Cyber Security GRC

Shift4 is boldly redefining commerce by simplifying complex payments ecosystems across the world. As the leader in commerce-enabling technology, Shift4 powers billions of transactions annually for hundreds of thousands of businesses in virtually every industry. For more information, visit shift4.com.

Are you our next Cyber security GRC?

We are looking for a motivated and experienced Cyber security GRC who will join our professional services team as a domain expert.

In this position, you'll become a vital member of our professional services team, bringing your expertise in the field. Your primary responsibilities will involve enhancing Shift4's compliance maturity level and bolstering customer confidence in our products and services.

**By joining us, you will enjoy a hybrid work model, combining in-office work with remote work (work from home) during the week.

Your role:

• Design, implement, and execute cyber protection policies within intricate computer networks.
• Accompany and implement the hardening process, draft constitutions in accordance with the protection requirements, standardization, and Best Practices.
• Perform in coordination with the IT, communication, and application teams, and review and adjust regulatory requirements for the organization.
• Accompany certifying the organization to comply with standards in the field of information security and conducting risk assessment surveys.
• Gap surveys against various laws, regulations, and standards in the field of information security.
• Write policies and procedures in the field of information security and implement them.
• Perform regular controls on information security issues.

Your Skills:

• You have 5 years or more experience in writing policies and procedures in the field of information systems and information security and implementing them in the organization.
• You are Managing and leading certification for PCI-DSS information systems and information security standards.
• You have Full control of IT infrastructure in Windows Linux environments including Active directory, operating systems, server hardware, communication components, virtualization, cyber protection systems.
• You have control of communication systems including switches, routers, and FW.
• Is eager to learn innovative technologies and thrives in a dynamic, fast-paced environment.
• Exhibits excellent communication skills in Hebrew and English, both written and verbal.
• A team player, committed to collaboration and collective success.

You have a major advantage if:

• QSA certification.
• Certifications and relevant courses such as ISO Lead Auditor, CISO, CISSP, CISM, CISA.
• Managing and leading certification for information systems and information security standards: ISO-27001, SOX-ITGC.