GRC Specialist (37321)

GRC Specialist | Mertens – MalamTeam | Shfela Area

Mertens, part of MalamTeam, is looking for a GRC Specialist to join a leading organization in the Shfela area

This is an opportunity to take part in information security, cyber risk, compliance, and governance activities while working closely with technology, legal, privacy, procurement, and business stakeholders

Responsibilities

Support information security and cyber risk assessments across systems, processes, vendors, and third parties

Manage cross-organizational information security projects, controls, findings, gaps, and remediation plans

Support regulatory compliance processes, including Privacy Protection Regulations, SOX, internal and external audits, and organizational requirements

Write and maintain information security policies, procedures, guidelines, and documentation

Manage and document tasks in GRC systems, prepare reports, presentations, and metrics for information security management

Work closely with Infrastructure, Development, Information Systems, Legal, Privacy, Procurement, and business teams, while supporting security training and awareness activities

Requirements

At least 2 years of experience in information security, risk management, audit, compliance, or controls

Experience working with GRC systems, writing procedures, performing controls, or participating in audits

Bachelor's degree or advanced studies in Information Systems, Computer Science, Technology Management, Industrial Engineering and Management, Law, or another relevant field

Familiarity with ISO 27001, NIST, Privacy Protection Regulations, or similar regulatory frameworks

Familiarity with third-party and vendor risk management processes

Excellent Hebrew writing and communication skills