Information Security Consultant

The Information Security Consultant is expected to have thorough knowledge of the planning, design, implementation, operation, and maintenance of Governance, Risk & Compliance (GRC) efforts intended to support the organizational goals and objectives.

Must Have :

• Solid knowledge of information security principles and practices.

• Knowledge of risk management frameworks and industry best standards such as ISO 27001, NIST, privacy frameworks, Bank of Israel directives and local regulation

• The Consultant identifies and assesses potential information security risks, recommends mitigations, and helps the risk owners drive the implementation of mitigations to reduce the risk to an acceptable level.

• Ability to manage the process of Penetration testing and technical Risk assessments end to end till closure

• Lead the organization-wide compliance program, ensuring activities, processes, and procedures meet defined requirements, policies, and regulations

• Align with suppliers, internal teams like IT and application teams to ensure compliance with organizational security requirements.

Good to Have :

• Provide technical guidance on new projects related to systems, network or applications

• Technical knowledge of SOC operations, identity management and security technologies including Active Directory, IDM Solutions, SSO Solutions, ADFS, and Authentication protocols would be added advantage

Expectations from the Role:

• Ensure all policies, procedures, standards and processes are aligned to organizational objectives

• Creating security awareness and educating stakeholders at different levels within the organization is a key element of the role

• Handle management of vulnerability assessment, Penetration Testing (PT) and risk assessment activities

• Manage supplier security risks by aligning with suppliers and performing supplier risk assessment and driving the identified findings to closure

• As required, perform internal audits, report on findings and track the open findings to closure

• Create a monthly report on the status of risks across the departments, highlighting to senior management progress on risk reduction.