Compliance Manager

At CYDERO, we specialize in delivering cutting-edge cybersecurity services with a human touch. We believe that true security isn't just about systems and protocols - it's about people. Our mission is to empower organizations by combining top-tier cybersecurity expertise with exceptional customer experience.

We are looking for a sharp, proactive, and business-savvy GRC & Compliance Specialist to join our team. Someone who brings strong interpersonal skills, true ownership, and an interest in the intersection of security, compliance, and emerging AI governance.

What You'll Do

• Lead Audits & Certifications: Drive end-to-end ISO 27001 and SOC 2 audits, collaborating directly with external auditing firms and clients.
• Cross-Functional Project Management: Own timelines, coordinate deliverables across multiple internal and external stakeholders, and push initiatives across the finish line.
• AI & Privacy Governance: Establish and operationalize compliance, privacy (GDPR), and security controls around AI systems and generative AI tools.
• Client Engagement: Confidently represent the company in security reviews, answer in-depth vendor security questionnaires, and join client-facing security discussions.
• Bridge Tech & Compliance: Translate complex regulatory requirements into practical operational steps and lead regular risk assessments.

What We're Looking For

• 3+ years of hands-on experience in GRC and information security compliance.
• Proven track record leading both ISO 27001 and SOC 2 audits.
• Strong technical comprehension: Solid grasp of infosec concepts and cloud environments. (No coding or penetration testing skills required, but you must be able to hold a meaningful, technical security conversation).
• High ownership & autonomy: A true self-starter who can run with tasks from 0 to 100 independently and solve problems creatively.
• Project management excellence: Highly organized, detail-oriented, and comfortable managing multiple priorities simultaneously.
• A genuine people person: Warm communication style, great teamwork, and a professional, consultative demeanor with clients.
• High proficiency in both English and Hebrew (written and verbal).

Nice to Have

• Familiarity with AI governance and emerging compliance standards (e.g., ISO 42001, EU AI Act).
• Military/defense cyber or intelligence background.
• Professional certifications (ISO 27001 Lead Implementer, CISA, CISSP, CCSK).
• Familiarity with additional frameworks (NIST, HIPAA, GDPR).