Information Security & Cybersecurity Specialist (38021)

Information Security & Cybersecurity Specialist | Ashdod

Mertens Malam Team is hiring an Information Security & Cybersecurity Specialist for a leading healthcare organization in Ashdod

The role involves supporting the management of hospital information security and cybersecurity operations, serving as a substitute for the CISO, and leading compliance with ISO 27001, ISO 27799, and Ministry of Health regulatory requirements

Key Responsibilities:

Supporting the management of information security and cybersecurity operations and acting as a substitute for the CISO

Leading ISO 27001 and ISO 27799 compliance and certification processes

Ensuring compliance with Ministry of Health regulations

Managing information security risks and conducting access control and permissions reviews

Assessing vendor risks and supply chain security

Developing information security policies and procedures

Leading security audits and cybersecurity awareness training

Working with FW, EDR/XDR, SIEM, SOC, DLP, MFA, Active Directory, Azure, and M365 environments

Overseeing cybersecurity incident response, vulnerability management, and system hardening

Requirements:

At least 2 years of experience in information security, including proven experience preparing organizations for ISO 27001 certification is mandatory

Experience conducting permissions reviews and access control assessments in enterprise systems is mandatory

Hands-on technical knowledge of security systems, networks, Active Directory, Azure, and M365 environments is mandatory

Experience working with SOC and SIEM is mandatory

Experience in information security risk management, vendor assessments, supply chain security, policy development, and cybersecurity awareness training is mandatory

Bachelor's degree in a technology-related field or equivalent relevant education is mandatory

Preferred Qualifications:

Experience with ISO 27799 or within a healthcare organization is a significant advantage

ISO 27001 Lead Auditor, CISSP, CISM, or CISA certifications are an advantage