Information Security Engineer – GRC & Compliance

Your tasks

The role carries responsibility for managing and advancing governance, risk management, and regulatory and standards compliance processes, in close collaboration with technical teams, management, and business units across the organization. Key responsibilities include translating regulatory requirements, standards, and policies into practical work plans, defining the required controls, driving control owners to implement them, and monitoring progress through to completion. hands-on execution of technical controls is required, a strong understanding of the technology domain is essential.

Requirements

Background in technology, such as IT infrastructure or cybersecurity, with familiarity with relevant standards

• At least two years of experience in GRC, information security, risk management, compliance, or IT audit
• Solid knowledge of ISO 27001 and information security management principles
• Familiarity with the Israeli Privacy Protection Law and the Privacy Protection (Data Security) Regulations
• Experience writing policies, procedures, control ation, and information security work plans
• Understanding of cyber risk management, as well as vendor and supply chain risk
• Ability to translate regulatory and professional requirements into actionable tasks and measurable controls

Education Relevant professional education or training in Information Security, Cybersecurity, IT Infrastructure, Risk Management, or Governance, Risk & Compliance (GRC)