Information Security GRC Specialist
Core
Lead information security governance, risk management, compliance, and audit processes to ensure alignment with organizational policies, security standards, and regulatory requirements.
Role type
Information Security GRC Specialist
Builds
Security policies, compliance frameworks, audit responses, and risk management plans
Domain
Information Security / Cybersecurity / Compliance
Deliverable
dashboards & analysis
Required skills
ISO 27001, security audit and control processes, information security policies and procedures, information security risk assessment, security controls, SOX and ITGC controls, third-party security risk assessments, security questionnaires, contractual security clauses
Preferred skills
NIST Cybersecurity Framework, Israeli Privacy Protection Law and Regulations, enterprise environments, multiple systems and vendors
Responsibilities
Develop, update, validate, and implement information security policies and procedures; Support compliance with ISO 27001 standards and relevant regulatory requirements; Coordinate SOX and ITGC controls related to information systems; Prepare for and support internal and external information security audits; Conduct periodic security compliance reviews and monitor the implementation of security policies; Manage information security risk assessments for vendors and third parties; Review and respond to security questionnaires from vendors, customers, and business partners; Prepare responses to information security requirements in tenders and business agreements; Review security requirements and contractual security clauses in collaboration with relevant stakeholders; Coordinate risk assessments, audit findings, remediation plans, and follow-up activities; Prepare reports, status updates, and presentations for management and steering committees; Collaborate with IT, Legal, Procurement, Risk Management, and external vendors