Information Security Manager

a global product company is looking for a Senior Information Security Manager to be part of the CISO's team.

Act as the subject matter expert on all areas relating to application security and Cybersecurity frameworks, including:

Maintain enterprise's security and compliance documents (policies, standards, baselines, guidelines, and procedures) and help ensure their enforcement.

Work with 3rd party auditors to ensure compliancy to various standards

Oversee the deployment, integration and initial configuration of new security solutions and of any enhancements to existing security solutions

Ensure and regularly evaluate the implementation of Security by Design in Infrastructure layer as well as in Application layer (e.g. SSDLC).

Ensure the confidentiality, integrity and availability of the data residing on or transmitted to/from/through enterprise systems (networks, cloud, workstations, servers, databases, etc.)

Maintain up-to-date knowledge of the IT and application security industry standards including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors.

Supervise investigations into potential security events and provide on-going communication with senior management.

דרישות

5+ years of experience in Information Security, Application Security, Risk Management, privacy, and compliance.

One or more security certifications:

ISC2 CISSP - Certified Information Systems Security Professional

ISACA CISM - Certified Information Security Manager

Extensive experience in enterprise security architecture, policy and process design, implementation, and maintenance.

Knowledge and experience of security areas such as Auditing, Policy, Database Security, Firewall Design and Implementation, Risk Analysis, Identity Management, Access Management, etc.

Knowledge and understanding of security standards, frameworks and methodologies such as ISO27001, SOC, SOX, PCI DSS, GDPR, NIST and OWASP.

Experience in 3rd party certification audits (e.g. ISO-27001, ISO-27701, PCI-DSS, etc.)

Knowledge of microservice architecture, web technologies, Cloud security principles and APIs - Advantage

Experience with SAST, DAST, Vulnerability assessment and penetration testing tools - Advantage

Experience in managing security incidents response and mitigating measures against external threat vectors in an enterprise-level environment.

Self-starter, organized, versatile, highly self-motivated and capable of performing work with minimal management oversight

Proven analytical and problem-solving skills with ability to exercise sound judgment in complex situations.

Willing to take initiative and to add value to the organization by generating innovative solutions to business requirements.