Lead client-facing security consulting engagements across a variety of domains - security project management, risk assessments, and end-to-end compliance programs.
- Drive ISO and framework compliance (ISO 27001, NIST CSF, SOC 2, CIS Controls, GDPR,חוק הגנת הפרטיות ותיקון 13 ;and similar), owning control matrices, evidence repositories, and audit readiness from kick-off to certification.
- Validate controls hands-on, not just on paper - assess cloud environments (AWS/Azure/GCP), IAM configurations, logging/monitoring setups, and general network and application security posture to confirm real-world control effectiveness.
- Champion AI-driven GRC automation - build and deploy AI/LLM-enabled workflows for risk assessment, control testing, evidence collection, and policy generation, and help clients establish safe frameworks for adopting Generative AI internally.
Advise across the business
Requirements: Experience Certifications
- 5+ years of experience in GRC, Information Security, or a related governance, risk, or compliance role.
- Certified in at least one of: CISM, CISSP, CRISC, CISA.
- Cloud security certification (AWS, Azure, or GCP) is a plus, or equivalent hands-on experience.
- DPO Certification is advantage.
GRC Compliance
- Deep experience with major frameworks and standards implementations.
- Control ownership and audit readiness - you can run an audit, not just prepare for one.
Technical Fluency (enough to assess and challenge - not to architect)
- Working knowledge of cloud security across AWS/Azure/GCP: IAM, logging/monitoring, configuration management, and CSPM concepts.
- Familiarity with core network and application security concepts (segmentation, Zero Trust principles, secure SDLC, vulnerability management) sufficient to evaluate a client's posture and as
This position is open to all candidates.