Office of the CISO

Hi. We are esh. A banking technology group with a goal to help accelerate the transition from conflicting banking models to mutual-interest banking models by offering a technology banking solution that incorporates the efficiency of an automated, cloud-based banking operating system platform, enabling to dramatically reduce costs, time constraints and create a better financial environment between the bank and its customers.

In a reality where economic transactions are performed automatically and machine learning keeps developing and challenging traditional models, a new banking platform creates an alternative to outdated core systems used in banks today, and enables for the first time, a complete end to end platform under one modular system. We are creating not only a revolutionary technological change, but also a change in perception for all of us.

We are looking for a Deputy Chief Information Security Officer (DCISO) who will work closely with the CISO to ensure the Bank's information security and compliance with relevant regulations and standards. The DCISO will be responsible for overseeing and implementing various aspects of the organization's cybersecurity program, including GRC, as well as hands-on technical tasks.

This is a great opportunity to elevate the cyber security operations to a whole new level, understanding and securing our cloud-based technology, managing risk assessment and remediation plans and promoting cyber security.

Responsibility

• Develop and maintain information security policies, procedures, and work instructions.
• Conduct cybersecurity risk assessments on systems, processes, vendors.
• Plan and execute cybersecurity drills and employee training programs
• Review and evaluate security findings and develop mitigation strategies
• Create and manage work plans for the information security team
• Propose improvements to logging and alerting systems
• Define and maintain a security maturity program.
• Ensure remediation plans are implemented and carried out
• Execute the Information security audit plan.
• Monitor and analyze SIEM logs and other security data
• Verify and validate security configurations in various systems
• Oversee and participate in penetration testing conducted by external vendors
• Evaluate and compare information security software and security aspects of software solutions

Skills & Knowledge

• Excellent interpersonal skills.
• Ability to work collaboratively with cross-functional teams to achieve shared security goals
• Ability to work well under pressure and manage multiple priorities in a fast-paced environment
• Strong project management and organizational skills
• Excellent communication and presentation skills, with the ability to effectively convey complex technical concepts to both technical and non-technical audiences

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity or in a relevant field
• Relevant professional certifications, such as CISSP, CISM, or CRISC, are highly desirable
• Experience working in a born-in-the-cloud company, with a deep understanding of cloud-native security challenges and best practices.
• Experience of relevant industry regulations and compliance requirements, such as NABATs, Privacy, GDPR, PCI-DSS, or SOC 2
• Minimum of 5 years of experience in information security, with at least 2 years in a leadership role
• Strong understanding of information security frameworks, such as ISO27001, NIST, and CIS Controls
• In-depth knowledge of cybersecurity threats, vulnerabilities, and mitigation strategies
• Hands-on experience with security tools and technologies, including SIEM, firewalls, and intrusion detection/prevention systems
• Familiarity with security testing methodologies, such as penetration testing and vulnerability assessments.

Think you have the passion and inner fire for it? Bring it on and challenge us!

esh is proud to be an equal opportunity workplace. We are committed to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital state, disability or gender identity.