Security Researcher

A groundbreaking, well-funded Israeli Digital Health & BioTech startup pioneering a new category of Hybrid Drugs by combining prescription therapeutics with AI-driven digital platforms for personalized clinical care.

Backed by substantial multi-million-dollar funding from leading venture capital firms, the company is advancing large-scale global Phase III clinical trials and expanding strategic partnerships with tier-1 pharmaceutical leaders.

The organization pairs mission-critical medical innovation with rapid commercial scaling, offering an agile, impact-driven engineering and clinical environment. The company is located in the Central region near the train station.

Role Description-

• Serving as a Cybersecurity GRC Lead / Specialist, taking full hands-on ownership to establish, build, and lead the Governance, Risk & Compliance (GRC) domain from the ground up.
• Designing, implementing, and maintaining the corporate Information Security Management System (ISMS) in alignment with ISO 27001 standards.
• Leading organizational cyber risk management processes, including Risk Assessments, Business Impact Analysis (BIA), Business Continuity Planning (BCP), and Disaster Recovery (DRP).
• Ensuring continuous compliance with strict global healthcare and data privacy frameworks, including HIPAA and GDPR.
• Translating complex regulatory and security compliance requirements into actionable technical and operational policies across R&D, Clinical, Quality, and Executive leadership teams.
• Acting as the central security and compliance focal point for customer audits, partner assessments, and third-party risk management.

Requirements-

• Proven hands-on industry experience in GRC, Information Security, or IT Security – Mandatory
• Demonstrated hands-on experience establishing, implementing, or maintaining an ISMS based on ISO 27001 – Significant Advantage
• Practical knowledge in Cyber Risk Assessment, Risk Mitigation, BIA, BCP, and DRP methodologies – Mandatory
• Solid familiarity and working knowledge with global privacy and regulatory standards, specifically GDPR and HIPAA – Mandatory
• Strong ability to work autonomously, take full End-to-End Ownership, and establish security frameworks from scratch – Mandatory
• Excellent communication and stakeholder management skills to bridge regulatory mandates with practical engineering and business workflows – Mandatory