GRC Specialist

GRC & Privacy Specialist | Central Israel

A leading organization is looking for an experienced GRC & Privacy Specialist to lead regulatory compliance, privacy, information security governance, risk management, and control processes across a complex enterprise environment.

The role combines hands-on GRC expertise with regulatory compliance, ISO standards, risk assessments, audits, third-party cyber risk, and privacy, working closely with business, technology, legal, procurement, and risk functions.

What You'll Do

• Assess regulatory compliance and lead remediation programs
• Develop and support compliance programs based on ISO information security, privacy, cloud, and incident management standards
• Write and maintain policies, procedures, standards, and governance documentation
• Monitor regulatory developments and assess their organizational impact
• Lead internal and external audits and work with regulatory stakeholders
• Conduct information security and business process risk assessments
• Track findings and drive remediation activities
• Manage cyber risks across the supply chain and support SCRM processes
• Assess and support third parties throughout the vendor lifecycle
• Lead security awareness programs, training, campaigns, and phishing simulations
• Collaborate with Technology, Digital, Procurement, Legal, Risk, and business teams
• Participate in organizational privacy and information security committees

What We're Looking For

• 4+ years of professional GRC experience
• Proven experience writing information security policies, procedures, and compliance documentation
• Strong knowledge of ISO 27001 and related information security and privacy standards
• Familiarity with GDPR, NIST, SOC 2, and privacy regulations
• Experience conducting information security and business risk assessments
• Experience leading or supporting internal and external information security audits
• Experience with regulatory compliance and remediation processes
• Experience with security awareness programs and internal training
• Excellent written and verbal communication skills in Hebrew and English
• Strong cross-functional capabilities and ability to operate in complex organizational environments

Strong Advantages

Legal or Industrial Engineering & Management academic background and experience working in large, complex organizations.

Central Israel | Full-time