Chief Information Security Officer

🕒 Job Type: Full-time

🛡️ Department: Governance, Risk, and Compliance (GRC)

📍 Location: 1-2 days/week at Central region client sites, remainder at our Tel Aviv office

About Datafence

Datafence is a leading boutique cyber compliance and advisory firm based in Tel Aviv-Yafo, specializing in helping businesses protect their assets through tailored cybersecurity and compliance solutions. We serve as trusted governance, legal, and technology advisors to top organizations, guiding them through secure digital transformation with services such as CISO as a Service, DPO as a Service, risk assessments, and global compliance certifications, including ISO 27001, ISO 42001, and SOC 2.

Position Overview

This is an exciting opportunity to take on a high-impact role delivering full-time CISO-as-a-Service solutions for some of our premier clients, who are fast-paced start-ups and established leaders in the technology field. This is a hands-on, client-facing role for someone who has already served as a CISO or in a similar senior security role.

While this is not a people-management position, it demands exceptional project management skills, a deep sense of accountability, and a high capacity for cross-functional collaboration. The role includes 1-2 days per week at client sites in the central region of Israel (Dan Area), with the rest of the week based at Datafence's Tel Aviv offices.

Key Responsibilities

· Serve as the CISO as a Service focal point for multiple dedicated client accounts, managing ongoing security and GRC workstreams

· Build and drive client security roadmaps, compliance plans, risk registers, policies, and control implementation plans

· Lead security compliance audits, including ISO 27001 and SOC 2 NIST, and privacy regulations

· Manage multiple client projects end-to-end, including timelines, deliverables, follow-ups, and stakeholder coordination

· Conduct risk assessments, gap analysis, internal audits, security maturity reviews, and audit-readiness activities

· Prepare clear client-facing documentation, reports, dashboards, meeting summaries, and executive-level recommendations

· Work closely with client executives, R&D, product, IT, legal, privacy, and operations teams

· Participate in regular client meetings and on-site client work while collaborating closely with the Datafence team

Required Qualifications

· 3-4 years of proven record and hands-on experience working specifically as a CISO, or similar senior cybersecurity role

· Strong project management capabilities with a demonstrated track record of handling high levels of responsibility and juggling multiple clients or complex initiatives simultaneously

· Deep familiarity with GRC frameworks, risk management best practices, and conducting compliance assessments (e.g., ISO 27001, SOC 2)

· Excellent communication and interpersonal skills in both Hebrew and English (written and verbal), with the ability to interface effectively with technical teams

· Demonstrated professional presence, a service-oriented attitude, and an exceptional ability to work well with other people as a collaborative partner

Preferred Qualifications

· Relevant certifications (e.g., CISM, CISSP, CISA, CRISC, CISO)

· Experience working with startups, SaaS companies, or technology-driven organizations

· Experience preparing organizations for ISO 27001, SOC 2, or other security/compliance audits

· Familiarity with cloud security, SSDLC, supply-chain management, privacy compliance, and AI governance

Benefits

Alongside a competitive salary and full social benefits, we invest deeply in your professional growth. Each team member receives a personalized development plan. As you grow, we offer clear advancement paths aligned with your professional progress and career aspirations.