GRC Specialist (37349)

GRC Specialist | Shfela Area

Mertens - MalamTeam is hiring a GRC Specialist to join a leading organization in the Shfela area

The role includes supporting Information Security and Cyber Risk assessments, managing cross-organizational security projects, monitoring security controls, supporting regulatory compliance processes, and working with multiple internal and external stakeholders

Key Responsibilities

Support Information Security and Cyber Risk assessments across systems, processes, and vendors

Manage cross-organizational Information Security projects with internal and external stakeholders

Document findings, assess gaps, and track remediation plans

Perform and monitor periodic Information Security controls

Support vendor and Third-Party Risk Management processes, including distributing security questionnaires, reviewing findings, and tracking required actions

Support compliance with Privacy Protection Regulations, SOX, and organizational requirements

Write, update, and maintain Information Security policies, procedures, guidelines, and documentation

Collect data and prepare reports, presentations, and metrics for Information Security management

Support preparation for internal and external audits and track audit findings

Manage and document tasks in GRC systems and organizational tracking tools

Work closely with Infrastructure, Development, Information Systems, Legal, Privacy, Procurement, and Business teams

Support Information Security training and awareness activities

Requirements

At least 2 years of experience in Information Security, Risk Management, Audit, Compliance, or Security Controls

Experience working with GRC systems, writing procedures, performing controls, or participating in audits

Bachelor's degree or advanced studies in Information Systems, Computer Science, Technology Management, Industrial Engineering and Management, Law, or a relevant field

Familiarity with ISO 27001, NIST, Privacy Protection Regulations, or similar regulatory frameworks

Familiarity with Vendor Risk Management processes

Strong Hebrew writing and communication skills