Privacy & Cyber Risk Manager (24117)

Job Description:

• Manage the organization’s information security and privacy risk management framework.
• Conduct Risk Assessments for systems, processes, and vendors.
• Implement policies and develop procedures in the field of privacy protection in accordance with relevant regulations.
• Manage interfaces with the Legal Department, DPO, IT, and business units.
• Support technological projects with respect to privacy and information security aspects.
• Monitor risk mitigation plans and report to management on compliance status and exposures.
• Define an annual work plan for penetration tests and risk assessments for databases.
• Work closely with system owners to close gaps and findings, including follow-up reviews.
• Operate in a matrix environment, coordinating and engaging multiple stakeholders within and outside the department.
• Collaborate with internal organizational teams as well as external parties (vendors, implementers, etc.).

Requirements:

• At least 3 years of experience in information security and cyber, with emphasis on cyber risk management, privacy risk, operational, technological, and regulatory risks.
• Knowledge of relevant regulations and standards: Israeli Privacy Protection Regulations, ISO 27001.
• Proven experience with methodologies, standards, concepts, and technologies in the information security domain.
• Experience in building and implementing information security and privacy policies and procedures.