Senior GRC specialist

About us

Hi. We are esh. A banking technology group with a goal to take the world of finance and march it to the 21st century by offering a technology banking solution that incorporates the efficiency of an automated, cloud-based banking operating system platform, enabling to dramatically reduce costs, time constraints and create a better financial environment between the bank and its customers.

In a reality where economic transactions are performed automatically and machine learning keeps developing and challenging traditional models, a new banking platform creates an alternative to outdated core systems used in banks today, and enables for the first time, a complete end to end platform under one modular system. We are creating not only a revolutionary technological change, but also a change in perception for all of us.

Job Description

We are looking for a Senior GRC Specialist, experienced with cyber security regulations, financial institutions, and related compliance such as SOC2. This is a great opportunity to elevate the cyber security operations to a whole new level, understanding and securing our cloud-based technology, managing risk assessment and remediation plans, and promoting cyber security.

Responsibilities

• Design and maintain processes, policies and related guidelines.
• Conduct risk assessment on systems, processes, vendors.
• Define and maintain a security maturity program.
• Ensure remediation plans are implemented and carried out
• Lead our compliance operations, including ISO27001, SOC2.
• Develop, deliver and maintain an ongoing Information security awareness program
• Execute the Information security audit plan.
• Operate and utilize GRC tools.

Requirements

• At least 8 years of information security, risk management and compliance experience.
• Experience in information security regulations and best practices such as: SOC2, CIS, NIST and privacy laws.
• Experience in leading a company to SOC2 certification.
• Knowledge of risk assessment methodologies
• Experience in major risk assessment projects and activities.
• Hands-on experience in building awareness programs, including evaluating effectiveness.
• Experience on assessment of existing security controls and defining new controls and solutions
• Ability to take proactive initiative given general direction
• Strong oral and written communications and presentation skills

Think you have the passion and inner fire for it? Bring it on and challenge us!

esh is proud to be an equal opportunity workplace. We are committed to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, marital state, disability or gender identity.