Cyber Security Specialist

We are looking for a Cyber Security Specialist for a health organization based in Eilat, Israel.

job description:

• In-depth knowledge of the organizational processes.

• Presenting an up-to-date picture of the level of information security to the management of the organization.

• Harnessing the management of the organization to the issue of information security.

• The professional responsible for reporting information security issues to the information protection unit of the organization's management.

• Risk assessment - carrying out a risk assessment and gap mapping which will form the basis for building an information security strategy and building a work plan. Management and analysis of cyber threats, while managing an event log and performing controls for corrective actions.

• Policy and procedures - implementation, updating and applicability control of the information security processes and procedures in the organization.

• Law and regulation - examining the regulatory and legal requirements relevant to the organization and leading the organization to their implementation, ISO27001, ISO27799 and the privacy protection regulations.

• Security strategy and work plan - building an annual/multi-year work plan for the field of information security.

• Technological infrastructures - mapping the organization's assets (hardware, software and infrastructure) and implementing the procedures to keep the systems secure.

• Supply chain - mapping and conducting audits in the yards of the organization's suppliers, filling gaps and defining performance requirements to meet organizational information security requirements. Formulation of security requirements and controls for the cloud services.

• Employee awareness - promoting the awareness of the organization's employees on information security issues. Carrying out trainings, and exercises to test effectiveness.

• Business continuity - adapting a plan to deal with cyber incidents. The five steps: detection, protection, detection, response and recovery.

• Management of information security events - management of event log, analysis of events, correction of deficiencies and examination of effectiveness over time.

• Inspections - formulation and implementation of a work plan for internal and external inspections, carrying out a process and technological risk assessment, for compliance with security standards and regulatory requirements.

Requirements:

• High analytical ability, ability to study independently, systemic vision and analytical ability.

• Proven practical knowledge in accompanying projects (end to end) in information security aspects.

• Understanding business needs, guidance in information security aspects.

• Work in an environment subject to regulation and information security standards.

• Transferring the technological instructions for implementation by information security implementers.

• Monitoring the implementation of requirements and guidance in the field.

• Writing information security procedures and policies.

• Knowledge of international standards in the field of information security.

Education requirements: Professional training and certification in the field of information security - mandatory

DPO or CISO and/or conducts ISO audits