GRC Analyst

At CYDERO, we specialize in delivering cutting-edge cybersecurity services with a human touch. We believe that true security isn't just about systems and protocols - it's about people. Our mission is to empower organizations by combining top-tier cybersecurity expertise with exceptional customer experience.

We're looking for a GRC Analyst with data protection expertise to help clients navigate regulatory requirements and lead privacy initiatives.

Key Responsibilities

• Guide clients through compliance frameworks (HIPAA, SOC 2, GDPR, ISO 27001, PCI-DSS, CCPA)
• Serve as data protection authority across multiple jurisdictions
• Develop policies, procedures, and compliance documentation
• Conduct assessments, audits, gap analyses, and Data Protection Impact Assessments (DPIAs)
• Manage data breach response and regulatory notifications
• Collaborate with auditors, regulatory bodies, and supervisory authorities
• Create compliance strategies and executive-level reports

Requirements:

• Strong analytical and problem-solving skills with privacy-first mindset
• Excellent English and Hebrew communication (written and verbal)
• Deep understanding of data protection regulations (GDPR, CCPA, etc.)
• Systems thinking and data analysis capabilities
• Ability to work with C-level executives and external stakeholders
• Cross-functional collaboration with legal, IT, and business teams

Advantages:

• Legal background OR extensive GRC/compliance experience with privacy focus
• DPO certification (CIPP/E, CIPM, or equivalent)
• Prior DPO or Privacy Officer experience
• Technical background with GRC/privacy expertise
• Military intelligence background (8200 unit preferred)

What We Offer:

• Unlimited growth potential
• Exposure to diverse industries and regulatory environments
• Direct client interaction and strategic advisory role