GRC Specialist

We are hiring a GRC Specialist for a Financial Company in Central Israel

Responsibilities:

-Manage and assess cyber and IT risks, including third-party (supply chain) risks

-Support the implementation and monitoring of governance, risk, and compliance processes

-Ensure adherence to relevant regulations and standards such as ISO27001, SOC2, PCI-DSS, Privacy Protection Law, and internal GRC policies

-Coordinate and review vendor security questionnaires and manage automated survey tools

-Contribute to internal and external audits, compliance reviews, and risk assessments

Requirements:

• 3 years of experience in information security and cybersecurity
• Experience with supply chain risks, cyber risks, and technology risks
• Familiarity with regulations and standards such as ISO27001, SOC2, PCI-DSS, the Privacy Protection Law, and GRC frameworks
• Academic degree or relevant certification in IT and information security – an advantage
• Familiarity with vendor assessment questionnaires or automated questionnaire tools – an advantage