לוח משרות דרושים איש אבטחת מידע / סייבר

We are looking for a GRC Specialist team player to join our Security team. Location: Tel Aviv
You will lead GRC processes, perform internal audits and work with external auditors. You will represent our security posture in front of customers in RFIs and due diligence calls.
In this position you will: *Perform internal security audits and reviews, measuring the companys security posture and effectiveness of controls. *Work with the security team to assess the compliance gaps risk assessment and monitor remediation process. *Create and maintain security policies and procedures. *Prepare the company for external security audits and manage the external audits from the company side. *Answer customer questions and RFIs. *Perform security audits on vendors and contractors. *Responsible for managing our GRC Quantification tool. *Responsible for the security awareness training for employees, conducting company-facing training sessions, enrichment activities and performing dedicated sessions for specific departments and security drills.

We are seeking a Business Continuity Manager to join our team and ensure our banking operations remain resilient in the face of potential disruptions.
Responsibilities:
- Develop, implement, and maintain the organizations Business Continuity Plans (BCP) and Disaster Recovery Plans (DRP).
- Conduct risk assessments and business impact analyses to identify vulnerabilities and critical operations.
- Collaborate with various departments to design continuity strategies that ensure the organizations ability to meet regulatory and operational obligations during disruptions.
- Facilitate regular BCP and DRP testing and simulations to assess plan effectiveness and make necessary adjustments.
- Monitor emerging threats and trends, providing recommendations for proactive risk mitigation.
- Ensure compliance with local regulations, banking standards, and industry best practices related to business continuity.
- Provide training and awareness programs to employees, ensuring they understand their roles in maintaining operational resilience.
- Serve as a primary point of contact during incidents, leading response and recovery efforts.

We are looking for a Network Security Specialist for one of our international clients, as a part of the Cyber security team for a full-time position. What will your job look like? In this role, you will be a key player in securing the enterprise, maintaining a robust, scalable, and secure network infrastructures in complex, multi-cloud environments. Key Responsibilities include: Cloud Network Security Architecture (Azure and AWS) Advanced infrastructure automation includes security groups, IAM roles, encryption, and networking components such as load balancers and VPN gateways. Network Security integration and management

Experience:
4+

Our company offers hope to patients suffering from rare and severe diseases by forming partnerships with emerging biotech companies to accelerate access to highly innovative therapies in international markets. As the creator and leader of the global partnership category in the pharma industry, we strive to be Always Ahead and work relentlessly to bring therapy to patients in need, no matter where they live.
Company's ISO will be responsible for writing and reviewing the organizational information security management framework, such as policies, procedures, and work plans.
Consulting regarding relevant solutions and products, as well as improvement and development of the field.
Project management of examination and implementation of new information security products and characterization of information security solutions for related projects.
Advice on compliance with the law and regulation on privacy and cyber protection issues, as well as conducting information security and privacy protection surveys.
Conducting surveys and accompanying ISO 27001 compliance, focused on all aspects of CyberSecurity within Application (AppSec), Infrastructure (DevSec), GRC, SIEM / SOC and incident response, IT security.
Responsibilities:
* Develop, Update, and Maintain a Cybersecurity strategy.
* Manage a risk-based cybersecurity program to continually secure corporate IP, technology, information, computer systems, networks, and data.
* Provide guidance of proposed cybersecurity best practices to the different business functions.
* Develop a comprehensive CyberSecurity Guidance, Processes and Procedures based on industry standards.
* Remain informed on trends and issues in the security industry, including current and emerging technologies and regulatory and compliance issues. Advise, counsel, and educate executive and management teams on their relative importance.
* The position reports to CISO.

looking for an Enterprise risk management (ERM) Manager
The consulting division at Deloitte, the leading and largest consulting firm in the world, is looking for a manager. As part of the position, the employee will lead a wide variety of risk management projects in leading companies alongside extensive development opportunities.

Job description:
We are looking for an experienced Enterprise Risk Management (ERM) team manager to join our dynamic consulting division. This position includes leading a team of consultants in the field of risk management, working in close cooperation with senior management and clients, in order to ensure the design, implementation and continuous improvement of strategic frameworks for corporate-wide risk management in a variety of industries. The ideal candidate will have a strong background in risk management, team management and working with clients.

Main areas of responsibility:
Leading and managing the ERM team: managing a team of consultants in the field of risk management, providing managerial and professional guidelines, guidance and opportunities for development.
Development and implementation of ERM frameworks: working with clients to design and adapt the risk management frameworks to their strategic needs.
Identification and assessment of risks: leading efforts to identify, evaluate and prioritize key risks (strategic, operational, financial, compliance, etc.) that the organization faces as part of risk surveys (ERA).
Customer management: serving as the main contact person for key customers, managing relationships and providing high quality consulting services.
Training and development: guiding training programs in risk management for customers and internal employees, to promote awareness of risks and best practices, conducting professional trainings in the worlds of risk management, etc.

We are looking for a GRC Cyber Security Consultant to join our Cyber risk Department
Work youll do:
Information security Privacy and Business continuity projects.
Conducting Business-wise Cyber risk assessments for leading organizations in the Israeli market as well as
Ensuring security maturity program and remediation plans.
Assisting organizations stand in compliance and regulations standards, including ISO27001, NIST, GDPR and Israeli privacy laws
taking part in internal audit processes as part of bord of directors internal audit unit annual plan.

We are looking for a Cyber Security Consultant to perform a range of expert level services. The successful candidates should have experience both as a security practitioner and security consultant, profound technological cyber knowledge and passion for cyber security. In addition, they should have a service approach, excellent communication skills and the ability to learn and work with the best in the field.
Main Responsibilities:
Evaluate the state of security, configurations, and security strategy, identifying gaps and opportunities and anticipating needs
Consult in cyber security engagements, including development of a cyber security plans and design implementation, and provide guidance on building security
Recommend cyber security strategies, policies, and procedures
Develop and support clients with internal training to assure deep understanding of fundamental cyber security practices, risks, and recommended mitigation tactics
Create expert-level deliverables, and present results of the assessment to a broad range of clients and design plans to address specific cyber risks and vulnerabilities
Collaborate with the cyber experts team in the development and implementation of cyber assessment tools, services, and best practices.