.
Oversee the design, implementation, and maintenance of security controls across multi-cloud environments (AWS, GCP, Azure) to protect infrastructure and applications.
Experience in collaborating with cross-functional teams, including engineering, product management, and customer support, to embed security into product development and all aspects of cloud deployments.

Were looking for our next Manager, Cybersecurity Governance, Risk & Compliance. Could It Be You?
The Manager, Cybersecurity Governance, Risk & Compliance is a hands-on people manager accountable for cybersecurity compliance, audit delivery and risk management across our regulated entities. She/he will personally lead the SOC 2 Type II and ISO 27001 audit cycles, own the cybersecurity control framework and enterprise cybersecurity risk register, and build, coach and manage a small team of one to two GRC specialists. The role operates in a dual regulatory environment covering CIRO regulated dealer and wealth entities and OSFI regulated federal financial institutions, and is based in Israel working Toronto business hours.
Need more details? Keep reading
In this role, responsibilities include but are not limited to:
Audit delivery: Lead SOC 2 Type II readiness and the annual audit cycle end to end, including the evidence plan, control owner coordination, sampling, auditor requests and report issuance.
Certification: Drive ISO/IEC 27001:2022 readiness and certification, covering ISMS scope, Statement of Applicability, risk treatment plan, internal audit programme, management review and nonconformity closure.
Framework assessment: Manage NIST CSF 2.0 current and target profile assessments, including externally performed assessments, and produce the gap driven remediation roadmap that follows.

Were growing and looking to hire an Information Manager, Security Operations Engineering who embodies our core values: People First, Customer Obsession, Strive for Excellence, and Integrity.
we are a global leader in cyber-physical systems (CPS) protection, dedicated to securing the critical infrastructure that keeps the world running. Were a fast-growing, award-winning team where innovation meets purpose-and we want you to help us define the future of cybersecurity.
About the Role:
As the Information Security Operations Manager, you will lead our front-line defense, monitoring, and incident response capabilities. You will manage a high-performing technical team responsible for protecting enterprise infrastructure, cloud environments, and emerging AI workloads.
This role requires a rare combination of deeply technical hands-on capability and sophisticated leadership. Beyond managing technical systems and engineering staff, you will serve as the core liaison between Security Operations (SecOps) and key business stakeholders-including software engineering, corporate legal, human resources, and executive leadership-to navigate complex incidents, manage risk, and foster a collaborative security culture.

As a Cybersecurity GRC Specialist at our innovative healthcare startup, you will own our information security program end to end. We are on a mission to bring the first Hybrid Drug to market: a groundbreaking therapeutic entity that integrates mobile apps with traditional medication. Operating at the intersection of digital health and pharma means security, privacy, and compliance are core to what we build - and you'll be the one making sure we get it right. If you're excited to shape and lead the security function of a growing company (rather than inherit one), read on

About the Role
This is a hands-on role with broad ownership. You'll act as our security lead, serving as the go-to person for all things governance, risk, and compliance - working directly with leadership, engineering, quality, and clinical teams. It's a great fit for someone with a few years of GRC experience who's ready to take on company-wide responsibility, not a traditional executive CISO position.

‍

Responsibilities
Governance & Security Program
Build, implement, and maintain our Information Security Management System (ISMS) in line with ISO 27001.
Develop and enforce security policies, standards, guidelines, and procedures across the company.
Foster a culture of security awareness through training and ongoing communication.
Risk Management
Identify, assess, and prioritize cyber risks across our products, infrastructure, and vendors.
Conduct Business Impact Analyses (BIA) to map critical business functions and potential disruptions.
Own the risk register and drive mitigation plans with relevant stakeholders.
‍
Compliance & Regulatory Alignment
Ensure compliance with healthcare and privacy regulations, including HIPAA and GDPR.
Support regulatory and quality processes relevant to medical device software (e.g., working alongside our QA/RA team on standards such as ISO 13485 and IEC 62304 where security intersects).
Manage security aspects of customer, partner, and vendor due diligence, including security questionnaires and audits.
Resilience & Incident Preparedness
Design and maintain Business Continuity (BCP) and Disaster Recovery (DRP) plans.
Define and test incident response procedures; lead response efforts when needed.
Run periodic tabletop exercises and recovery drills.
Security Operations & Engineering Collaboration
Work with engineering to embed security requirements into the development lifecycle of our mobile and cloud platforms.
Coordinate penetration tests, vulnerability assessments, and remediation follow-up.
Evaluate and manage security tooling appropriate to our size and needs.

We are looking for a hands-on Cyber Security Analyst in Petah Tikva to lead our SIEM/SOC operations and drive the implementation of security systems across the organization. This is an implementor-profile role: 30-50% of the time will be spent deploying, integrating, and testing security platforms (20-40 systems in scope), working closely with stakeholders across the company. The analyst combines monitoring, threat detection, and incident response work with end-to-end ownership of security tooling.
Responsibilities:
SIEM/SOC Leadership:
Develop and mature the SIEM/SOC program: build detection rules, use cases, and correlation logic
Lead cyber monitoring operations and incident-response procedures (write and maintain playbooks)
Security Systems Implementation (main focus - 30-50% of the role):
Deploy, integrate, and test security platforms across the organization (20-40 systems)
Manage implementation projects end-to-end with internal stakeholders and vendors
Threat Detection & Automation:
Identify and track relevant cyber threats; analyze organizational impact
Design and define automations as responses to cyber risks (SOAR-style workflows)
Security Controls & Governance:
Define measurement criteria and monitor compliance with information-security policy
Develop and run ongoing security controls
Produce insights from defense, control, and monitoring systems; build tailored dashboards.

We are seeking a seasoned security leader to manage a high-caliber research team focused on the security of Identity, SaaS, and Cloud ecosystems. In this role, you will provide technical mentorship and strategic vision, guiding research into service risk profiling and adversarial TTPs analysis. You will be the bridge between cutting-edge research and product innovation, ensuring our findings translate into high-impact security outcomes to stay ahead of modern adversaries.
Key Responsibilities
Define the research roadmap for Identity, SaaS, and Cloud risks, ensuring the team's outputs align with the evolving threat landscape and company goals.
Lead and grow a diverse team of security researchers, providing the technical guidance and career development necessary to maintain a world-class research organization.
Leverage your experience in a product-focused environment to ensure research outcomes directly influence service security strategies and customer-facing solutions.
Oversee the execution of high-fidelity attack simulations and TTP deconstruction, ensuring the 'how-to' of secure service usage is clearly defined and actionable.
Partner with Engineering, Product Management, and Threat Intel teams to transform raw research into robust mitigation strategies and resilient service blueprints.
Represent the team's research internally and externally, positioning the organization as a premier authority on Identity-centric and Cloud security.

Required Data Center Security Manager (English, Hebrew)
About the job
As a Data Center Security Manager, you deliver full pieces of a project and make significant contributions with minimal guidance. You use your knowledge of security technology, data analysis, and data visualization to plan efforts of a team responsible for small to medium sized initiatives by delivering value-added perspectives and influencing project direction. You contribute to cross-team collaborations, identify and recommend multiple creative ways to solve defined problems. You also demonstrate the behaviors expected of as captured in our cultural pillars, and you engage in community contributions to improve and sustain our culture and operations, making it a better place to work.
In this role, you will take ownership of key activities including security budgeting, and manage physical security vendor operations to ensure high-performance service delivery.
You will partner closely with cross-functional teams to implement security policies, lead investigations, and proactively mitigate operational risks. You will direct responses to active security incidents, coordinate critical event workflows, and serve as the primary, authoritative liaison with public safety officials and law enforcement.
Behind everything our users see online is the architecture built by the Technical Infrastructure team to keep it running. From developing and maintaining our data centers to building the next generation of our platforms, we make our product portfolio possible. We're proud to be our engineers' engineers and love voiding warranties by taking things apart so we can rebuild them. We keep our networks up and running, ensuring our users have the best and fastest experience possible.
Responsibilities
Implement established compliance processes aligned with Compliance, Strategy, and Risk Management (CSRM) policies, standards, guidelines, and relevant legal or regulatory requirements.
Manage the security related costs through budget, forecasting, and invoice control for the assigned campus, assist management with financial analysis and input to financial decisions for security requirements.
Provide after-hours on-call management support and participate in emergent, large-scale event response or crisis management when needed.
Be responsible for the compliance, security and risk management program at the data center campus or related infrastructure which includes managing site security incidents, escalations, guard contract management and all other physical security related issues.