GRC & IT Sec

Company Description CISO99 is a security-focused company built and led by experienced operators rather than traditional consultants. The team views security as a practical, real-world discipline grounded in day-to-day challenges, not abstract theory. CISO99 was founded to help startups move faster by reducing the impact of compliance overhead and security red tape. The company partners closely with growing organizations to build resilient, efficient security practices that support business agility. Team members can expect a dynamic environment where pragmatic solutions and impact are prioritized.

Role Description The GRC & IT Security professional will be responsible for implementing and maintaining governance, risk, and compliance frameworks, as well as supporting core IT security operations. Day-to-day tasks include managing security policies and procedures, overseeing risk assessments, supporting audits, and ensuring adherence to regulatory and industry standards. The role also includes administering network and IT infrastructure components with a security-first mindset, handling troubleshooting and incident response, and providing support to internal stakeholders on security-related issues. This is a full-time, on-site role located in Tel Aviv District, Israel, requiring close collaboration with technical and business teams to balance security, usability, and speed.

Qualifications

• Strong skills in Network Administration and Information Technology to manage and secure infrastructure and systems.
• Proficiency in Network Security and Troubleshooting to identify, analyze, and resolve security and performance issues.
• Effective Customer Service and stakeholder communication skills to support internal teams and explain security requirements clearly.
• Experience with GRC frameworks (e.g., ISO 27001, SOC 2, NIST) and practical knowledge of risk assessment and control implementation.
• Familiarity with security tools such as firewalls, IDS/IPS, endpoint protection, SIEM, and vulnerability management platforms.
• Ability to document policies, procedures, and technical configurations in clear, concise language.
• Comfort working in a fast-paced startup environment with a hands-on, problem-solving approach.
• Bachelor’s degree in Computer Science, Information Security, Information Systems, or a related field, or equivalent practical experience.
• Relevant certifications (e.g., CISSP, CISM, CRISC, CCNA Security, CompTIA Security+) are an advantage.