לוח משרות דרושים מנהל אבטחת מידע / סייבר / CISO עבודה היברידית

We are seeking a Head of Cyber Security with hands-on IT experience to lead the management, development, and delivery of a comprehensive information security program within.
The Security programs objectives include
Protect our information, applications, and infrastructure from external or internal threats.
Assure that we comply with regulatory and PCI requirements regarding information protection, access, security, and privacy.
Assure that software/systems/infrastructure/data developed, acquired, or maintained by us is secure, compliant, and used in accordance with its intended purpose.
Before you submit your CV, please note:
We are located in Herzliya, and we work in a hybrid workmode.
What will you do?
Direct management of our Security teamת, including a 7x24 SOC.
Coordinate the development of our information security policies, standards, and procedures and manage the information security function in accordance with these policies and guidelines.
Work with key IT personnel and internal groups to oversee the dissemination and enforcement of these policies, standards, and procedures within.
Maintain and enhance an education and training program for developers and IT on information security and privacy matters.
Function as an internal consulting resource on information security issues.
Maintain and enhance the Incident Reporting and Response System to address our security incidents (breaches) and respond to alleged policy violations or complaints from external and internal parties.
Develop and implement an ongoing risk assessment program targeting information security and privacy matters.
Recommend IT solutions (hardware and software) and applications for vulnerability detection and remediation to keep our environment secure.
Oversee vulnerability mitigation and coordinate all activities related to PCI compliance and other security certifications.
Consult with security experts and consultants and provide recommendations on the latest technologies that should be leveraged/deployed to keep our environment safe and secure.

We are looking for an experienced GRC manager to lead the GRC domain reporting to our CISO.

As GRC Manager you will be responsible for assessing and documenting our compliance and risk posture as they relate to its information assets, you will be a liaison on the privacy domain between various business and technology units.

The candidate should have experience both as a security practitioner and consultant, profound security and privacy GRC related knowledge, and passion for cyber security.

Responsibilities require experience, as well as expertise to ensure effective system-wide security & risk analysis; standards and testing; risk assessment; awareness and education; and development of policies, standards, and guidelines.

The Day-to-Day:
Evaluate the state of security and privacy from the GRC perspective, identifying gaps and opportunities and anticipating needs.
Testing the design and operating effectiveness of technical and administrative security controls
Designing and implementing data protection policies, processes, and procedures to align with Information Security policies and standards.
Partner with various business units to ensure controls are adequate, appropriate, and effective.
Support internal and external audit processes for relevant compliance programs such as SOC2, SOX and ISO.
Perform security and compliance assessments on new and existing systems, processes, technology.
Perform business impact analysis and assist with the development of the IT/InfoSec risk register.