Information Security Governance Specialist @Frontify

Overview

Frontify is seeking an Information Security Governance Specialist to help ensure the security governance maturity of its platform, which serves leading organizations like Volkswagen, Microsoft, and Telefónica. The role focuses on transforming governance processes through automation and AI, enhancing compliance and security assurance efforts.

Key Responsibilities

• Own customer security assurance, managing enterprise security questionnaires, due diligence requests, and audits.
• Drive day-to-day operations and continuous improvement of compliance programs, including ISO 27001 and SOC 2.
• Serve as a subject matter expert during audits to ensure an effective control environment.
• Introduce automation and AI to improve compliance processes and governance workflows.
• Enhance Frontify's vendor risk management program by automating security assessments.
• Contribute to improving the security awareness program for employees.

Requirements

• 5+ years of experience in information security governance, GRC, or technology risk in a SaaS or cloud environment.
• Experience as a subject matter expert in SOC 2 and/or ISO 27001 audits.
• Proficient with GRC platforms, preferably Vanta and Conveyor.
• Ability to apply AI to compliance work effectively.
• Strong communication skills, able to convey risk to technical and business audiences.
• Fluent in English; knowledge of German is a plus.
• Relevant certification (CISA, CISM, CISSP, CIPP, or similar) is advantageous.

Benefits

• A minimum of 25 days annual leave per year.
• Parental, family care, and bereavement leave.
• Daily sickness benefits and accident insurance.
• Paid educational and wellbeing days off.
• Wellbeing, learning and development, and commuter allowance.
• Home office setup budget.
• Pension fund with contributions split between the company and employee.
• Access to exclusive perks and discounts from hundreds of top brands.
• Workation: Work from inspiring locations for up to 45 days per year.
• Invitation to the summer company meet-up.

Location

This role is primarily remote, with the expectation of attending the St. Gallen office once a week.

How to Apply

If interested, candidates are encouraged to apply despite not meeting all listed qualifications.

Deadline

No specific deadline stated.