Information Security Officer (ISO)

Job Brief:

 The JDC ("The Joint") Information Technology unit is seeking to recruit an Information Security Officer (ISO) to oversee information security and privacy requirements of the IT platforms used for management of the organization's social welfare programs. JDC develops and runs multiple programs, together with partners in the Israeli government ministries and other NGO's, to promote disadvantaged populations in Israeli society. The composition of the portfolio of social welfare programs varies from year to year.

Responsibilities:

• Coordinate, accompany, and assist in information security projects such as penetration tests, information security assessments and risk surveys

o  Map and update the inventory of IT systems used by JDC's social programs with system characteristics, assessment schedules, and contact information

o  Manage the relationship between JDC program managers and external information security consultants

o  Coordinate and schedule information security surveys and penetration tests including follow-up and re-testing

o  Coordinate remediation of gaps discovered in assessments and penetration tests

• Coordinate and manage activities on behalf of the JDC for reporting and handling information security incidents. Document the investigation at all stages of investigation and remediation.
• Respond to inquiries regarding information security from program managers in JDC social programs and JDC website managers
•  Guide and monitor of the implementation of information security activities under the responsibility of the social program managers (such as updating lists of end-users and access permissions to IT systems)
• Review information security considerations in selecting welfare program IT platform extensions and interfaces with program managers

Job requirements and qualifications:

• At least three years of experience in project management in the field of information technology or information security
• Bachelor's degree in a relevant field and recognized information security certification such as CISSP, CISM, CISA
• Proven knowledge of information security concepts
• Experience in planning privacy protection in IT system design
• Familiarity with Israeli Privacy Protection Law
• Experience in dealing with information security consultants, implementers, and vendors
• Experience with providing service and working with end users
• Experience with the back-office management interface of a SaaS platform, especially Salesforce – significant advantage
• Experience in working with information security experts or auditors - significant advantage
• Familiarity with information security standards and frameworks such as: NIST, ISO27001, CSA - advantage
• Understanding SDLC Secure Development – advantage
• Excellent level of English

We are looking for a candidate with the ability to handle multiple tasks simultaneously, service-oriented, excellent interpersonal relations, and the ability to mediate communication between information security experts and people with limited technical background.

Additional information:

Location: JDC offices in Jerusalem (hybrid work: two to three times per week on-site). Immediate availability.

Employer: JDC International

Apply now!!! Resumes can be submitted using the form until 8/10/2023 Only relevant applications will be answered.