Junior GRC Specialist

Who We Are:

Yael Group is a leading group of companies in the market, providing advanced technological solutions across diverse fields to organizations in all sectors of the economy.

Job Description:

• Drafting and updating work procedures in the field of cybersecurity for the Information Systems Division
• Defining and implementing cross-organizational work processes within the division in cybersecurity, in accordance with organizational policies and regulatory guidelines
• Creating ongoing control mechanisms and leading routines to reduce exposures
• Initiating and leading preventive activities to improve the resilience of information systems in the field of cybersecurity
• Ongoing collaboration with Information Security, Infrastructure, Development, Risk Management, and Audit teams
• Matrix management of tasks with various teams and stakeholders across the organization
• Supporting IT division projects in cybersecurity contexts
• Serving as a knowledge hub in the field of cybersecurity within the Information Systems Division
• Presenting statuses to management and tracking task execution within the Information Systems Division

Requirements:

• Familiarity with the field of information security, security standards (such as ISO 27001, NIST), regulations (such as SOX, GDPR), and risk management methodologies
• Experience in leading cross-organizational processes, working with multiple interfaces, and matrix management capabilities
• Full proficiency in Office applications, with emphasis on Excel (formulas, Pivot) and PowerPoint (including building presentations and presenting findings professionally)
• Strong verbal and written communication skills
• Strong ability to analyze and present information, and to write documents and procedures at a professional level
• Experience in managing information security findings in a technological or financial organization – an advantage
• Experience in building and implementing operational and technical controls – an advantage
• Experience working with findings management systems such as GRC or vulnerability monitoring and management systems – an advantage
• Relevant academic degree (Computer Science / Information Systems / Risk Management / Industrial Engineering and Management) – an advantage