Information Security Officer jobs in Israel

Description We run Crown Coins, a high-traffic social gaming platform on AWS and GCP. Players pay us, redeem prizes and trust us with their data. You’ll own our security program end to end: strategy, risk, compliance and incident response. You’ll lead a SecOps engineer who sits inside our DevOps team. You’ll partner with the VP R&D on application security, and with Legal and IT on identity, access and compliance. This includes access and control for our external team in the Philippines. Responsibilities • Security strategy and risk: Own the security roadmap and risk register. Report security risk to executive leadership in business terms. • Security operations: Lead the SecOps engineer inside DevOps. Set priorities for cloud security (AWS + GCP), edge protection (Cloudflare), detection and response. Own the incident response plan and lead major incidents. • Application security: Work with the VP R&D to build security into how we ship: threat modeling, code and dependency scanning, pentests and vulnerability management. • Identity and access: Work with IT and Legal to set access policy for employees, contractors and our external Philippines team. This covers SSO, MFA, least privilege, onboarding and offboarding, access reviews, and device and browser controls (JumpCloud, Google Workspace, Island). • Compliance and privacy: Work with Legal on regulatory, payment (PCI DSS) and privacy requirements. Own security audits and vendor risk for vendors and outsourcing partners. • Fraud and abuse: Work with engineering and fraud analysis teams to cut bot abuse, account takeover and fraud before it costs us money. • AI-first security: Drive the use of AI agents for alert triage, access reviews and compliance evidence. Set the guardrails for how the company uses AI tools safely. • Security culture: Write policies people actually follow. Run security awareness training for employees and external staff. Requirements • 7+ years in information security, including 3+ years leading a security program or team at a cloud-native tech company • Deep hands-on knowledge of AWS security, plus working knowledge of GCP • Built an incident response process and led real incidents through to post-incident fixes • Identity and access management at scale: SSO, MFA and least privilege, including access for contractors or offshore teams • Led security audits or certifications (SOC 2, PCI DSS or ISO 27001), and worked with Legal on regulatory and privacy requirements • Built application security programs alongside engineering leaders • Able to explain risk to executives, and hands-on enough to read Terraform, review alerts and challenge engineers on technical detail • Experience using LLMs or AI agents to automate security work Nice to have • Security in gaming, sweepstakes, fintech or payments • Fighting bots, fraud or account takeover at scale • Securing offshore or BPO teams, including the Philippines Data Privacy Act • Hands-on experience with Cloudflare, JumpCloud or Island Enterprise Browser • Certifications such as CISSP, CISM, CCSP or AWS Security Specialty

Description We are looking for an experienced, hands-on CISO & Head of IT to lead the company’s Information Security, Cybersecurity and IT domains. The role combines management, strategy and technical ownership and requires the ability to lead a team and company-wide initiatives while remaining technically involved when needed. Key Responsibilities • Lead and manage the IT & Information Security team, including task prioritization, professional development and day-to-day management. • Build annual and quarterly IT & Security work plans, define priorities and KPIs, track execution, manage budgets and report progress to management. • Define and continuously improve the company’s cybersecurity and IT strategy, architecture, policies and controls. • Own corporate IT infrastructure, including networks, server rooms, cloud environments, endpoints, operating systems, identity infrastructure and business applications. • Own IT service delivery and support operations, including ticket management, service levels, workload and backlog management, user satisfaction, service quality and continuous improvement of the employee IT experience. • Own Identity & Access Management, including SSO, MFA, access lifecycle, privileged access and least-privilege principles. • Manage network and infrastructure security, including firewalls, segmentation, VPN/remote access, monitoring and secure connectivity. • Oversee security operations, including security monitoring, endpoint security, vulnerability management, incident response and investigation. • Work closely with R&D, DevOps and Product teams on cloud security, application security, secure development practices and security architecture. • Own security governance, risk management and compliance programs, including audits, policies, risk assessments and remediation plans. • Lead business continuity, disaster recovery and cybersecurity exercises. • Manage third-party security risk, vendors, contracts, budgets and technology evaluations. • Represent Information Security in customer security reviews and work closely with management and other business stakeholders. Requirements Must Have • 7+ years of relevant experience in Information Security, Cybersecurity and/or IT infrastructure, including 3+ years in a leadership or management role. • Proven experience leading technical teams, including people management, delegation, prioritization and professional development. • Proven ability to build and execute annual and quarterly work plans, manage multiple projects and priorities, define KPIs and track execution. • Strong hands-on technical background and broad understanding of IT infrastructure, networking, IAM and cybersecurity. • Strong understanding of networking, firewalls, segmentation, VPN, DNS, certificates and secure remote access. • Strong knowledge of IAM and authentication concepts, including SSO, MFA, SAML/OIDC, RBAC and access lifecycle management. • Experience managing corporate IT environments, endpoints and IT service/support operations. • Experience with security operations, monitoring, incident response and vulnerability management. • Experience with information security governance, risk management, policies and security audits. • Strong project, vendor and budget management capabilities. • Excellent communication skills and ability to work effectively with technical teams, employees, customers and senior management. • Independent, pragmatic and execution-oriented, with strong problem-solving and decision-making capabilities. Advantages • Experience managing cloud environments, particularly GCP and/or Azure. • Experience with ISO 27001 and SOC 2 implementation, certification and audit processes. • Experience managing server rooms, virtualization and hybrid cloud/on-prem environments. • Experience with Windows, macOS and Linux environments and enterprise endpoint management. • Understanding of DevOps, Kubernetes, containers, CI/CD and modern application security. • Experience with SIEM, EDR and security automation. • Experience in a technology/SaaS company working closely with R&D and DevOps teams. • Experience leading Business Continuity, Disaster Recovery and cybersecurity exercises.