As Business Information Security Officer, you will develop a deep understanding of a Divisional line of business to gain specialized knowledge to support information security risk-based decision making. This close partnership will ensure a focus on the right risk priorities and ensuring timely delivery of security services. You will also provide guidance on information security topics, policies, controls, and support adoption of new projects, security tools and processes.
You will work closely with Divisional IT and Business unit %28Itamar Medical%29 to carry out information security strategy. You will use your soft skills to help implement a set of security standards and best practices for the organization and your past technical and security skills to recommend security enhancements to management as needed. Your functions will include:
Consulting, Risk Management, and Advising
Ensure timely consulting and advising business groups, projects teams and individuals on translating cyber security policies and standards into requirements, ensuring effective cyber security/technology risk management and appropriate control and compliance activities. Develop relationships, participate in project planning meetings, and ensure proper level of security advisory and assessment occur to support the business. This includes assistance with industry audits, response and management of audit findings
Identify Risk
You must constantly monitor their organization’s networks and systems for security breaches or intrusions. Monitor systems and alerts that helps to notify of intrusions and watch out for irregular system behavior. Tailored Risk reporting must be created and presented to leadership and technical stakeholders
Information Security Planning
You will help plan and carry out Divisional risk reduction by building relationships with Divisional IT and Business partners. They advocate for standards and best practices for the organization and recommend security enhancements to management as needed. They develop strategies to remediate vulnerabilities and reduce organizational risk while ensuring timely security service delivery to support Divisional strategic goals and projects. Engage Enterprise Cybersecurity teams where additional subject matter expertise is needed in support of Divisional priorities.
Help Implement Safeguards
You will use strong project management skills to support the implementation of security capabilities, such as data encryption programs, antivirus, and data loss prevention solutions to protect organizations’ sensitive information. Assisting users with installation or implementation of new security products and procedures to protect our data and systems will also be required. Workings closely with Divisional IT to provide hands on management of enterprise security tools and support Divisional technology risk reduction by advising on remediation.
Facilitate Security Breach Response
If a breach has occurred, the Head of Business Information will lead a matrixed team to conduct incident response activities to minimize the impact. Afterwards, they lead a technical and forensic investigation into how the breach happened and the extent of the damage. They prepare reports of their findings to be reported to management.
Education/Experience:
5+ years in Information Security
2+ years in Risk Management
1 or more of listed certifications is desired –
CISSP %28Certified Information Systems Security Professional%29
CISA %28Certified Information Systems Auditor%29
CISM %28Certified Information Security Manager%29 or similar certification
GIAC management, defense, or cloud certifications
Excellent communication skills in Hebrew and English.
Skills/Abilities/Knowledge:
Strong knowledge of risk management/risk quantification
Strong knowledge of risk specific to cloud computing technologies, vulnerability management, and application security
Knowledge of HIPAA, GDPR, ISO27001, is desired
Working knowledge of anti-virus software, intrusion detection, firewalls, and content filtering.
Experience supporting adoption of security tools
Ability to communicate security concepts to technical and non-technical audiences
Strong abilities to present in front of peers, customers, and executive teams, both digital and in person
Experience designing secure networks, systems, and application architectures
Experience planning, researching, and developing security policies, standards, and procedures
Project Management skills and ability to multi-task
Experience producing and delivering executive reports
Ability to work in a fast-paced environment during emergencies.
Exceptional customer service and relationship building skills
