Deputy CISO

At Bank esh, we don’t just think about what the future of banking will look like - we’re building it.

About us:

At esh, we’re not just building another bank, we’re transforming banking in Israel from the ground up with a tech-first approach.

There is no "that’s how it’s always been done" here. Instead, you'll have a genuine opportunity to innovate, take ownership, and shape key processes and products at Israel’s newest bank.

Job Description:

We are looking for a highly skilled, technical, and multidisciplinary Deputy CISO to join our Bank's Information Security team. Reporting directly to the CISO, this key position serves as a right-hand lead in shaping technological strategy, managing risk, and implementing security policy. The role operates as a Senior Individual Contributor (IC) requiring high independence and real-world hands-on capabilities, and a strong 'all hands on deck' mindset.

Responsibilities:

• Strategic & Tech Partnership: Collaborate with the CISO and CIO to design security architecture, implement advanced solutions, and lead end-to-end tech projects.
• Cloud Security & DevSecOps: Guide development teams, define secure cloud architectures, and enforce SSDF.
• Hands-on Execution: Evaluate and deploy security technologies, analyze cyber/infrastructure incidents, and write/review code and scripts.
• GRC & Banking Compliance: Lead GRC end-to-end, manage external pen-testing vendors, handle third-party/supply chain risk, ensure compliance with Bank of Israel regulations, and support audits.
  
  

• 5–10 years of experience in InfoSec and technology as a senior independent function.
• Strong cloud security expertise (AWS preferred; Azure/GCP accepted).
• Hands-on development background or deep technical understanding of CI/CD, containers, Microservices, and API Security.
• Hands-on proficiency at the code, network, and infrastructure levels.
• Excellent interpersonal skills and broad business vision, and strong collaborative abilities.
  
  

• Certifications: CISSP, CISM, CISA, CCSP, or AWS/Cloud Security certifications.
• Experience with financial platforms or core banking systems.
• Real-time Incident Response (IR) experience.
• Deep acquaintance with banking GRC and Bank of Israel guidelines.