GRC Specialist

About the Job

We are looking for a GRC Specialist to join our cybersecurity team. The role involves executing projects in governance, risk management, and compliance (GRC) for Cybecs customers, working closely with IT teams, CISOs, and business stakeholders to ensure adherence to leading regulations and standards.

This is an opportunity to join a challenging, professional, and impactful work environment, where you can play a significant role in protecting the organization's critical information and developing advanced cybersecurity strategies.

What You'll Be Doing

• Managing and implementing GRC frameworks in the organization according to standards such as ISO 27001, NIST, GDPR, and SOC 2.
• Conducting risk assessments and identifying compliance gaps in information security and privacy.
• Developing and implementing policies, procedures, and security controls, balancing security with business requirements.
• Monitoring and understanding the impact of international laws and regulations on the organization's operations.
• Working closely with IT, DevOps, CISO, legal teams, and business units to ensure compliance with security requirements.
• Managing audit processes and compliance reviews with clients, partners, and regulatory authorities.
• Promoting a security awareness culture through training, simulations, and best practices implementation.
  

What We Need To See

• At least 1 year of experience in GRC, risk management, or information security.
• Strong knowledge of leading regulations and standards (ISO 27001, NIST, GDPR, SOC2, TPPA - Israel).
• Experience in conducting risk assessments and implementing security controls within an organization.
• Strong analytical skills and the ability to solve complex problems.
• Excellent communication and process management skills when working with senior stakeholders.
• Professional certifications such as CISM, and ISO 27001 Lead Auditor – a significant advantage.
  

Why Join Us?

• We offer a dynamic, hybrid, and collaborative work environment where you can make an impact on information security and help protect critical systems. If you are looking for your next challenge in the GRC world, join us and help lead the next generation of cybersecurity!