Cyber Security Analyst – GRC & Hands‑On Role

About the role

We are seeking a junior‑to‑mid level Cyber Security Analyst to join our cybersecurity team in a blended Governance, Risk & Compliance (GRC) and hands‑on security capacity. The position splits roughly 50% on GRC activities and 50% on daily security operations, offering a unique chance to develop expertise across both domains while working on‑site with experienced professionals.

Key responsibilities

• Assist in creating and maintaining security policies, procedures, and GRC documentation.
• Participate in risk assessments, document risks, and track mitigation actions.
• Support compliance initiatives for standards such as ISO 27001, GDPR, NIST, and SOC 2.
• Collect and organize audit evidence for internal and external audits.
• Collaborate with IT and business units to monitor remediation actions and improve risk controls.
• Support daily security monitoring, incident investigation, and documentation.
• Track vulnerabilities and coordinate remediation with IT teams.
• Operate security tools such as SIEM platforms, endpoint protection solutions, and vulnerability scanners.
• Maintain security playbooks, procedures, and operational documentation.

Required profile

• 1–3 years of experience in cybersecurity, information security, or a related field (military experience welcomed).
• Basic understanding of cyber threats, security controls, and data‑protection regulations (e.g., GDPR, Israeli Privacy Law).
• Strong attention to detail, solid documentation abilities, and good communication skills.
• Fluency in Hebrew and English, both spoken and written.

Required skills

• SIEM platforms
• Endpoint protection solutions
• Vulnerability scanning tools

What we offer

• Hands‑on experience across GRC and technical security functions.
• Mentoring and professional growth within a dedicated cybersecurity team.
• Exposure to real‑world audits, risk management, and security operations.
• Long‑term career development opportunities in information security.