Chief Information Security Officer (CISO)

Automat-it is an all-in AWS Premier Partner and Managed Services Provider specializing in the startup ecosystem. With over 800 customers and 500+ AWS certifications, Automat-it brings hands-on expertise in AI, DevOps, and FinOps to empower fast-paced startups to grow, deliver & win. Our customers save significant time-to-market and optimize their cloud performance and costs.

We work across EMEA and the US, fueling innovation and solving complex challenges daily. Join us to grow your skills, shape bold ideas, and help build the future of tech.

Automat-it is seeking a part-time (90hs month) Chief Information Security Officer to own and lead our global information security and compliance program. As a cloud-native AWS Premier Partner operating across Israel, Ukraine, the UK, Spain, France, Portugal, and the USA, we manage sensitive customer infrastructure and data at scale. The CISO will build and mature our security governance framework, lead certification and audit efforts, and embed a security-first culture across a multi-entity, multi-jurisdiction organization.

Work location - hybrid (1 day) from Tel Aviv
If you are interested in this opportunity, please submit your CV in English.

Requirements:

5+ years in information security or related roles (CISO, Head of Security, Director of Security, or equivalent).
Demonstrated experience leading ISO 27001 audits and certification cycles (implementation, surveillance, and recertification audits).
Strong working knowledge of GDPR and cross-border data protection requirements.
Hands-on experience building and running enterprise risk assessment frameworks.
Experience establishing successful information security governance structures in a growing or multi-entity organization.
Solid understanding of cloud security, ideally AWS environments; AWS security certifications are an advantage.
Practical use of AI tools for security/compliance work, with an understanding of AI-related security and privacy risks.
Experience operating in a global environment
Excellent communication skills in English and Hebrew
Relevant certifications such as CISSP, CISM, or CISA are highly desirable.
Excellent communication skills, with the ability to translate security and compliance requirements for executive and non-technical audiences.

Automat-it is committed to fostering a workplace that promotes equal opportunities for all. We firmly believe that cultivating a diverse workforce is crucial to our success. Our recruitment decisions are grounded in your experience and skills, recognizing the value you bring to our team.

Key Responsibilities:

Own the company-wide information security strategy, policies, and governance framework, reporting on risk posture to executive leadership and the board.
Lead and maintain ISO 27001 certification, including internal and external audits, Statements of Applicability, and continuous improvement of the ISMS.
Ensure ongoing GDPR compliance across all operating jurisdictions, including data processing agreements, DPIAs, and coordination with the Data Protection Officer where applicable.
Design and run the enterprise risk assessment program, maintain the risk register, and drive remediation of identified gaps.
Establish and lead information security governance forums, including policy review, ongoing monitoring, corrective actions, risk committees, and reporting cadences.
Oversee security compliance for customer and vendor due diligence, including client security questionnaires and contractual security requirements.
Define and oversee incident response, business continuity, and disaster recovery programs; coordinate execution with IT, DevOps, and Cloud teams.
Partner with Engineering, DevOps, and Cloud teams to embed security-by-design across AWS-based infrastructure and client delivery.
Lead security awareness training and drive a culture of security accountability across all regions.
Manage relationships with external auditors, regulators, and security assessment vendors.