Cybersecurity GRC Specialist

A leading financial company in the central region is seeking a Cybersecurity GRC Specialist

Looking for a role where you can make a real impact in risk management and organizational information protection? Join a dynamic and professional team in the field of Cybersecurity and GRC!

Job Description:

As a Cybersecurity GRC Specialist, you will be responsible for managing the GRC domain, including conducting risk assessments, developing policies and procedures, overseeing security awareness programs and information security surveys, supporting compliance efforts across projects, and managing third-party and supply chain security risks. You will also assist the CISO with administrative tasks and the oversight of cybersecurity projects.

Key Responsibilities:

• Execute the cybersecurity GRC work plan (Governance, Risk, and Compliance)
• Perform ongoing cyber risk assessments and identify vulnerabilities
• Develop and write security policies, procedures, and guidelines
• Lead and manage information security surveys
• Drive the organization’s security awareness program
• Monitor compliance with regulatory requirements (e.g., Privacy Protection Law, Israeli NBAT guidelines)
• Guide and support projects in meeting security compliance requirements

Requirements:

• At least 2 years of proven experience in the GRC field within cybersecurity
• Experience in cyber risk assessments and managing supply chain security risks
• Familiarity with relevant regulations such as the Privacy Protection Law and NBAT guidelines
• Experience in writing procedures, policies, forms, and supporting documentation
• Background in information security awareness and training programs
• Experience in conducting or managing security surveys – a significant advantage
• Familiarity with the financial sector – an advantage