GRC Analyst

We are Outbrain.

We’re one of the world’s largest content recommendation platforms, delighting audiences with engaging, personalized content recommendations while serving as the primary engagement partner and platform for the world’s top digital media companies.

This role is an individual contributor which is part of the GRC domain.

The Governance, Risk, and Compliance team member is responsible for assessing and documenting Outbrain compliance and risk posture as they relate to its information assets.

This role requires technical understanding.

This role will be part of the GRC domain and will collaborate with Product, R&D, MIS, IT, BI and Internal controls.

A day in the life

Collaborate to define and implement cyber security & ITGC standards and develop supporting organizational policies & procedures.

Testing the design and operating effectiveness of technical and administrative security controls

Designing and implementing policies, processes, and procedures to align with

Be the compliance and technical interface between legal, Product and R&D in order to translate regulations to technological requirements as part of the privacy and security by design framework

Partner with various business units to ensure controls are adequate, appropriate, and effective.

Support internal and external audit processes for relevant compliance programs such as SOX and ISO.

Perform security and compliance assessments on new and existing systems, processes, technology.

Perform business impact analysis and assist with the development of IT/InfoSec risk register.

Determine procedures for the aggregation of high-quality, accurate data from multiple information sources including Business Processes, Risk Taxonomy, Issue Management, Monitoring & Testing.

Stay up to date and informed on developing regulatory concerns and changing IT and information security trends.

What you’ll bring

Experience with legal and regulatory compliance standards such as SOX (ITGC), ISO, GDPR, CCPA, PCI-DSS, etc.

Security-related certification, such as CISA or CISM, is an advantage .

Understanding of fundamental information security concepts and technology.

Experience with Privacy domain and PIA processes is advantage

Desired Personal skills:

Excellent interpersonal and communication skills

Strong presentation skills

Advanced project management skills

Ability to work independently as well as within a team

Ability to work in a global environment

Desire for constant improvement

Passion for problem solving and simplification of complex problems

More than snacks!

Nearby parking place is available
Short walking distance from Sapir train station
Expand your toolbox with our mentorship program and internal learning tools
Dog friendly office
Follow your passions, visit the music and game rooms
…and of course a fully stocked kitchen!

We Recommend #LifeAtOutbrain

Outbrain is an equal employment opportunity employer and committed to diversity and inclusion at all stages of recruitment and employment.

Our company culture is welcoming, dynamic, diverse, global, and built on top performance.

Did you know "trust" is one of our core values? We apply this value to our day-to-day by working collaboratively on a global scale. With managers and teammates often sitting in other countries and time zones, we value communication, patience, and open-mindedness to all cultural backgrounds. We encourage all ideas, and everyone gets a seat at the table!

Our team is made up of individuals who are approachable, resourceful, passionate, and proactive. We foster a sense of belonging through our Employee Resource Groups –employee-led groups in which we debate topics and drive change. From OB Green (environmental), OB WE (women empowerment), OB Good (charitable initiatives) to OB4E (diversity, equity, and inclusion), you’ll be able to share your passions with likeminded people.

Dive into the Outbrain experience via our Instagram account!

Hungry for more? Have a closer look at #LifeAtOutbrain exploring our company manifesto, Youtube channel , Outbrain Culture blog and social media channels Facebook, Instagram and LinkedIn.