GRC Specialist

NEXT’s mission is to help entrepreneurs thrive. We’re doing that by building the only technology-led, full-stack provider of small business insurance in the industry, taking on the entire value chain and transforming the customer experience.

Simly put, wherever you find small businesses, you’ll find NEXT.

Since 2016, we’ve helped hundreds of thousands of small business customers across the United States get fast, customized and affordable coverage. We’re backed by industry leaders in insurance and tech, and we still have room to grow — that’s where you come in.

We’re looking for a Governance, Risk & Compliance (GRC) Specialist to join our Information Security team in Kfar Saba. You’ll work closely with security, engineering, and data teams to maintain and enhance NEXT’s compliance and risk management programs, supporting Post-Merger Integration (PMI) activities with our parent group, ERGO and Munich Re.

This is a hands-on, cross-functional role for someone who enjoys connecting policy to practice, and process to impact.

What You’ll Do:

• Support internal and external audits (SOX ITGC, ISO27001, NYDFS, CPRA) and maintain evidence for ongoing compliance.
• Maintain and improve information security policies, standards, and procedures
• Lead security awareness and social engineering programs, and analyze campaign results to identify risk trends.
• Conduct Cyber Security, Privacy, and AI risk assessments across business units.
• Maintain and track the corporate risk register, and partner with business owners to mitigate risks.
• Collaborate with Security, R&D, DevOps and Data teams to integrate security into development and operations.
• Enhance and automate GRC processes, leveraging AI and modern tooling.

What We Need:

• 3–5 years of experience in Information Security, GRC, or Risk Management.
• Strong Knowledge of Data Privacy principles, laws and regulations.
• Solid understanding of Cloud Infrastructure Security (AWS).
• Relevant certifications (CISSP, CISM, CIPP/US, CIPP/E) – advantage.
• Excellent English communication skills (written and verbal).
• Strong analytical and organizational abilities, with a collaborative mindset.
• Background in insurance, financial services, or other regulated sectors – advantage.
• Experience from a Big 4 firm – advantage.