לוח משרות דרושים ניהול סיכונים ברמת גן, לחיפוש זה נמצאו 16 משרות

Requirements:
5+ years of leadership experience managing fraud, risk, investigations, AML, integrity, compliance operations or trust/safety teams.
Strong experience with fraud-prevention systems, AML controls, transaction monitoring, suspicious activity detection, case management, investigation workflows and financial-crime risk.
Deep understanding of fraud and abuse patterns such as payment fraud, mule activity, account takeover, phishing, scams, synthetic identities and platform misuse.
Experience working with data, rules, models, risk scoring, operational queues, escalation processes, dashboards and feedback loops.
Proven ability to partner with Product, Engineering, Data, Security, Legal, Compliance, Finance, Support and Operations teams.
Strong executive communication skills, including the ability to explain complex and sensitive risk topics clearly to senior leadership.
Strong judgment around false positives, user experience, business impact, regulatory exposure, operational cost and speed of response.
Fluent written and spoken English.

Requirements:
So are YOU our next Manager, Cybersecurity Governance, Risk & Compliance? You are if you
7+ years of relevant experience in cybersecurity governance, risk and compliance, IT audit or technology risk, including at least 2 years leading people or leading a workstream with junior staff assigned.
Demonstrated ownership of at least one full SOC 2 Type II audit cycle as the internal lead, from readiness through to report issuance.
Hands-on ISO/IEC 27001 implementation or audit experience, ideally through a full certification or recertification cycle.
Working fluency in NIST CSF 2.0, including organisational profiles, implementation tiers and cross framework mapping.
Experience in a regulated financial services environment such as banking, brokerage, wealth management, payments or fintech.
Practical risk management experience covering risk registers, risk treatment plans, risk acceptance and residual risk reporting to senior stakeholders.
Experience assessing cloud control environments, particularly GCP or AWS, including identity and access management, logging and configuration controls, rather than reviewing policy documentation alone.
Strong written and verbal communication, presentation and technical writing skills, at a standard suitable for auditors, regulators and Board level readers.
Ability to operate independently across time zones within a geographically distributed team and with limited day to day supervision.
Comfortable challenging control owners constructively and holding remediation commitments to agreed dates.
Strong organisational agility, able to run multiple concurrent audit and assessment cycles without losing evidence integrity.
Additional kudos if you
CISA, CRISC, ISO 27001 Lead Auditor or Lead Implementer, CISM, CISSP, or an equivalent relevant work experience.
Knowledge of SOC 2 Trust Services Criteria, ISO/IEC 27001:2022 and Annex A controls, NIST Cybersecurity Framework 2.0 and NIST SP 800-53.
Familiarity with OSFI B-13, B-10 and E-21, and CIRO cybersecurity expectations, or demonstrated ability to learn a new prudential regime quickly.
Familiarity with Canadian privacy obligations including PIPEDA and Quebec Law 25.
Familiarity with GRC and cloud security platforms such as ServiceNow IRM, Salt, ZScaler, Cloudflare, F5, FortiGate, Palo-Alto, Drata or Wiz.
Familiarity with PCI DSS and MITRE ATT&CK is considered an asset.