GRC Supply Chain Analyst (Ref: 5401)

We are looking for a skilled GRC Supply Chain Analyst to join our team in a leading organization. In this role, you will be responsible for managing information security risks within the supply chain, ensuring our business resilience and compliance across all vendor touchpoints.

What You’ll Do:

• Manage End-to-End Risks: Lead information security risk management for the supply chain based on threat intelligence, risk analysis, and business objectives.
• Vendor Compliance & Audits: Execute rigorous controls to ensure vendor compliance through contract analysis, on-site visits, security questionnaires, technical reports, and direct stakeholder engagement.
• Cross-Functional Collaboration: Work closely with Procurement, Business Units, Legal, and IT departments to align security requirements with organizational goals.
• Regulatory Alignment: Operate within a highly regulated environment, ensuring adherence to global and local information security standards.

Requirements:

• Experience: At least 2 years of experience in Information Security Risk Management with a focus on Supply Chain/Third-Party Risk Management (TPRM).
• Regulatory Knowledge: Deep understanding of GDPR, the Israeli Privacy Protection Law, and ISO 27001.
• Financial Expertise: Proven familiarity with information security regulations applicable to the Israeli Financial Sector.
• Contract Analysis: Ability to analyze vendor contracts and agreements from an information security and data protection perspective.
• Audit & Remediation: Extensive experience in conducting vendor surveys/audits, analyzing technical reports, identifying supply chain risks, and recommending effective corrective actions.
• Tech Savvy: Familiarity with GRC and Supply Chain Management tools used in large-scale organizations.

Advantages:

• Experience within the Financial or Insurance sectors.
• Professional certifications: CISA, CISM, C-SAMP, CPSM, CRISC, or similar information security/risk management credentials.

The position is open to both men and women alike.

#GRC #SupplyChainSecurity #CyberSecurity #InfoSecJobs #Hiring #ThirdPartyRisk #RiskManagement #IsraelJobs