Supply Chain Analyst

In this role, you will be responsible for managing information security risks across the supply chain, based on threat analysis, risk assessment, and alignment with business needs.

Responsibilities

• Manage and assess information security risks within the organization’s supply chain.
• Conduct vendor security assessments to ensure compliance with company security standards.
• Review vendor contracts and agreements from an information security perspective.
• Perform supplier evaluations through security questionnaires, on-site assessments, technical reports, and direct communication with vendors.
• Analyze vendor security posture and identify risks, gaps, and supply chain vulnerabilities.
• Recommend corrective actions and mitigation strategies to reduce security risks.
• Collaborate with internal stakeholders including procurement, business units, legal teams, and IT departments.
• Work in a highly regulated environment aligned with information security standards and regulatory requirements.

Requirements

• At least 2 years of experience in information security risk management and supply chain security.
• Knowledge of information security regulations and frameworks such as ISO/IEC 27001, GDPR, and Israeli Privacy Protection Law.
• Familiarity with information security regulations in the Israeli financial sector – an advantage.
• Ability to analyze vendor contracts and agreements from a security perspective.
• Experience conducting vendor security assessments, analyzing reports, identifying risks, and recommending remediation actions.
• Familiarity with supply chain and information security management tools used in large organizations.
• Experience working in a financial institution or insurance company – an advantage.
• Relevant certifications such as CISA, CSMP, CSM, CPSM, or similar information security / risk management certifications – an advantage.