GRC & Cyber Awareness Analyst

A leading enterprise organization is seeking a GRC Analyst to join its cybersecurity team and play a key role in strengthening cyber resilience. Key Responsibilities Lead cybersecurity awareness programs, including phishing simulation campaigns and employee training Manage cybersecurity risk across organizational processes Perform internal cybersecurity assessments and controls Prepare periodic reports for management regarding security posture and compliance with GRC regulations and standards At least 2 years of experience in GRC / Information Security — mandatory Proven experience in cybersecurity awareness initiatives, including phishing and employee training — mandatory Experience in drafting policies, procedures, and risk management documentation — mandatory Strong familiarity with GDPR, Israeli Privacy Protection Law, ISO27001 and financial compliance requirements — mandatory Experience conducting internal audits, reporting to management, and tracking remediation progress — mandatory