{"id":4074164,"url":"https://alion.io/job/comm-it-chief-information-security-officer","title":"Chief Information Security Officer","company":{"id":2313062,"name":"Comm-IT","domain":"comm-it.com","url":"https://alion.io/company/comm-it-com","size_band":"11-50","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Comeet","truth_index":{"grade":"B","score":79,"open_postings":12,"ghost_share":0,"stale_share":0.833,"repost_share":0,"time_to_fill_p50_days":28,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Security","role_family":"Security","seniority":"head","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Petah Tikva, Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"OWASP","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Akamai","optional":true},{"name":"Apache Kafka","optional":true},{"name":"Cloudflare","optional":true},{"name":"ElasticSearch","optional":true}],"status":"live","first_seen_at":"2026-11-11T11:08:49Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-11T14:46:41Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Description\nWe are looking for a hands-on, business-oriented Chief Information Security Officer (CISO) in Petah Tikva to lead our information security strategy and strengthen security across our digital platforms, cloud infrastructure, applications, and organizational systems.\nThis role requires a combination of strategic leadership, deep technical expertise, and the ability to work closely with R&D, DevOps, Product, IT, Trust & Safety, and executive management.\nKey Responsibilities:\nSecurity Strategy & Risk Management\nDevelop and lead the company's information security and cybersecurity strategy, aligned with business objectives.\nConduct security risk assessments, identify vulnerabilities, and establish mitigation plans.\nBuild and manage security roadmaps, budgets, policies, KPIs, and reporting to senior management and the Board.\nLead security governance, internal controls, vendor risk management, and audit readiness.\nCloud & Infrastructure Security\nLead security initiatives across AWS cloud infrastructure, Kubernetes, containerized environments, and microservices.\nImplement and maintain Identity and Access Management (IAM) controls, including MFA, least privilege, privileged access management, and periodic access reviews.\nApplication Security & Secure Development\nDrive Application Security (AppSec) practices across web applications, mobile applications, backend services, and APIs.\nImplement and improve secure SDLC processes, including SAST, DAST, SCA, and security testing within CI/CD pipelines.\nProvide security architecture guidance, threat modeling, and secure coding recommendations to R&D teams.\nLead penetration testing, vulnerability assessments, and remediation tracking.\nEnsure appropriate data protection and secure separation between production and non-production environments.\nPlatform Security, Bot Protection & Trust & Safety\nLead technical protection against malicious bots, automated attacks, unauthorized data scraping, and platform abuse.\nOversee security controls such as WAF, bot management, API protection, and rate limiting.\nWork closely with Trust & Safety, Product, and R&D teams to identify and mitigate account compromise, fraud-related security risks, and suspicious automated activity.\nIncident Response & Business Continuity\nDevelop and maintain incident response procedures for cyberattacks, ransomware, data breaches, and other security incidents.\nCoordinate incident investigations, containment, recovery, and post-incident reviews.\nConduct security exercises and improve organizational readiness.\nSupport business continuity and disaster recovery planning.\nCompliance, Privacy & Security Awareness\nEnsure alignment with applicable Israeli privacy and data protection requirements, including the Israeli Privacy Protection Law, Data Security Regulations, and Amendment 13.\nApply recognized security frameworks and methodologies, including ISO 27001, NIST, OWASP, and relevant Israeli cybersecurity guidance.\nRequirements\nRequirements:\n6+ years of professional experience in Information Security or Cybersecurity, including proven experience leading security initiatives, teams, or security programs.\nPrevious experience as a CISO, Head of Information Security, Security Manager, or a senior security professional with broad security ownership.\nStrong hands-on technical experience in Cloud Security, preferably AWS, including cloud architecture, IAM, and infrastructure protection.\nPractical understanding of Kubernetes, Docker, microservices, and modern cloud-native architectures.\nProven experience with Application Security (AppSec), secure software development, API security, and CI/CD security.\nExperience defining and implementing security policies, risk assessments, vulnerability management, and incident response procedures.\nStrong understanding of Israeli privacy and information security regulations, as well as ISO 27001, NIST, and OWASP principles.\nExperience working closely with R&D, DevOps, Product, and IT teams in a technology-driven organization.\nAbility to translate complex technical security risks into clear business recommendations for senior management.\nStrong communication, leadership, decision-making, and cross-functional collaboration skills.\nHands-on mindset, with the ability to combine strategic ownership and practical security execution.\nNice to Have:\nExperience in large-scale B2C platforms, digital marketplaces, high-traffic websites, or SaaS/product companies.\nExperience with bot management and anti-scraping solutions such as Cloudflare, Akamai, HUMAN, or DataDome.\nExperience securing data-intensive environments, including MongoDB, Elasticsearch, Kafka, and distributed systems.\nSoftware development, DevSecOps, or security engineering background.\nRelevant security certifications such as CISSP, CISM, or CCSP.\nExperience with fraud prevention, account protection, and Trust & Safety security challenges.","description_format":"text","description_chars":4906,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Israel","iso":"IL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","IT Outsourcing & Dedicated Teams","Custom Software Development","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-11-11T14:46:41Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":28,"reasons":["conf:1","win:early","comp:brand"],"computed_at":"2026-11-11T15:53:52Z"},"pay":null,"html_url":"https://alion.io/job/comm-it-chief-information-security-officer","json_url":"https://alion.io/job/comm-it-chief-information-security-officer.json","meta":{"generated_at":"2026-11-11T15:53:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29750,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2313062},"rest":"https://alion.io/mcp/rest/get_company?id=2313062"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcomm-it-chief-information-security-officer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcomm-it-chief-information-security-officer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcomm-it-chief-information-security-officer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/comm-it-chief-information-security-officer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcomm-it-chief-information-security-officer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4074164}},{"tool":"search_jobs","arguments":{"company":"comm-it.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4074164},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}