abra

Lead CISO as a Service activities including security strategy development, risk assessments, compliance, and governance frameworks for clients. | At least two years of information security consulting or management experience, relevant degree or certification (CISSP or CISM), and strong communication skills. | abra's Cyber division is seeking a CISO as a Service Consultant to join our team in Central/North Israel. We are looking for a senior and experienced information security consultant who will lead information security activities for the company's customers in a CISO as a Service model. The role requires experience in risk management, leading compliance processes for ISO standards, and privacy protection. Key Responsibilities: Leading CISO as a Service activities for the company's customers, including formulating strategy and work plans. Building and managing information security governance (policies, procedures, controls). Performing cyber and IT risk assessments, gap analysis, and formulating mitigation plans. Guiding and supporting preparation and compliance processes for information security standards (ISO 27001, ISO 27799, ISO 27017). Assisting in the implementation of privacy controls and accompanying processes related to the Privacy Protection Law and GDPR. Providing technological guidance, training, and delivering professional content to customers. Requirements At least two years of experience in information security consulting or management. Proven experience in leading CISO activities: risk management, policy writing, and presentation to management. Practical experience in accompanying ISO 27001 certification. Familiarity with the Privacy Protection Law and its regulations. Relevant education: academic degree / CISSP/CISM certification / comprehensive cyber course (200+ hours). Excellent verbal and written communication skills in Hebrew. Strong interpersonal skills and ability to work with senior executives. Advantages: High-level professional English. Practical experience in accompanying privacy processes (GDPR, working with DPO). location: Central/North Israel (hybrid)