Назад
Company hidden
12 дней назад

Senior GRC Analyst

Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
c1
Страна
Israel
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior GRC Analyst (Security, Risk & Compliance): Strengthening governance, risk, and compliance practices across a global advertising technology organization with an accent on security controls, regulatory alignment, audits, and third-party risk. Focus on conducting risk assessments, supporting SOX ITGC and ISO audits, evaluating new technologies, and driving practical remediation with technical and business stakeholders.

Location: Netanya, Israel; hybrid work with 2 remote days per week

Company

hirify.global is an omnichannel advertising platform building digital advertising products for premium publishers, advertisers, and agencies, operating at global scale with AI-supported technology.

What you will do

  • Develop, implement, and maintain GRC frameworks, policies, procedures, and internal controls.
  • Perform risk assessments across internal processes, infrastructure, applications, and third-party vendors.
  • Support internal and external audits, including SOX ITGC, ISO 27001/27017/27032, TISAX, and SOC 1.
  • Prepare audit evidence, test controls, track findings, and follow remediation activities through resolution.
  • Respond to customer security questionnaires, due diligence requests, and regulatory compliance reviews.
  • Collaborate with IT, Security, Engineering, Legal, Procurement, Internal Audit, and business stakeholders to translate requirements into practical actions.

Requirements

  • Senior-level GRC experience in a fast-paced, publicly traded, or large enterprise environment.
  • Deep understanding of IT/R&D operations, global compliance regulations, and corporate governance frameworks.
  • Experience representing and defending compliance posture, risk practices, and security controls before auditors, regulators, and certification bodies.
  • Exceptional English communication skills and the ability to explain complex security and compliance requirements to technical and non-technical stakeholders.
  • Business-oriented, risk-based approach with strong ownership, initiative, and stakeholder-influence skills.

Nice to have

  • Experience with major organizational change or post-merger scaling.
  • Professional certifications such as CISA, CRISC, CISSP, or CISM.
  • Combined enterprise legal/compliance expertise and technical infrastructure knowledge.

Culture & Benefits

  • Work with global Security, Engineering, IT, Legal, and business teams across more than 30 markets.
  • 35+ days off per year, hybrid work, fully covered parental leave, and reserved daycare places.
  • Family health insurance, daily meal vouchers, profit-sharing, competitive compensation, and remote work subsidy.
  • Training, technology conferences, professional certification support, and internal mobility opportunities.
  • Premium work equipment, team-building events, sustainability initiatives, and employee resource groups.

Hiring process

  • Submit a CV in English.
  • Complete the recruitment process steps described by the hiring team.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →