Cyber Security GRC Specialist & Risk Surveyor

About the Role

We are seeking a meticulous and strategically-minded Cyber Security Risk Surveyor to join our elite consulting team. In this pivotal role, you will evaluate the security posture of diverse organizations, pinpointing both structural and technical vulnerabilities while architecting strategic roadmaps for risk mitigation. You will serve as the critical link between complex technical flaws and their tangible business impact.

• Cyber Risk Assessments: Execute end-to-end security surveys aligned with leading industry frameworks, including NIST, ISO 27001, SOC2, and INCD directives.
• Gap Analysis: Conduct deep-dive reviews of network architecture, cloud environments (AWS/Azure/GCP), and IAM policies to expose hidden security loopholes.
• Maturity Modeling: Benchmark organizational cyber maturity and deliver actionable, data-driven insights to C-level stakeholders.
• Third-Party Risk Management (TPRM): Vet the security integrity of critical vendors and global supply chain partners.
• Executive Reporting: Author high-impact technical and executive reports, translating sophisticated findings into prioritized, business-centric remediation plans.

• Experience: 3+ years of proven expertise in Cyber Security Consulting, Auditing, or Risk Assessment.
• Technical Proficiency: Comprehensive understanding of infrastructure security, including Next-Gen Firewalls, EDR/XDR, Identity Governance, and Cloud Security (CSPM/CWPP).
• Framework Expertise: Demonstrated experience with Israeli National Cyber Directorate (INCD) methodologies and international compliance standards.
• Certifications: Professional designations such as CISA, CISM, CRISC, or CISSP are a significant advantage.
• Communication: Exceptional command of both English and Hebrew (written and verbal), with the ability to command a room of both technical engineers and executive management.
• Analytical Mindset: A "detective" approach to problem-solving—identifying critical gaps that others overlook.