P
Chief Information Security Officer
Sin especificarSin especificarSecurity Program ManagementFinTech
Lead information security and cybersecurity strategy for a technology company serving Israel’s capital markets and financial sector. The role covers security governance, risk, regulatory compliance, security operations, and incident response.
Responsabilidades
- Own the organization’s information security and cybersecurity functions and define strategy and annual plans.
- Lead cyber and information-security risk management, identify gaps, and develop mitigation plans.
- Develop, implement, and oversee security policies, procedures, and standards.
- Lead compliance with security and privacy regulations, standards, and customer requirements.
- Advise executives and business stakeholders on information security and cybersecurity matters.
- Guide technology projects and business processes on security from the planning stage.
- Oversee SOC monitoring services, manage security incidents, and make decisions during incidents.
- Manage audits, risk assessments, penetration tests, and follow-up on findings.
- Monitor threats, trends, and emerging technologies and adapt the organization’s defenses.
Requisitos
- At least 10 years of experience in information security and cybersecurity.
- Significant management or senior-level professional experience in information security.
- Experience in financial companies and familiarity with capital-markets regulation.
- Proven experience leading information security strategy and complex work plans.
- Strong knowledge of risk management, governance, and security architecture.
- Knowledge of information-security regulations, standards, and methodologies, including ISO 27001 and NIST.
- Broad technical understanding of infrastructure, networking, information systems, cloud, secure architecture, and application security.
- Experience leading cyber incidents and incident-response processes.
- Hands-on experience leading security projects involving SIEM, XDR/EDR, cloud application security, WAF, DDoS protection, or secure development.
- High level of English.
- Strong decision-making, communication, and cross-functional leadership skills.