דרושים » אבטחת מידע וסייבר » Compliance Analyst

Requirements:
Experience: 10+ years in information security, IT, and/or security architecture, with demonstrated leadership across security operations, infrastructure, and cloud environments.
Expertise:
Security frameworks and risk management (e.g., NIST CSF/800-53, ISO 27001, SOC 2), including control ownership and audit readiness.
Cloud security for AWS/Azure/GCP and hybrid architectures (identity, network, logging/monitoring, workload protection, CSPM/CWPP concepts).
Advanced networking and network security (firewalls, segmentation, SD-WAN, Zero Trust, VPN/secure remote access, DNS security).
Virtualization (Nutanix, VMware).
Storage systems (Netapp).
Identity & Access Management (SSO, MFA, PAM, lifecycle automation) and strong authentication/authorization patterns.
Application Security and DevSecOps (secure SDLC, code review practices, SAST/DAST, dependency and container security, CI/CD integrations).
Vulnerability management (scanning, prioritization, patching governance) and security hardening for endpoints, servers, and cloud workloads.
Security operations tooling and processes (SIEM, SOAR, EDR/XDR), logging strategy, detection engineering, and incident response.
Proven ability to lead through influence, driving a security-first culture across IT and business units while navigating complex organizational changes.
A track record of building high-performing teams by fostering a culture of continuous learning and clear career pathing for security professionals.
Exceptional ability to translate complex technical risks into business-impact narratives for leadership.
Strong "leader-as-a-partner" mindset, balancing security requirements with the need for business agility and speed.
Proficiency in developing security frameworks for the safe adoption of Generative AI and LLMs.
Certifications: CISSP and/or CISM, cloud security/architecture certifications (AWS/Azure/GCP) or equivalent experience.
Skills: Strong analytical and problem-solving skills, Strategic thinker with the ability to translate long term vision into practical execution, Comfortable navigating ambiguity and balancing competing priorities, Genuine interest in emerging technologies, including AI and security automation, Results-oriented with strong focus on measurable outcomes, Excellent written and verbal communication, stakeholder management, and program/project management.

Requirements:
4+ years of experience in information security and GRC
Proven track record managing SOC 2 Type 2, ISO 27001, or similar compliance frameworks for SaaS organizations
Experience working with SOC (cybersecurity operations center) and response to cybersecurity incidents
Hands-on experience with IT and Security tools
Strong understanding of security controls frameworks (NIST CSF, CIS Controls, OWASP)
Technical understanding of cloud security (AWS/Azure/GCP), application security, and infrastructure security
Excellent written and verbal communication skills with the ability to translate technical concepts for various audiences
Self-starter who can build processes from the ground up and operate with limited oversight
Relevant certifications preferred (CISSP, CISM, CISA, or equivalent).

Requirements:
Minimum of five years of experience managing complex short to medium-term client-facing cyber security engagements in parallel, with excellent engagement management skills and a proven record.
Extensive understanding of cyber security, security governance, and cyber risk management best practices, frameworks, and principles.
Ability to collaborate with individuals across all levels in a dynamic matrix organizational structure, and coordinate with other departments.
Outstanding analytical, creative, and problem-solving skills and mindset, with the ability to handle uncertainty and complexity.
Excellent communication and presentation skills at all levels of the organization. Ability to articulate security concepts to technical staff and explain them to non-technical staff, including senior management.
Attention to detail and a commitment to maintaining high standards.
Certifications such as C-CISO, CISM, PMP, or similar are an advantage.
Knowledge of regulatory requirements and compliance standards such as NIST, ISO, and others is an advantage.
Excellent communication and presentation skills at all levels of the organization, in both English and Hebrew.
The position requires travel abroad (~15-20%).

Requirements:
5+ years of experience in cyber security, vulnerability management, or related domains.
Hands-on experience with vulnerability management processes and tools (e.g., Qualys, Tenable, Rapid7, Wiz).
Experience working in cloud, infrastructure, or application environments.
Strong execution and tracking skills with high attention to detail.
Experience working with cross-functional technical teams.
Experience with project management tools such as Jira, Monday, Asana, or similar.
Excellent communication skills in Hebrew and English.
Preferred Qualifications
Experience working in a CISO organization or Security PMO.
Familiarity with risk-based prioritization and remediation strategies.
Background in SaaS or cloud environments.

Requirements:
3+ years of experience in security operations, SecOps, or security engineering roles.
Hands-on experience operating EDR/XDR platforms and cloud security services (IAM, CSPM, SIEM).
Deep understanding of the SDLC and experience embedding security tools (SAST, SCA) into CI/CD pipelines.
Experience building automations and playbooks using SOAR platforms or scripting (Python, Bash).
Strong incident response skills, including triaging alerts and conducting root cause analysis.
Full-time position based in our Tel Aviv office.
Excellent written and verbal English skills
Personal Attributes & Mindset
High ownership mentality: You take responsibility for the security stack and follow through on every alert.
Strong sense of structure: You can manage vulnerability SLAs and maintain precise security policies.
Comfortable with ambiguity: You can take a vague threat and turn it into a clear detection rule or automated playbook.
Collaborative by nature: You enjoy working as a partner to R&D to solve security challenges without slowing down development.
Curious and self-driven: You are motivated to stay ahead of emerging threats and continuously improve our company's defenses.
Nice to Have
Relevant certifications: CompTIA Security+, GSEC, CySA+, or AWS Security Specialty.
Experience with CNAPP/CSPM or code security platforms.
Familiarity with compliance frameworks (SOC 2, ISO 27001) from an operational perspective.

Requirements:
Bachelors degree in Information Technology, Computer Science, or a related field
3-5 years of experience in IT operations, incident management, or service management
Experience working with enterprise-level incident response or IT service management processes
Strong analytical and problem-solving skills with attention to detail
Excellent written and verbal communication skills
Ability to stay organized and perform effectively under pressure while managing multiple priorities
Familiarity with ITIL principles and service management best practices
Experience with ITSM tools (e.g., ServiceNow or similar platforms) - an advantage
Strong documentation and organizational skills
Fluent in spoken and written English

Requirements:
5+ years of experience in Security Operations, Cloud Security, or IT Systems Administration in a high-growth environment.
Experience owning and managing employee-facing systems and IT environments- a must
Strong hands-on experience with cloud platforms (preferably AWS) - a must.
Experience with identity platforms and SaaS security (Google Workspace / SSO).
Familiarity with cloud security platforms (Upwind / Wiz / Orca or similar).
Experience securing container environments (Kubernetes / AWS EKS).
Strong Service-oriented mindset with excellent collaboration and communication skills.
Fluent English
Nice to Have
Experience in fintech or highly regulated environments.
Practical experience with PCI DSS and SOC2 audits.
Familiarity with MDM solutions (e.g., Kandji, Jamf) and EDR tools.
Working experience with Jira and GitHub.

Requirements:
* 1+ years in security & GRC.
* Proven experience in leading security compliance efforts, including certifications such as SOX, PCI DSS, and ISO 27001.
* Strong project management and familiarity with cloud and SaaS technologies.
* Basic working knowledge of AI tools and the ability to apply them in daily work to improve efficiency, drive innovation, and strengthen GRC activities.
* Experience in vendor management, including handling security agreements and security questionnaires (advantage).
* Technical mindset with experience in security tools (advantage).
* Curiosity, eagerness to learn, and a proactive attitude.
* Strong interpersonal skills and ability to work effectively with people.
At Fiverr, we’re not about checklists. If you don’t meet 100% of the requirements for this role but still feel passionate about the position and think you have the right skills and qualifications to excel at it, we want to hear from you.

Requirements:
At least 2 years of experience in a similar role.
DPO certification - a significant advantage.
Familiarity with standards and regulations.
Excellent written and verbal communication skills.
High ability to analyze and present information.
Experience in building, implementing, and maintaining SOA - a significant advantage.

Requirements:
Minimum of 3+ years of experience in cybersecurity or GRC.
Proven experience in cyber or IT or third party risk management.
Proven experience in the security awareness domain, including development and implementation of security training programs and their testing (phishing, vishing, social engineering etc.).
Strong understanding of industry best practices, regulations, frameworks, standards and certifications such as SOC 2, ISO, NIST, CIS, DORA, GDPR, etc.
Visionary and innovation-driven, capable of implementing security and compliance programs in complex, fast-paced organizations.
Exceptional communication, collaboration, and interpersonal skills, with the ability to engage both technical and non-technical audiences.
Strong analytical, problem-solving skills and attention to detail, with the ability to manage multiple projects simultaneously and meet tight deadlines.
Preferred Qualifications:
Experience working with GRC software and utilities such as compliance management, policy management, risk management, vendor management, awareness, training and phishing simulation platforms, etc
Background in the financial/digital assets sector.
Good technological understanding and familiarity with product development practices.