abra · 5 days ago
Information Security Consultant (GRC) & Privacy Specialist
Center District, Center, IL
Full-time
Hybrid
Entry, Mid Level
2+ years expabra North is seeking an experienced and highly skilled Information Security Consultant (GRC) and Privacy Specialist with proven expertise in governance, risk management, compliance, and data protection. The role involves leading certification and compliance programs, providing guidance on privacy and regulatory requirements, and delivering CISO-as-a-Service among other responsibilities.
Information TechnologyProduct DesignSoftware
Responsibilities
Lead certification and compliance programs for international standards such as ISO 27001, ISO 27799, and ISO 27017
Provide guidance on privacy and regulatory requirements, including GDPR and the Israeli Protection of Privacy Law (with emphasis on Amendment 13)
Deliver CISO‑as‑a‑Service, including building and managing security programs, driving risk management activities, and presenting status and recommendations to executive leadership and boards
Conduct Cyber/IT Risk Assessments, perform Gap Analyses, and develop actionable remediation plans
Develop methodological frameworks, including security policies, procedures, and annual work plans aligned with industry best practices
Provide high‑level advisory support to align technical security solutions (EDR, DLP, Cloud Security, IAM, etc.) with regulatory and organizational requirements
Deliver cybersecurity and privacy awareness training for employees and management
Qualification
Required
Academic degree in a relevant field, or completion of a recognized cybersecurity/information security program (200+ hours)
2+ years of experience in methodological consulting or in managing information security within organizations
Strong knowledge of ISO 27001 and familiarity with sector‑specific regulations (e.g., financial, healthcare)
Proven experience in privacy compliance and understanding of the DPO role
Excellent writing skills in Hebrew and English, with the ability to produce professional policies and procedures
Solid understanding of IT environments and enterprise security technologies (EDR, DLP, IAM, Cloud Security)
Preferred
Relevant certifications such as CISM, CISA, CIPP/E, CRISC
Experience working with regulators (e.g., the Israeli Privacy Protection Authority, Israel National Cyber Directorate)
Consulting experience in the financial or healthcare sectors, including standards such as HIPAA or HITRUST
Company
abra
Devalore (now abra R&D Solutions) is an Israeli based boutique software development company, that is driven by quality and efficiency.
51-200 employees
Funding
Current Stage
Growth StageCompany data provided by crunchbase