Information Security Engineer – GRC & Compliance

We are seeking a GRC (Governance, Risk & Compliance) Specialist to coordinate, lead, and oversee the implementation of governance, risk management, and compliance processes in information security and cyber.
Role Description The role carries responsibility for managing and advancing governance, risk management, and regulatory and standards compliance processes, in close collaboration with technical teams, management, and business units across the organization.Key responsibilities include translating regulatory requirements, standards, and policies into practical work plans, defining the required controls, driving control owners to implement them, and monitoring progress through to completion. hands-on execution of technical controls is required, a strong understanding of the technology domain is essential.
דרישות התפקיד
Background in technology, such as IT infrastructure or cybersecurity, with familiarity with relevant standardsAt least two years of experience in GRC, information security, risk management, compliance, or IT auditSolid knowledge of ISO 27001 and information security management principlesFamiliarity with the Israeli Privacy Protection Law and the Privacy Protection (Data Security) RegulationsExperience writing policies, procedures, control ation, and information security work plansUnderstanding of cyber risk management, as well as vendor and supply chain riskAbility to translate regulatory and professional requirements into actionable tasks and measurable controls
EducationRelevant professional education or training in Information Security, Cybersecurity, IT Infrastructure, Risk Management, or Governance, Risk & Compliance (GRC)