Information Security Specialist (37363)

Information Security Specialist | Gush Dan

Mertens - MalamTeam is hiring an Information Security Specialist to join a leading organization in the Gush Dan area

The role includes leading the Information Security domain end to end across the organization, providing management with an up-to-date security overview, engaging leadership in advancing security initiatives, and providing professional reporting to the Information Protection Unit at General Management

Key Responsibilities

Lead the Information Security domain end to end across the organization

Present an up-to-date Information Security status to management and promote management engagement in security initiatives

Provide professional reporting to the Information Protection Unit at General Management

Work with ISO 27001, ISO 27799, DPO, CISO, Privacy Protection Regulations, and Ministry of Health directives

Conduct risk assessments and gap analysis

Build an Information Security strategy and annual and multi-year work plans

Manage Information Security incidents and corrective controls

Implement Information Security policies and procedures

Lead compliance with regulatory and Information Security requirements

Map organizational assets and infrastructure

Manage supply chain and third-party risks, including cloud services

Promote employee security awareness and deliver training

Adapt the Business Continuity Plan to address cyber incidents

Requirements

Proven hands-on experience supporting end-to-end projects from an Information Security perspective and providing professional guidance to implementation teams

Experience working in a regulated environment and with Information Security standards, including writing policies and procedures

Strong analytical capabilities, system-level thinking, analysis skills, and independent learning abilities

Knowledge and understanding of international Information Security standards, with an emphasis on ISO 27001 and ISO 27799

Professional Information Security training and certifications are required, including at least one of the following: CISO, DPO, or ISO Auditor