A groundbreaking, well-funded Israeli Digital Health & BioTech startup pioneering a new category of Hybrid Drugs by combining prescription therapeutics with AI-driven digital platforms for personalized clinical care.
Backed by substantial multi-million-dollar funding from leading venture capital firms, the company is advancing large-scale global Phase III clinical trials and expanding strategic partnerships with tier-1 pharmaceutical leaders.
The organization pairs mission-critical medical innovation with rapid commercial scaling, offering an agile, impact-driven engineering and clinical environment. The company is located in the Central region near the train station.
Role Description-
- Serving as a Cybersecurity GRC Lead / Specialist, taking full hands-on ownership to establish, build, and lead the Governance, Risk & Compliance (GRC) domain from the ground up.
- Designing, implementing, and maintaining the corporate Information Security Management System (ISMS) in alignment with ISO 27001 standards.
- Leading organizational cyber risk management processes, including Risk Assessments, Business Impact Analysis (BIA), Business Continuity Planning (BCP), and Disaster Recovery (DRP).
- Ensuring continuous compliance with strict global healthcare and data privacy frameworks, including HIPAA and GDPR.
- Translating complex regulatory and security compliance requirements into actionable technical and operational policies across R&D, Clinical, Quality, and Executive leadership teams.
- Acting as the central security and compliance focal point for customer audits, partner assessments, and third-party risk management.
Requirements-
- Proven hands-on industry experience in GRC, Information Security, or IT Security – Mandatory
- Demonstrated hands-on experience establishing, implementing, or maintaining an ISMS based on ISO 27001 – Significant Advantage
- Practical knowledge in Cyber Risk Assessment, Risk Mitigation, BIA, BCP, and DRP methodologies – Mandatory
- Solid familiarity and working knowledge with global privacy and regulatory standards, specifically GDPR and HIPAA – Mandatory
- Strong ability to work autonomously, take full End-to-End Ownership, and establish security frameworks from scratch – Mandatory
- Excellent communication and stakeholder management skills to bridge regulatory mandates with practical engineering and business workflows – Mandatory