GRC Security Specialist לחברת הייטק

You'll own real workstreams, including compliance programs, vendor risk management, security governance, and security awareness. You’ll be part of a small, focused team that moves fast and builds things that scale. You'll collaborate closely with the other Security domains, R&D, Infra, IT, Legal, Privacy, and Procurement to make sure our security controls and compliance processes are practical, effective, and aligned with how the business actually works.

דרישות:

? 2-5+ years in GRC, information security, or compliance - preferably in a SaaS company.
? Strong working knowledge of security and privacy frameworks: ISO 27001, SOC 2, GDPR, HIPAA, and NIST.
? Proven ability to run TPRM independently: assess vendors, rate risk, and drive reviews to a clear decision and remediation plan.
? AI-native working style. Use AI tools to accelerate your work: drafting policies, summarizing vendor responses, researching frameworks, and structuring audit evidence.
? Comfortable working across technical and non-technical stakeholders - translating security requirements into language that lands.
Ability to manage multiple active workstreams without losing detail.
Excellent written and verbal communication in Hebrew and English.
ניסיון: 3-4 שנים