Chief Information Security Officer

We are looking for an experienced and highly skilled Chief Information Security Officer (CISO) to lead and manage our company's information security program. As CISO, you will be the go-to person who is responsible for developing, implementing, and maintaining a comprehensive security strategy to protect our organization's information assets, systems, and data from cyber threats and ensure compliance with relevant regulations.

What you will be doing:

•Develop and implement an enterprise-wide information security strategy, policies, and procedures aligned with industry best practices and regulatory requirements

• Identify, assess, and mitigate potential security risks and vulnerabilities through regular risk assessments, penetration testing, and security audits

• Design, implement, and maintain security controls, including firewalls, intrusion detection/prevention systems, encryption, access controls, and other security technologies

• Conduct security awareness training and education programs for employees to promote a strong security culture within the organization

• Investigate and respond to security incidents, perform root cause analysis, and implement corrective measures to prevent future occurrences

• Stay up-to-date with emerging cybersecurity threats, trends, and best practices, and adapt the security program accordingly

• Collaborate with cross-functional teams, including IT and legal, to ensure the alignment of security initiatives with business objectives

• Develop and maintain documentation, including security policies, procedures, and incident response plans

Note: This is a hands-on position.

Your skills & experience:

• Minimum of 3-4 years of hands-on experience in information security, with a strong understanding of security principles, practices, and technologies

• Proven experience in developing, implementing, and managing comprehensive security programs in a small or medium-sized organization

• Strong knowledge of security frameworks, standards, and regulations (e.g., NIST, ISO, PCI-DSS, GDPR)

• Expertise in risk assessment, security controls, incident response, and security auditing

• Familiarity with security tools and technologies, such as firewalls, IDS/IPS, SIEM, vulnerability scanners, and encryption solutions

• Knowledge of cloud security principles and practices

• Certified Information Systems Security Professional (CISSP) Or Certified Information Security Manager (CISM)

• Strong analytical, problem-solving, and decision-making skills

• Excellent communication and interpersonal skills, with the ability to effectively communicate complex security concepts to both technical and non-technical audiences

Location: Petah Tikva, working hybrid.