The GRC Specialist will lead risk management programs, oversee security projects, and ensure compliance with regulatory standards while collaborating with various stakeholders.
Description
We are seeking a skilled and experienced GRC Specialist to join our boutique global GRC team. As a key member of the team, you will be at the forefront of managing the security department's risk and mitigation program and leading complex, cross-organizational strategic projects associated with various aspects of security. Reporting to the GRC & Operations Lead, this position is ideal for a strategic thinker and proactive problem-solver with fast execution skills and strong technical capabilities. You will effectively collaborate with both technical (R&D, IT, CIO) and non-technical (Legal, Procurement) stakeholders across various seniority levels.
About The Role
Security risk management:
- Lead the development and execution of the security department's risk and control program to identify, evaluate, and manage potential risks across the organization.
- Ensure the program aligns with industry best practices and provides actionable insights and recommendations to security leadership (Platform Security, CyberDefence and GRC).
- Continuously monitor and assess the effectiveness of risk management strategies and make necessary adjustments.
Cross-organizational security projects:
- Lead complex cross-functional projects aimed at mitigating security risks and aligning them with strategic objectives of the department and company.
- Bring structure and clarity to complex and ambiguous situations, define project goals, plans, timelines, and resources and manage them effectively.
- Ensure projects are executed on time and successfully by coordinating with various stakeholders, both technical (R&D, IT, CIO) and non-technical (Legal, Procurement).
Security operations:
- Provide ongoing support for the team’s activities, such as the third-party risk management program, to identify, assess, and manage risks related to sensitive and critical third-party vendors and partners.
- Build efficient GRC workflows using automation, AI capabilities and other innovative technologies.
- Develop and maintain security policies, procedures, and guidelines to ensure compliance with regulatory requirements, as needed.
Requirements
- Minimum of 3-5 years of experience in GRC positions within SaaS companies, and experience with SaaS-specific security challenges.
- Ability to effectively communicate complex security concepts and requirements to technical stakeholders, including developers and system administrators
- In-depth knowledge of information security regulatory requirements and industry standards, such as ISO 27001, GDPR, and NIST.
- Proven track record of successfully managing third-party risks and implementing risk management frameworks.
- Excellent project management skills, with the ability to lead cross-organizational initiatives and drive change.
- Strong analytical and problem-solving abilities, with a keen attention to detail.
- Exceptional communication and interpersonal skills, capable of influencing and collaborating with stakeholders at all levels.
- Ability to work in a fast-paced, dynamic environment and adapt to changing priorities.
- Familiarity with emerging technologies and their impact on security and risk management.
- Proficiency in English and Hebrew, both written and spoken, to effectively communicate with local and global teams and stakeholders.
Social Title
None
Social Description
None
Our Team
None
Position Type
None
About The Team (Internal)
None
Internal requirements
None
Top Skills
Gdpr
Iso 27001
Nist
Similar Jobs at monday.com
Productivity • Sales • Software
The Senior Cyber Security Analyst will oversee SOC initiatives, manage security alerts, design incident response plans, and optimize security monitoring tools while ensuring continuous learning and adaptation to industry threats.
Top Skills:
CloudMachine LearningSIEMSplunkUeba
Productivity • Sales • Software
The Senior Cloud Infrastructure Security Specialist will enhance cloud security initiatives, lead incident response, and work with cross-functional teams to protect against vulnerabilities.
Top Skills:
Ci/CdCloud Detection And ResponseCloud SecurityDevOpsDevsecopsFirewall Rules ManagementLinuxNetworkingOwasp
Productivity • Sales • Software
The Application Security Researcher will conduct penetration testing, manage the bug bounty program, and enhance platform security through collaboration with R&D teams.
Top Skills:
AutomationOwasp FrameworkWeb Penetration Testing
What you need to know about the San Francisco Tech Scene
San Francisco and the surrounding Bay Area attracts more startup funding than any other region in the world. Home to Stanford University and UC Berkeley, leading VC firms and several of the world’s most valuable companies, the Bay Area is the place to go for anyone looking to make it big in the tech industry. That said, San Francisco has a lot to offer beyond technology thanks to a thriving art and music scene, excellent food and a short drive to several of the country’s most beautiful recreational areas.
Key Facts About San Francisco Tech
- Number of Tech Workers: 365,500; 13.9% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Google, Apple, Salesforce, Meta
- Key Industries: Artificial intelligence, cloud computing, fintech, consumer technology, software
- Funding Landscape: $50.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Sequoia Capital, Andreessen Horowitz, Bessemer Venture Partners, Greylock Partners, Khosla Ventures, Kleiner Perkins
- Research Centers and Universities: Stanford University; University of California, Berkeley; University of San Francisco; Santa Clara University; Ames Research Center; Center for AI Safety; California Institute for Regenerative Medicine
