GRC & Cyber Awareness Analyst

A leading enterprise organization is seeking a GRC Analyst to join its cybersecurity team and play a key role in strengthening cyber resilience.
Key Responsibilities
Lead cybersecurity awareness programs, including phishing simulation campaigns and employee training
Manage cybersecurity risk across organizational processes
Perform internal cybersecurity assessments and controls
Prepare periodic reports for management regarding security posture and compliance with GRC regulations and standards
דרישות התפקיד
At least 2 years of experience in GRC / Information Security — mandatory
Proven experience in cybersecurity awareness initiatives, including phishing and employee training — mandatory
Experience in drafting policies, procedures, and risk management documentation — mandatory
Strong familiarity with GDPR, Israeli Privacy Protection Law, ISO27001 and financial compliance requirements — mandatory
Experience conducting internal audits, reporting to management, and tracking remediation progress — mandatory