לוח משרות דרושים ניהול סיכונים משרה מלאה

we are seeking a talented GRC Compliance Expert to join our Governance, Risk, and Compliance team.
This role is ideal for someone with a strong understanding of leading international standards and regulations (such as ISO 27001, SOC 2, PCI-DSS, and others) and a passion for building and maintaining scalable, enterprise-grade compliance programs.

Youll play a central role in ensuring ongoing organizational alignment with world-class frameworks while working closely with cross-functional teams to drive a culture of trust, risk awareness, and regulatory readiness.
We are especially looking for someone with hands-on experience implementing and maintaining PCI-DSS / SOC2 compliance, including managing assessments, evidence collection, and cross-functional collaboration.

Key Responsibilities

Ensure the companys continuous compliance with leading international standards and regulatory frameworks (e.g., ISO 27001, SOC 2, PCI-DSS).
Serve as a subject matter expert on PCI-DSS, including supporting annual assessments, gap analyses, and remediation planning.
Maintain, update, and improve internal GRC policies, controls, and documentation in line with global best practices.
Monitor changes in the regulatory and industry landscape and assess their applicability to operations.
Lead internal control mapping, gap assessments, and remediation tracking.
Coordinate audit readiness efforts and maintain supporting evidence for external assurance engagements.
Support risk management activities such as risk assessments, risk registers, mitigation tracking, and escalation workflows.
Collaborate with teams across Security, IT, Legal, Engineering, and Operations to align compliance and business needs.
Drive internal awareness and training initiatives on key compliance requirements and GRC processes.
Contribute to the maturity and automation of the GRC program using dedicated platforms/tools.

We are seeking a motivated, process-oriented professional to join our global GRC and operational cybersecurity team. This is a multifaceted role, combining elements of operational information security, IT general controls (ITGC) oversight, and risk management. You will be mentored and guided by senior professionals in each of the functional areas, with the opportunity to gain broad exposure to global systems, processes, and governance structures.
Responsibilities:
Strong understanding of Cyber security frameworks and standards: In-depth knowledge of widely recognized frameworks such as NIST Cybersecurity Framework, ISO 27001, and SOC 2 TYPE 2, and an ability to apply them in practical scenarios to develop and implement robust security programs Comprehensive knowledge of regulatory compliance requirements: Up-to-date understanding of relevant data protection and privacy regulations. The ability to interpret these requirements and translate them into actionable organizational policies and controls is crucial. Experience with GRC tools and technologies: Practical experience utilizing GRC platforms and tools to automate and streamline compliance processes, manage audits, and track risk posture. Familiarity with reporting and dashboarding functionalities to provide insights into the organization's GRC maturity is also highly valued. Expertise in third-party risk management and supply chain security: Proven ability to manage, conduct, and oversee the security posture of critical vendors and third-party service providers. This includes developing and implementing vendor risk assessment frameworks, conducting security due diligence, and ensuring contractual security requirements are met to protect the supply chain. Proficiency in Cyber security posture monitoring and control: Strong understanding of continuous monitoring strategies and technological controls to maintain and improve the organization's Cyber security posture.

We are looking for a Senior Fraud Analyst with a passion for solving complex puzzles by investigating reactively and proactively data and live attacks. The solutions and insights you find will turn into proactive algorithms that make our community safer.
Here are a few of the things you'll do:
Discover and effectively communicate unique, actionable insights to prevent and detect attacks using our solution.
Extract data from internal systems, identify the correct metrics needed, create reports and analyze them to understand key trends.
Translate trends to prevention algorithm requirements.
Be the point of escalation to fraud investigators.
Proactively initiates and leads fraud‑risk projects from ideation through deployment, coordinating stakeholders across product, data, and engineering.

Required Risk Manager - Metro PMO
Key Responsibilities
Risk Strategy & Implementation;
Develop, maintain, and implement a comprehensive risk management strategy that aligns with project objectives, stakeholder expectations, and industry best practices.
Ensure consistent risk management governance across the project lifecycle by overseeing risk assessments submitted by Line Managers and Contractors, ensuring compliance with the Clients risk policies.
Collaborate with project teams, external authorities, and regulatory bodies to integrate risk management frameworks at the program level.
Risk Assessment & Analysis:
Lead qualitative and quantitative cost and schedule risk assessments, ensuring Line Managers and Contractor submissions align with client-side project risk methodologies.
Oversee risk workshops to identify, assess, and quantify risks affecting project timelines and budgets, ensuring alignment with the Clients risk exposure framework.
Perform data-driven research and analysis to support risk-based decision-making, ensuring risk quantification accurately reflects project financial and schedule uncertainties.
Plan and conduct onsite evaluations of risk controls implemented by Line Managers and Contractors, ensuring effective mitigation and contingency measures.
Stay updated on cybersecurity risks, adversarial attack methods, and evolving regulatory frameworks, ensuring comprehensive risk oversight beyond traditional construction risks.
Stakeholder Engagement & Reporting:
Engage with stakeholders (clients, Line Managers, Contractors, regulators) to communicate risk-related information, ensuring risk discussions translate into actionable mitigation plans.
Provide guidance on risk management principles, techniques, and best practices to internal teams and delivery partners, ensuring adherence to the Clients risk governance framework.
Report on risk management issues to senior management and clients, identifying high-impact risks and proposing strategic mitigation strategies.
Support the development of Requests for Proposals (RFPs), ensuring contractual risk requirements align with project control best practices.
Governance, Compliance & Risk Control:
Conduct technical risk and security assessments for third-party service providers, internal projects, and technology implementations, ensuring compliance with client-driven policies.
Ensure full regulatory compliance with risk-related industry standards and internal project controls, maintaining oversight over risk assessments from Line Managers and Contractors.
Manage risk controls for external and third-party approvals, ensuring government regulatory alignment and risk transparency.

Who We Are At Cross River, we're building the financial infrastructure that powers global innovation. With our cutting-edge suite of embedded payments, cards, and lending solutions, we enable millions of businesses and consumers to transact seamlessly and securely. With 900+ employees worldwide and an R&D center of over 160 employees in Jerusalem – we’re reshaping how financial technology is developed and delivered

The Role:
We’re looking for an IT Compliance Associate to join our Technology team and help ensure our systems, vendors, and internal processes meet legal, regulatory, and security standards. In this role, you’ll support the design and implementation of an effective IT compliance framework, manage access controls, assess risk, and guide teams in upholding compliance across the organization. You’ll also help shape policies, identify gaps, and drive remediation efforts with cross-functional stakeholders. This is a collaborative, detail-oriented position with room for growth in the cybersecurity and compliance domain

Who You Are:

* A sharp, analytical thinker with high attention to detail
* Collaborative, reliable, and able to thrive in a structured environment
* Comfortable analyzing complex data, identifying risk, and advising on controls
* Driven by doing things ethically, legally, and right the first time

What You’ll Actually Be Doing:

* Native-level fluency in both English and Hebrew (written and verbal)— Must
* Develop and maintain an effective IT compliance program
* Conduct risk assessments on internal processes and systems
* Lead access recertification and vendor risk assessment processes
* Draft, manage, and update internal compliance policies and documentation
* Review vendor documentation for regulatory and security alignment
* Analyze data, identify compliance gaps, and implement remedial actions
* Prepare reports, dashboards, and compliance summaries for internal stakeholders
* Organize and contribute to quarterly Cyber Steering Presentations

Why You’ll Love Working Here:
Flexible hybrid work model: three days a week at our Jerusalem office Monthly wellness reimbursement – from therapy to gel manicure, it's up to you Full Keren Hishtalmut, private health and dental insurance Volunteer days, donation matching, Yoga and Pilates A supportive, collaborative culture that puts our people first

Next Step:
Hit apply. You bring your compliance mindset; we’ll bring the challenge (and the snacks!)

Abra is Hiring an Information Security Risk Assessor
* Conducting risk assessments for the company's systems.
* Identifying vulnerabilities in existing systems as well as in systems undergoing implementation.
* Reviewing system hardening against accepted standards.
* Performing regulatory tests in accordance with the regulations applicable to financial organizations.
* Evaluating the effectiveness of compensating controls.
* Providing recommendations for remediating vulnerabilities.
* Collaborating with professional teams to ensure vulnerabilities are mitigated.
* Working within a professional team in a purple team format.

Rapyd is looking for a highly motivated Operational Risk Manager to join the Second Line of Defense Risk team. The role is based in Tel Aviv. It is a key role in Rapyds Risk organization, responsible for helping the company identify and mitigate risks arising from internal processes, people, systems, and external events.
Responsibilities:
Help enhance the companys Operational Risk Framework, including policies, procedures, and controls.
Collaborate with key stakeholders in business units to perform operational risk management processes, e.g., document Important Business Services, conduct operational resilience reviews, investigate operational processes and procedures, perform risk and control assessments.
Maintain risk registers and implement key risk indicators to monitor operational risks.
Help strengthen the companys risk management programs (e.g., incident management, outsourcing).
Communicate risk information to stakeholders across the company and help prepare regular reports on operational risk matters.

We are looking for a Risk Analyst to help us build, design, and manage risk analytics & reporting for our existing portfolio of merchants across all operating countries. Youll be responsible for developing, publishing, and fine-tuning the analytics and reporting requirements for Global business for the Risk team.
The role requires strong Data Analytics, Business Intelligence, and Visualization skills and the ability to explain complex situations and concepts through data-driven storytelling.
This role also has scope for building risk models for our existing portfolio of merchants to mitigate the existing financial risk. Modelers will be taking the responsibility of defining the problem statement, building the solution, and offering an optimal strategic approach to implement the solution within the existing ecosystem and showcase value addition.
The role will require coordination with teams within Risk and across and managing senior stakeholders within the Risk function. You will need to work with Risk team members to understand their analytics and reporting requirements and build the same. You will be a key member of the team working in a fast-paced environment on impactful assignments with the exposure to work directly with senior management across the company.
Key Responsibilities:
Own (Build and maintain) the Risk reporting area for the Global Risk team and publish reports aligning with the requirement timeline
Perform analysis throughout the entire customer lifecycle, including acquisition, portfolio management, and collections providing actionable MI on all aspects of portfolio performance
Provide support to the business by addressing inquiries and offering ad hoc insights into portfolio and strategies.
Develop and maintain the Risk models used to manage customer credit and fraud risk in including exposure and default methodologies and associated behavioral measures.
Design, Development, and maintenance of analytical solutions related to risk.
Providing the business and other stakeholders with advice and support on model use, model impact, and model implementation
Supporting external engagement and internal governance in relation to risk models and model frameworks