Chief Information Security Officer

Commit

. Develop and lead the company's information security and cybersecurity strategy aligned with business objectives .

Posted 11/11/2026full-timePetah Tikva • IsraelLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in developing and leading information security strategies, with a strong focus on cloud security, risk management, and compliance with Israeli privacy regulations. Proven ability to translate complex security risks into actionable business recommendations while fostering cross-functional collaboration.

Highest-signal resume keywords

Information Security LeadershipCloud Security (AWS)Application Security (AppSec)Incident Response ProceduresIsraeli Privacy Regulations

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Risk AssessmentsVulnerability ManagementIAM ControlsSecure SDLC ProcessesPenetration TestingThreat ModelingData ProtectionBot ManagementAPI SecurityCloud-Native Architectures

Soft Skills

LeadershipDecision-MakingCross-Functional CollaborationCommunicationStrategic Ownership

Tools & Technologies

AWSKubernetesDockerCI/CD PipelinesWAFCloudflareAkamaiHUMANDataDomeMongoDB

Certifications & Qualifications

CISSPCISMCCSP

Industry Keywords

ISO 27001NISTOWASPData Security RegulationsIsraeli Privacy Protection LawCybersecurity StrategyDigital MarketplacesB2C PlatformsHigh-Traffic WebsitesSaaS

Tech Stack

Tools & technologies

AWSCloudCyber SecurityDistributed SystemsDockerElasticSearchKafkaKubernetesMicroservicesMongoDBSDLC

About the role

Key responsibilities & impact

Develop and lead the company's information security and cybersecurity strategy aligned with business objectives
Conduct security risk assessments, identify vulnerabilities, and establish mitigation plans
Build and manage security roadmaps, budgets, policies, KPIs, and reporting to senior management and the Board
Lead security governance, internal controls, vendor risk management, and audit readiness
Lead security initiatives across AWS cloud infrastructure, Kubernetes, containerized environments, and microservices
Implement and maintain IAM controls, including MFA, least privilege, privileged access management, and periodic access reviews
Drive AppSec practices across web applications, mobile applications, backend services, and APIs
Implement and improve secure SDLC processes, including SAST, DAST, SCA, and security testing within CI/CD pipelines
Provide security architecture guidance, threat modeling, and secure coding recommendations to R&D teams
Lead penetration testing, vulnerability assessments, and remediation tracking
Ensure appropriate data protection and secure separation between production and non-production environments
Lead technical protection against malicious bots, automated attacks, unauthorized data scraping, and platform abuse
Oversee WAF, bot management, API protection, and rate limiting controls
Work with Trust & Safety, Product, and R&D teams to mitigate account compromise, fraud-related security risks, and suspicious automated activity
Develop and maintain incident response procedures for cyberattacks, ransomware, data breaches, and other security incidents
Coordinate incident investigations, containment, recovery, and post-incident reviews
Conduct security exercises and improve organizational readiness
Support business continuity and disaster recovery planning
Ensure alignment with applicable Israeli privacy and data protection requirements, including the Israeli Privacy Protection Law, Data Security Regulations, and Amendment 13
Apply security frameworks and methodologies including ISO 27001, NIST, OWASP, and relevant Israeli cybersecurity guidance

Requirements

What you’ll need

6+ years of professional experience in Information Security or Cybersecurity, including proven experience leading security initiatives, teams, or security programs
Previous experience as a CISO, Head of Information Security, Security Manager, or a senior security professional with broad security ownership
Strong hands-on technical experience in Cloud Security, preferably AWS, including cloud architecture, IAM, and infrastructure protection
Practical understanding of Kubernetes, Docker, microservices, and modern cloud-native architectures
Proven experience with Application Security (AppSec), secure software development, API security, and CI/CD security
Experience defining and implementing security policies, risk assessments, vulnerability management, and incident response procedures
Strong understanding of Israeli privacy and information security regulations, as well as ISO 27001, NIST, and OWASP principles
Experience working closely with R&D, DevOps, Product, and IT teams in a technology-driven organization
Ability to translate complex technical security risks into clear business recommendations for senior management
Strong communication, leadership, decision-making, and cross-functional collaboration skills
Hands-on mindset, with the ability to combine strategic ownership and practical security execution
Experience in large-scale B2C platforms, digital marketplaces, high-traffic websites, or SaaS/product companies is nice to have
Experience with bot management and anti-scraping solutions such as Cloudflare, Akamai, HUMAN, or DataDome is nice to have
Experience securing data-intensive environments, including MongoDB, Elasticsearch, Kafka, and distributed systems is nice to have
Software development, DevSecOps, or security engineering background is nice to have
Relevant security certifications such as CISSP, CISM, or CCSP are nice to have
Experience with fraud prevention, account protection, and Trust & Safety security challenges is nice to have

Benefits

Comp & perks

No specific benefits or compensation extras stated