We are looking for a Deputy CISO - 4987

We are looking for a Deputy CISO

Location: Tel Aviv - Bnei Brak

Job Description:

Responsible for managing tasks in the field of information security and promoting relevant issues among teams; responsible for the organizational information security action plan. Defining and writing requirement documents, procedures, and information security policies. Responsible for the technological risk management process and procedures. Responsible for influencing processes and the lifecycle of projects and systems from an information security perspective. Responsible for initiating, defining, and managing technological surveys and audits. Leading information security standards, ISO 27001, Privacy Protection Act guidelines, Bank of Israel regulatory guidelines, and various information security approaches. Responsible for relations with the regulator, ongoing updates, and various material requirements. Responsible for the activity of external consultants in the areas of hardening, surveys, penetration tests, and audits. Responsible for regular updates on new information security risks. Participation in information security monitoring activities. Assistance to the Chief Information Security Officer, Infrastructure Manager, and Information Systems Manager. Defining information security requirements in system development processes, communications, and procurement. Defining security requirements for systems and technologies (architecture, firewalls, EPP, DLP, Application Control, whitelisting, SIEM, and more). Accompanying cyber and information security events. Employee awareness in the field of information security. Reports to the Chief Information Security Officer.

Job Requirements:

Experience working in a financial organization - an advantage. Experience in a regulated and information security standards environment - an advantage. Familiarity with ISO 27001, NIST, or similar standards - mandatory. Familiarity with the Privacy Protection Law / GDPR - mandatory. Experience in audit processes and writing procedures - mandatory. At least 3 years of experience in information security/compliance - mandatory. Professional certifications (CISSP, CISA, or similar) - mandatory.