Information Security Consultant (GRC) and Privacy Specialist

abra • Wheaton, IL

21d • Hybrid

About The Position

abra North is seeking an experienced and highly skilled Information Security Consultant (GRC) and Privacy Specialist with proven expertise in governance, risk management, compliance, and data protection. This role operates within the central region, is a full-time position, and utilizes a hybrid work model.

Requirements

• Academic degree in a relevant field, or completion of a recognized cybersecurity/information security program (200+ hours).
• 2+ years of experience in methodological consulting or in managing information security within organizations.
• Strong knowledge of ISO 27001 and familiarity with sector‑specific regulations (e.g., financial, healthcare).
• Proven experience in privacy compliance and understanding of the DPO role.
• Excellent writing skills in Hebrew and English, with the ability to produce professional policies and procedures.
• Solid understanding of IT environments and enterprise security technologies (EDR, DLP, IAM, Cloud Security).

Nice To Haves

• Relevant certifications such as CISM, CISA, CIPP/E, CRISC.
• Experience working with regulators (e.g., the Israeli Privacy Protection Authority, Israel National Cyber Directorate).
• Consulting experience in the financial or healthcare sectors, including standards such as HIPAA or HITRUST.

Responsibilities

• Lead certification and compliance programs for international standards such as ISO 27001, ISO 27799, and ISO 27017.
• Provide guidance on privacy and regulatory requirements, including GDPR and the Israeli Protection of Privacy Law (with emphasis on Amendment 13).
• Deliver CISO‑as‑a‑Service, including building and managing security programs, driving risk management activities, and presenting status and recommendations to executive leadership and boards.
• Conduct Cyber/IT Risk Assessments, perform Gap Analyses, and develop actionable remediation plans.
• Develop methodological frameworks, including security policies, procedures, and annual work plans aligned with industry best practices.
• Provide high‑level advisory support to align technical security solutions (EDR, DLP, Cloud Security, IAM, etc.) with regulatory and organizational requirements.
• Deliver cybersecurity and privacy awareness training for employees and management.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree