Information Security Risk Management Specialist

A leading financial organization based in Ramat Gan is looking for an experienced professional for a challenging and dynamic position in information security risk management. The role includes full responsibility for managing cyber and technology risks, performing hands-on assessments and controls, coordinating with various stakeholders, and leading initiatives to strengthen the organization’s security posture.

Responsibilities:

• Identify, assess, and manage information security and technology risks
• Perform professional reviews, checks, and hands-on assessments across diverse systems
• Serve as a key point of expertise and provide continuous professional support in the field
• Coordinate and liaise between IT teams, external consultants, and business units
• Prepare risk surveys, professional reports, and procedural documentation
• Lead cross-organizational processes related to risk management
• Proactively learn and stay current with relevant technologies, frameworks, and standards
  

Professional Experience:

• Experience working in a SOC (Security Operations Center) and/or as a Cyber Analyst – mandatory
• At least 3 years of experience in information security or cyber risk management – mandatory
• Hands-on experience with operating systems, computer networks, and cloud infrastructures – mandatory
• Strong technical background and familiarity with complex enterprise environments – mandatory
• Experience working with information security teams and IT managers – mandatory
• Advantage: Experience in consulting companies or financial organizations

Education and Skills:

• Bachelor’s degree in Industrial Engineering and Management, Information Systems Engineering, Computer Science, or a related field – mandatory
• High level of independence, initiative, and analytical thinking
• Autodidactic skills and the ability to self-learn in a dynamic and intensive work environment
• Excellent interpersonal and communication skills with the ability to collaborate with diverse stakeholders
• Experience managing cross-organizational processes
• Knowledge of scripting or programming languages such as Python, Bash, or PowerShell
• Familiarity with cyber event management systems and intrusion detection tools (SIEM, IDS/IPS)