דרושים » אבטחת מידע וסייבר » CISO as a Service

Our Cyber division is seeking a CISO as a Service Consultant to join our team in Central/North Israel. We are looking for a senior and experienced information security consultant who will lead information security activities for the company's customers in a CISO as a Service model. The role requires experience in risk management, leading compliance processes for ISO standards, and privacy protection.
Key Responsibilities:
* Leading CISO as a Service activities for the company's customers, including formulating strategy and work plans.
* Building and managing information security governance (policies, procedures, controls).
* Performing cyber and IT risk assessments, gap analysis, and formulating mitigation plans.
* Guiding and supporting preparation and compliance processes for information security standards (ISO 27001, ISO 27799, ISO 27017).
* Assisting in the implementation of privacy controls and accompanying processes related to the Privacy Protection Law and GDPR.
* Providing technological guidance, training, and delivering professional content to customers.

We are the global booking and payment platform for the trillion-dollar freight industry. Hundreds of airlines and ocean liners, thousands of freight companies, and over ten thousand importers and exporters use our platform to move goods around the world faster and more efficiently. This matters. Efficient freight ultimately makes things cost a little bit less when you buy them in the store. We are looking for a hybrid powerhouse: a Chief Information Security Officer. In this role, you will be the guardian of our trust. You will shape and drive our cybersecurity vision, ensuring our platform, products, people, and data remain secure while enabling innovation and business growth. You are the kind of leader who builds security into everything, protecting every digital doorway without slowing down the movement of global trade. From strategic risk management and governance to incident response and security engineering, you'll foster a culture where security is a business enabler, not a roadblock.
Responsibilities:
* Develop, implement, and continuously enhance our enterprise-wide cybersecurity strategy, policies, standards, and governance framework.
* Lead our information security program to protect the confidentiality, integrity, and availability of information assets.
* Identify, assess, and manage cybersecurity risks, ensuring appropriate controls are implemented to mitigate business and technology risks.
* Oversee security operations, including threat monitoring, vulnerability management, incident response, and remediation activities.
* Direct the development and execution of incident response, disaster recovery, and business continuity plans.
* Establish and maintain security architecture and best practices across cloud infrastructure, network, endpoint, application, and data environments.
* Ensure compliance with applicable laws, regulations, contractual obligations, and industry standards, and support internal and external audits.
* Develop and maintain security policies, procedures, and awareness programs that promote a strong culture of cybersecurity across the organization.
* Advise executive leadership and the Board of Directors on cybersecurity strategy, emerging threats, risk posture, and investment priorities.
* Lead and mentor the information security team, fostering professional development, accountability, and operational excellence.
* Manage cybersecurity budgets, evaluate emerging technologies, and recommend investments that improve the organization's security capabilities.
* Oversee identity and access management, data protection, encryption, and privileged access controls.
* Collaborate with SRE, IT, R&D, legal and business leaders to integrate security into organizational processes and strategic initiatives.
* Manage third-party and vendor cybersecurity risk assessments, ensuring external partners meet organizational security requirements.
* Monitor the evolving threat landscape and implement proactive measures to address emerging cybersecurity risks and improve the organization's overall security maturity.
Hybrid:
Yes

Serving as a vCISO for client organizations - owning their security strategy, roadmap, and executive reporting.
Leading and executing cross-organizational Cyber security consulting projects at our customers.
Conducting procedural and technological cyber risk assessments and designing remediation plans.
Leading regulatory compliance projects and audits for international organizations, in line with global and local Cyber security and privacy frameworks.
Drafting information security policies, procedures, and guidelines.
Advising on security solutions and architecture, and delivering client training on security practices and risk mitigation.
Presenting expert-level deliverables to technical and executive audiences, and maintaining client relationships and satisfaction.

The Israel R&D Cyber Security Lead is responsible for maintaining the security posture of our R&D center.

This role owns the security posture management process from monitoring to security issue remediation.

Additionally, the role combines leadership and hands-on execution to strengthen security posture, reduce control gaps, and embed security into the software development lifecycle. The Israel R&D Cyber Security Lead will build and maintain strong relationships with CSO teams and collaborate cross-functionally to ensure alignment with our organizational compliance and security standards.

Key Responsibilities
Lead the Israel R&D cybersecurity roadmap aligned with our CISO/CSO vision and compliance requirements.
Own security posture governance, including daily ScoreCard oversight, root-cause investigation, remediation accountability trend analysis,
Act as the primary cybersecurity advisor for Israel R&D teams on secure design, SSDLC and specific security needs.
Work with Security Champions to identify, mentoring, and empowering champions within R&D teams to promote security best practices.
Establish strong working relationships with global CSO/CISO organizations to ensure alignment, escalation paths, and policy compliance.
Report posture, risks, and improvement progress to technical and executive stakeholders with clear, data-driven communication.
Collaborate effectively with cross-functional teams across the organization.

we are seeking a Cybersecurity Architect (GRC & Risk) to join our cybersecurity architecture team. In this role, you will lead security governance, risk, and control assessments, conduct third-party due diligence, support maturity assessments, and drive mitigation and architectural review processes. Youll work closely with CISOs, security leaders, engineering teams, and customers to develop risk-focused methodologies and improve security frameworks. This position is best suited for candidates with a technical GRC, risk, or security assessment background who excel in analysis, interpretation, and structuring of security information.

Responsibilities
Lead customer third‑party security due diligence assessments.
Lead mitigation workshops to translate penetration test and assessment findings into prioritized remediation workplans.
Perform security maturity assessments, including reviews of organizational policies, standards, procedures, and governance practices, aligned with the NIST CSF 2.0 cybersecurity framework.
Develop and refine security methodologies, processes, and architectural guidance.
Maintain internal documentation and ensure alignment between frameworks, processes, and practical implementation.
Analyze technical findings and map them to governance, risk, and control gaps.
Produce clear, structured reports and executive‑ready summaries for technical and non‑technical audiences.

we are seeking a Junior Cybersecurity Architect to join our cybersecurity architecture team. In this role you would assist with enterprise level organizations' white-box maturity assessments, preform due-diligence assessments and help in designing actionable mitigation plans to identified risks to push forward our clients security program. This role is intended for candidates with a technical GRC, risk, or security assessment background who are strong in analysis, interpretation, and structuring of security information. You will work closely with CISOs, security leadership, engineering teams, and external customers, collaborating with senior security stakeholders as part of a versatile, and collaborative architecture team. The position emphasizes risk‑oriented thinking, security assessment methodologies, and architectural review over hands‑on technical configuration or operational security work.

Responsibilities
Support customer third‑party security due diligence assessments.

Support or lead mitigation workshops to translate penetration test and assessment findings into prioritized remediation workplans.

Analyze technical findings and map them to governance, risk, and control gaps.

Review Implementation of technical security controls.

Perform security maturity assessments, including reviews of organizational policies, standards, procedures, and governance practices, aligned with the NIST CSF 2.0 cybersecurity framework.

Produce clear, structured reports and executive‑ready summaries for technical and non‑technical audiences.

We are looking for an experienced and highly driven Deputy CISO to join Sunbit's Security leadership team, reporting directly to the CISO.
This is a unique opportunity to play a key leadership role in shaping and scaling the security program of a fast-growing fintech company. As Deputy CISO, you will serve as the CISO's trusted partner, helping drive the organization's security strategy while leading day-to-day execution across multiple security domains.
Yo will oversee both the Security Operations , Security Engineering and GRC organizations, managing team leads and security professionals across Israel and abroad. This role requires a strong combination of strategic thinking, technical depth, operational excellence, and people leadership.
The ideal candidate brings experience from large-scale, cloud-native environments and has successfully led security programs spanning Security Operations, Security Engineering, Compliance, Risk Management, and Security Architecture. You will work closely with Engineering, Infrastructure, IT, Product, Legal, Compliance, and executive leadership teams to continuously strengthen Sunbit's security posture while enabling business growth.
What You'll Do:
Drive execution of strategic security initiatives across the organization
Partner closely with the CISO to define and execute Sunbit's security strategy and roadmap
Translate business objectives into scalable security programs and controls
Act as a key stakeholder in security governance, risk management, and decision-making processes
Help shape the future of Security at Sunbit, including emerging domains such as AI Security and Security Automation