GRC & Privacy Specialist

A leading technology division within a large and impactful organization is looking for a GRC & Privacy Specialist to join a dynamic role at the intersection of cybersecurity, privacy, regulatory compliance, and risk management

What you’ll do:

• Assess regulatory compliance and lead remediation programs
• Develop, manage, and support ISO compliance programs across information security, privacy, incident management, and cloud risk
• Write and maintain organizational policies, procedures, and security standards
• Monitor regulatory changes and assess their impact on the organization
• Lead internal and external audits and maintain ongoing communication with regulators
• Lead information security awareness programs, including training, e-learning, internal campaigns, and phishing simulations
• Lead risk assessments for systems and business processes, including cross-organizational assessments
• Manage cybersecurity risks across the supply chain and lead SCRM processes
• Support information security throughout the vendor lifecycle, including vendor questionnaires and annual assessments
• Work closely with Infrastructure, Digital, Procurement, Legal, Risk Management, and business units
• Participate in organizational forums and committees related to privacy and information security

Requirements:

• 4+ years of experience in GRC – Mandatory
• Proven experience writing information security policies and compliance documentation – Mandatory
• Strong understanding of international security standards and regulatory frameworks, including ISO 27001/27799/27701/27017/27035, GDPR, NIST, SOC 2, and ISO 42001
• Strong understanding of Israeli privacy and cybersecurity regulations
• Experience conducting risk assessments for business processes and systems
• Experience in cybersecurity or operational risk management
• Experience leading internal and external information security and compliance audits
• Experience managing security awareness programs and delivering internal training
• Excellent Hebrew and English communication and writing skills
• Strong organizational, analytical, and cross-functional communication skills
• Systematic thinking, flexibility, and a strong ability to work independently