דרושים » אבטחת מידע וסייבר » Information Security GRC Specialist

We are looking for an Information Security and Cyber Specialist with hands-on experience in information security systems to join the company’s Information Security team. The role includes responsibility for the operation and management of security systems, the investigation of information security incidents, and advanced technological areas within the Information Security Department.

Responsibilities:
Monitoring, operation, and maintenance of information security systems. Handling and analyzing information security incidents at the Tier 2 level. Conducting initial and advanced investigations of cyber incidents. Working with IT and DevOps teams and external vendors. Writing procedures and technical documentation. Assisting with regulatory controls, risk assessments, and audits. In-depth knowledge of Microsoft 365 and Azure Security systems. Experience in managing and implementing EDR/XDR and SIEM systems and endpoint protection solutions. In-depth understanding of networking and Windows and Linux operating systems. Experience working with firewalls, VPN, NAC, and network security solutions. Ability to work independently, learn quickly, and maintain a system-wide perspective.

Mesh Payments is looking for a hands-on Security & IT leader to serve as the foundational pillar of our internal technology and security operations. In this unique role, you will be the sole owner of our IT infrastructure while playing a critical part in protecting a fast-growing, cloud-native fintech platform.
In this position, you will have the autonomy to choose the best tools for the job, manage our corporate environment from the ground up, and have a direct impact on protecting the financial data of global enterprises while ensuring our team has the best technical tools to succeed.
What youll do:
IT Operations & Employee Experience
Youll work closely with the CTO, engineering, and business teams, combining hands-on execution with real ownership and impact.
Manage corporate SaaS platforms, identity management (SSO), and Google Workspace.
Compliance & audits (SOC2, PCI)
Acting as the security point of contact for customers, auditors, and internal teams
Act as the primary technical point of contact for all employees, providing hands-on support and troubleshooting.
Deploy and operate endpoint security and management tools (EDR, MDM, DLP) across a distributed workforce.
Cloud & Infrastructure Security

Improve and maintain the security posture of our AWS/GCP-based cloud infrastructure.
Operate cloud security platforms, such as Upwind / Wiz / Oligo, or similar solutions to prioritize and remediate risks.
Design and enforce secure access controls and least-privilege IAM policies.
Investigate cloud security alerts and support incident response.
Application Security
Integrate security into the SDLC and CI/CD pipelines by automating SAST, SCA, and secret scanning.
Secure containerized workloads (Kubernetes / EKS) focusing on runtime protection and image hardening.
Provide guidelines and safeguards for AI-powered development processes and AI models within our SaaS platform.
Compliance & Security Culture
Support SOC2 and PCI DSS compliance initiatives and audit readiness.
Serve as the primary security focal point for external auditors.
Contribute to security awareness and best practices across the company, explaining the rationale behind security requirements.

Were looking for our next Principal, IT & Cyber GRC. Could It Be You?
The Principal, IT & Cyber GRC is the seasoned generalist and trusted advisor across IT & Cyber GRC function. Operating with breadth across governance, risk, control, audit and regulatory, the Principal is the day-to-day quality bar for the team - identifying and driving requirements, reviewing the work of Analysts, providing technical coaching, and bringing risk and control thinking into cross-functional initiatives early.
The role bridges governance, risk, and control intent with operational execution by partnering with IT, Cybersecurity, and business teams to ensure that "built-in" security and compliance is practical, proportionate, and audit-defensible. The Principal brings deep subject matter expertise to this work and partners with the Manager on framework accountability, novel control architecture, and regulatory interpretation.
The Principal, IT & Cyber GRC is a champion for putting the customer first and has a deep passion in understanding customer behaviour. They will create lifecycle journeys to improve the customer experience, engagement and retention as we deliver on our promise to help customers keep more of their money as they become more financially successful and secure.

We're looking for a Senior Security Lead to partner closely with our CISO in driving our security strategy and running the day-to-day of the security function. You'll own the execution of key initiatives, keep the security program on track, and work with senior stakeholders across the company to make security part of how we build and operate.

This role suits someone who combines strong technical depth with excellent communication skills and strong project management capabilities. You'll have broad scope, high visibility, and a direct impact on how security works in our company.

Key Responsibilities:

Partner with the CISO on our security strategy and roadmap, and own the execution of key initiatives

Help run the day-to-day of the security function: priorities, planning, tracking, metrics and follow-through

Translate business objectives into scalable security programs and controls

Act as a key stakeholder in security governance, risk management and decision-making

Work with senior leaders across Engineering, Infrastructure, Product, Legal, Compliance and Business teams to align on security priorities and drive cross-functional initiatives

Support regulatory, audit and customer security requirements, keeping security aligned with business goals and commitments

Drive the adoption of AI, automation and emerging technologies to improve security effectiveness and efficiency

Foster a culture of accountability, operational excellence and security ownership across the organization

Job Description: Responsible for handling information security incidents escalated by an external 24/7 SOC team, conducting in-depth investigations, classifying incidents, and coordinating response activities with Infrastructure, Information Security, and Incident Response teams. Key Responsibilities:
* Receive security alerts and incidents from an external SOC team, analyze them, and classify them based on severity and urgency
* Investigate cybersecurity incidents using SIEM, EDR/XDR, logs, and infrastructure systems
* Identify and classify false-positive alerts based on findings and supporting evidence.
* Coordinate and lead the operational handling of security incidents with IT and Incident Response teams
* Perform or coordinate containment, remediation, and security hardening activities following security incidents.
* Analyze anomalous activity across Windows, Active Directory, network, and enterprise environments
* Work with the SOC provider to improve detection rules, alert quality, and false-positive reduction
* Document security incidents, prepare investigation reports, and track remediation activities.
* Participate in proactive Threat Hunting activities to identify suspicious behavior.

we are looking for a Security Engineer.
The Security team protects endpoints, identities, SaaS applications, and the fast-growing landscape of AI tools and agents used across the company. In this role, you will operate and improve our security stack, handle detection and response across the organization, and drive security controls around identity, endpoints, SaaS, and AI adoption - governing AI assistants, coding agents, and MCP integrations while keeping employees productive. You will report to the IT Security & GRC Lead and work closely with IT, GRC, R&D, external vendors, and the wider security team.
What You'll Be Doing:
Operate and maintain our corporate security stack: EDR (CrowdStrike Falcon), IdP (Okta), MDM (IRU), email security, and browser/SaaS security controls
Experience hardening endpoints and enforcing device policy via MDM/EDR - security baselines, disk encryption, local admin restrictions, and USB/peripheral controls
Monitor security alerts, respond to incidents, and perform forensic investigations across endpoints, identities, and SaaS
Maintain identity security controls - SSO/MFA coverage, privileged access, joiner/mover/leaver, and access reviews
Secure our SaaS footprint - security posture, configuration monitoring, and third-party integration hygiene across Google Workspace, Slack, Okta, and other core platforms
Implement and maintain DLP controls across email, endpoints, and SaaS
Run endpoint patching and vulnerability management, and coordinate remediation with owning teams
Run POCs and rollouts of IT security tools - evaluating vendors, testing controls, and deploying them in collaboration with IT and external vendors
Secure the company's use of AI tools - implement guardrails for AI assistants, coding agents, and MCP integrations, and build detections for AI-specific threats such as prompt injection and data exfiltration via connectors

our company is looking for an experienced Cyber security Infrastructure Engineer to join a large-scale, mission-critical technology environment and take a hands-on role in operating, maintaining, and securing advanced information security infrastructure. This role combines Cyber security, application delivery, networking, and infrastructure operations, with a strong focus on F5 BIG-IP technologies and troubleshooting complex security and network environments. Lod area Key Responsibilities:
* Operate, maintain, configure, and troubleshoot information security systems and infrastructure.
* Monitor logs, configurations, connectivity, and security controls.
* Identify and resolve security infrastructure issues through full resolution.
* Work extensively with F5 BIG-IP technologies, including LTM, ASM/WAF, APM, and CIS Container Ingress Service.
* Configure and maintain security solutions according to organizational security requirements.
* Participate in projects from planning and design through implementation.
* Troubleshoot complex networking and security issues across different layers and protocols.
* Work with external vendors and technical teams on troubleshooting, support, and installations.
* Create and maintain technical documentation and operational procedures.

Required cyber risk assessor-2640
planning, managing, and executing cyber assessments to ensure regulatory compliance and secure the network operations of entities under the organization's responsibility.
key responsibilities
responsible for identifying and mitigating cyber risks through risk surveys, audits, and technological assessments.
1. risk identification and mapping: examining and mapping network architecture, assets, processes, and security control.
2. technological validations: performing technical tests to verify the effectiveness of security controls.
3. damage potential: analyzing the correlation between threats, vulnerabilities, and controls, and assessing their impact on the organization's overall exposure level.
4. professional opinion: providing evidence-based recommendations.

we are looking for an experienced AWS Cloud Security Infrastructure Engineer to join a large-scale, complex cloud environment and take a hands-on role in securing and maintaining AWS infrastructure.
This role combines cloud security, infrastructure engineering, networking, and automation. You will work across multi-account AWS environments, implement security controls, manage identities and permissions, and take part in cloud projects from planning and design through implementation and ongoing operations.
Ben Gurion Airport Area
What You'll Do
* Operate, maintain, implement, and troubleshoot cloud security systems and infrastructure.
* Implement security controls and secure configurations across AWS services and infrastructure.
* Work with AWS native security services, including IAM, KMS, GuardDuty, Security Hub, WAF, and CloudTrail
* Manage cloud identities, permissions, resource policies, cross-account access, and privilege controls.
* Develop and maintain security infrastructure and controls as code using Terraform or equivalent IaC technologies
* Implement security controls across IAM, secrets and key management, service hardening, logging and visibility, and security automation.
* Work with AWS networking components, including VPCs, Security Groups, routing, subnetting, and external connectivity
* Support cloud migration projects from on-premises environments to AWS.
* Participate in projects from planning and design through implementation and production.
* Troubleshoot complex cloud security, networking, and infrastructure issues.
* Create and maintain technical documentation and operational procedures.