Description
We are seeking an experienced candidate to lead Cybersecurity Assessments and Audits. This role will also play a key part in developing marketing and business materials, including proposals, and business presentations. The ideal candidate will demonstrate strong leadership capabilities, exceptional communication skills, and a proven ability to articulate complex cybersecurity concepts in a clear, client-focused manner.
Requirements
GRC Requirements:
In-depth knowledge of the NIST Cybersecurity Framework (NIST-CSF).
Governance, risk, and compliance (GRC) frameworks to align cybersecurity initiatives with regulatory requirements and organizational business objectives. Skilled in integrating GRC processes across security programs, supporting risk assessments, and ensuring continuous compliance with industry standards.
Conduct risk assessments and design actionable risk mitigation plans.
Ensuring compliance with industry standards such as NIST-CSF, ISO 27001, and CIS Benchmarks, including overseeing internal audits and remediation activities.
Project Management & Leadership:
Ability to conduct structured cybersecurity maturity assessments and gap analyses using NIST-CSF frameworks.
Experience performing or supporting Cybersecurity Internal Audits: Understanding of audit methodologies, evidence collection, risk/control evaluation, and reporting.
Ability to write, review, and enhance cybersecurity procedures and documentation.
Practical experience in risk assessment, mitigation planning, and ongoing compliance monitoring.
Demonstrated ability to lead and execute client-facing projects, including managing workstreams, deliverables, and stakeholder communications.
Strong organizational and time management skills for juggling parallel assessments, audits, and documentation activities.
Collaboration skills: Comfortable working in cross-disciplinary teams on complex engagements.
Engagement & Communication:
Excellent verbal and written communication skills – Hebrew and English. Capable of drafting professional reports, proposals, and executive briefings.
Client-facing experience: Confident facilitating client workshops, meetings, walkthroughs, and presenting technical information to both technical and non-technical audiences.
Consultative approach: Ability to uncover client needs, recommend actionable improvements, and build lasting client relationships.
Technical Background (Advantages):
Network Security, Zero-Trust Architecture
Cloud Security, SaaS Security
AI Security
Identity and Access Management
BCP / DRP