Senior Cyber Security Specialist - Hybrid Position

About the Role
In this role, you will support the secure delivery of business initiatives, technology projects, and operations across the global business groups. You will work closely with cybersecurity, IT, and business stakeholders to assess risks, validate security controls, coordinate remediation activities, and help drive security excellence across the organization.
Reporting to the Director of Business Cyber Services, you will play a key role in strengthening Orbia’s cyber resilience and supporting the adoption of global security standards and practices.

What You’ll Do:
* Perform cybersecurity risk assessments for projects, systems, and business initiatives.
* Support application and system security reviews for new deployments and technology changes.
* Coordinate remediation activities for security findings and vulnerabilities.
* Support third-party risk assessments and vendor security reviews.
* Assist with audit, compliance, and assurance activities.
* Partner with IT, cybersecurity, and business stakeholders to drive security improvements.
* Contribute to security standards, secure-by-design initiatives, and deployment of best practices.
* Support incident coordination and cyber crisis management activities when required.
דרישות התפקיד
What We’re Looking For:
* 3-6 years of experience in Cyber Security, IT Risk, Information Security, or related fields.
* Experience conducting security reviews, risk assessments, or application security assessments.
* Strong understanding of cybersecurity principles, risk management, vulnerability remediation, and third-party security risk.
* Familiarity with frameworks such as NIST CSF and CIS Controls.
* Experience supporting audits, compliance activities, and policy implementation.
* Strong stakeholder management and communication skills.
* Ability to work effectively in a global, matrixed environment.
* Fluent English.

Preferred Qualifications:
* Experience with cloud security assessments.
* Knowledge of SOX, GDPR, PCI-DSS, or similar compliance frameworks.
* Experience supporting incident response and remediation activities.
* CISSP, CISA, Security+, or similar certifications.
* Master’s degree in computer science, Engineering, Business, or a related field.