Cybersecurity Policy Manager (23677)

Who we are:

Yael Group is a leading group of companies in the Israeli market, providing advanced technological solutions across diverse domains to organizations in all sectors of the economy.

Job Description:

• Drafting and updating work instructions in the field of cyber for the Information Systems Department.
• Defining and implementing cross-departmental workflows within the department in the field of cyber, according to organizational policies and regulatory guidelines.
• Creating ongoing control mechanisms and leading work routines to reduce exposures.
• Initiating and leading preventive activities to improve the resilience of information systems in the cyber domain.
• Daily collaboration with information security, infrastructure, development, risk management, and audit teams.
• Matrix management of tasks with various teams and stakeholders within the organization.
• Supporting projects in the Information Systems Department in cyber-related contexts.
• Acting as a knowledge hub in the field of cyber defense within the Information Systems Department.
• Presenting status reports to management and tracking task execution in the Information Systems Department.

Job Requirements:

• Familiarity with information security, security standards (e.g., ISO 27001, NIST), regulations (e.g., SOX, GDPR), and risk management methodologies.
• Experience leading cross-organizational processes, working with multiple interfaces, and matrix management skills.
• Full proficiency in Office applications, with emphasis on Excel (formulas, Pivot) and PowerPoint (including creating presentations and professionally presenting findings).
• Strong written and verbal communication skills.
• High ability to analyze and present information, write documents, and procedures at a professional level.
• Experience managing information security findings in a technology or financial organization – advantage.
• Experience in building and implementing operational and technical controls – advantage.
• Experience working with findings management systems such as GRC or monitoring and vulnerability management systems – advantage.
• Relevant academic education (Computer Science / Information Systems / Risk Management / Industrial Engineering and Management) – advantage.